We respect your privacy and collect only the data genuinely needed to operate the Portal. Below we explain exactly what, why and for how long we process it, who we may share it with, and how you can manage your data.
1. Who we are and what this Policy covers
GrantHub (the "Portal", "we") is an open informational web portal that gathers open grant calls, donor information and training resources for non-governmental and charitable organisations, communities and other applicants in Ukraine, in one place.
This Privacy Policy explains what personal data we process when you use the Portal, subscribe to updates or request our services, and describes your rights and how to exercise them. We act as a personal-data controller within the meaning of the Law of Ukraine "On Protection of Personal Data".
2. What data we collect
We deliberately limit data collection to the minimum needed to operate the service. We process:
- Contact-form and service-order data - name, email, phone (optional), organisation name and a description of your request or project, which you provide voluntarily.
- Subscription data - the email address you leave to receive grant digests and updates.
- Technical data - anonymised information about site usage: device and browser type, approximate region, pages viewed. We receive this data in aggregated form through analytics.
- Cookies - small technical records in your browser needed for the site to work and for anonymised statistics.
We do not collect special categories of personal data (health, political views, etc.) and we do not ask you to provide payment details on the Portal itself.
3. Why we process data
Personal data is used exclusively for the following purposes:
- responding to your inquiries and providing ordered services (grant matching, consultation, application support);
- sending grant digests and updates, if you have subscribed to them;
- maintaining the operation, security and stability of the Portal;
- improving the content and usability of the service based on anonymised statistics.
We do not use your data for automated decision-making that produces legal effects concerning you.
4. Legal bases for processing
We process personal data on the following bases:
- Your consent - when you subscribe to the mailing list or submit a form (consent can be withdrawn at any time).
- Performance of a contract - when processing is needed to provide a paid service you ordered.
- Our legitimate interest - in ensuring the operation, security and development of the Portal, provided this does not override your rights.
6. Who we share data with
We do not sell your personal data and do not share it with third parties for advertising purposes. Limited access to data may be granted only to service providers that support the Portal's operation (for example, hosting, analytics, mailing services), and only to the extent needed to provide those services. We may also disclose data where the law directly requires it.
7. How long we keep data
We keep personal data only as long as needed for the purposes it was collected for: inquiry data - until communication is complete and a reasonable period afterwards; subscription data - until you unsubscribe. After that, the data is deleted or anonymised.
8. Your rights
Regarding your personal data, you have the right to:
- access it and find out exactly how it is processed;
- request correction of inaccurate or updating of outdated data;
- request deletion of data or restriction of its processing;
- withdraw previously given consent (this does not affect the lawfulness of prior processing);
- object to processing and file a complaint with the Ukrainian Parliament Commissioner for Human Rights.
To exercise any of these rights, contact us via the contact form. We will respond within a reasonable time.
9. Data security
We apply organisational and technical measures to protect personal data from unauthorised access, loss or disclosure. However, no method of transmitting data over the internet is completely secure, so we cannot guarantee absolute security.
10. Children's data
The Portal is intended for adult users and organisation representatives. We do not knowingly collect personal data from persons under 16 years of age. If you believe a child has provided us with their data, please contact us and we will delete it.
11. Changes to this Policy
We may periodically update this Policy to reflect changes in the service or legislation. The current version is always available on this page, and the date in the "Updated" field indicates the latest revision. We announce material changes separately where possible.
12. Contacts
For any questions about privacy and personal-data processing, contact us via the contact form.
