Privacy Notice

Privacy Notice

This website ( and all associated webpages, the “Site”) belongs to Nesta (“we”, “us”) – for the purpose of Nesta’s Rocket Fund Programme. You can find our full details below.

Sponsorcraft Limited (trading as Hubbub), a company registered in England & Wales with registered number 07699834 with its registered office at 9 Eaton Crescent, Bristol, BS8 2EJ, United Kingdom, is providing the software platform for the Site to Nesta under licence.

The Rocket Fund Blog is hosted by the blog hosting platform which is provided by Automattic Inc and its subsidiary companies (“Automattic”).

Stripe is used to process donations made on the Site, and to process payments of those donations to Project creators. Project creators are required to set up an account with Stripe in order to receive payment of donations made to their Projects. For information on how Stripe uses personal information, see its privacy policy.

This privacy policy explains how Nesta uses personal information we collect via this site in relation to the Rocket Fund programme. We are committed to protecting your privacy and we take all reasonable precautions to safeguard personal information. This website contains links to other websites. We encourage you to read the privacy statements on the other websites you visit.

This policy (together with our Terms and any other documents referred to in them) sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Certain definitions set out in our Terms also apply in this policy. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.

1. What kind of information do we collect?

Registration as a Project Creator: If you register as a Project Creator you will be asked for your name, name of your school, email address, occupation and other contact details such as a contact phone number. For verification purposes, you may also be asked to provide the bank account details for the Project Creator’s school or (or, if relevant, the school’s parent-teacher association). You may also upload media content such as photos or videos onto the Site, by using Rocket Fund’s social media channels (for example Facebook, Twitter or YouTube). You may provide us with other personal information when you participate in discussions on the Site, use Rocket Fund’s social media channels.

Registration as a Donor: If you register to pledge a donation you will be asked for your name, email address (including any email address provided to Stripe for processing payments), and other contact details, social media information, pledge information, phone number, personal description and images such as photographs, videos or avatars.

Registration as a Supplier: If you register to have your product listed on the Site (via a Template Project) you will be asked for your name, company information, email address, phone number, payment details, information about your products and images such as photographs or videos. This information will be provided to our payment provider, Stripe, for the purposes of preparing and delivering invoices to you and processing payment transactions.

Sign-up details: If you sign up to receive our newsletters on the site, we will ask you for personal information such as your name, email address, occupation and other contact details such as a contact phone number.

Feedback: We may also ask you for feedback about the Rocket Fund or to complete surveys.

Online activity: When you use our website, we obtain information about the device from which you accessed it, your visits and use of the Site including IP address, location, browser type and version, referrer and activity. We record your activity and preferences when visiting the sites through the use of cookies (see "Cookies", below).

Your posts and communications: If you post content or communicate via the Site, we may also ask for your name, occupation and the organisation you may work for. We also store and monitor your content and communications.

2. What do we do with information we collect and what is our legal basis for this?

Third party processors: As is indicated below, we may use third party platforms and processors to deliver newsletters, process payments, process surveys, and process any request to update your data contact preferences. In using these third parties we are pursuing our legitimate interest to use third party technology to achieve greater efficiency within our organisation. To balance our interests against yours, we have taken steps to ensure these third parties maintain appropriate technical and organisational measures to keep your personal information secure.

Sign-up details: If you sign-up for us to send you newsletters and other information about Rocket Fund, including opportunities to run or support future projects, or Nesta’s other activities (see “Marketing” section below), we will use your personal information to send these to you. Our legal basis for doing this is your consent. You have the right to withdraw this consent at any time, as explained in the “Marketing” section below. If you sign-up or register, or to create a personal profile through Facebook or Twitter, Facebook and Twitter will make your email address registered to your Facebook or Twitter account available to Nesta, and Nesta will use the email address to enable you to log in to the particular platform. Our legitimate interest in doing this is the use of third party platforms for business efficiency and ease of registration for users.

Project Creators: If you apply to Create a Project we will use the information you provide for the purpose of assessing your application and, if approved, to administering and managing your account and Publicly display the details of the Project that you are fundraising for. Information you upload onto the Site as part of a Project description (including your name, and images and videos that you upload) will be publicly available once your Project is approved and posted on the Site. Such information will be used for the purposes of marketing your Project and the Rocket Fund programme.

We undertake this processing to fulfil the terms of the agreement with you for your Project to be operated from the Site and to market and promote your Project. (this Is our legal basis for the processing).

Donors: We use your information for the purpose of processing your donation to your chosen Project. Our legal basis is for the fulfilment of the donation that you have agreed to make.

Suppliers: If you have requested to list a product on the Site (via a Template Project), the personal information you provide will only be used for the purpose of processing your request and payment. Our legal basis is for the fulfilment of your request. We use Typeform to help us process requests and they only process your information on our instructions. Typeform is based in the European Economic Area and complies with the GDPR framework for the storage and use of your information. For more information see:

Donations and Payments: We use a third party processor Stripe Payments Europe Limited, a company registered in Ireland with company number 513174 whose address is c/o A&L Goodbody, IFSC, North Wall Quay, Dublin 1, Ireland to process your donation and/or payments made on the Site and, where relevant, to prepare and deliver invoices to you. Stripe will be the data controller of your information for the purpose of processing that transaction (and where relevant for preparing and delivering invoices to you). If you are a creator of a Project, then you will need to register your own account with Stripe in order to receive payment of donations made to your Project. Please read Stripe’s terms and conditions before completing your payment or registering an account with Stripe. Stripe are a global company based in the United States and may store and process your information outside of the European Economic Area ("EEA"). For more information of how they may use and protect your information please see Nesta will receive limited information regarding the transaction solely for the purpose of being able to monitor transaction costs associated with using Stripe’s services.

Feedback and surveys: If you agree to give us feedback or complete a survey, we will use the information to improve our work and activities. We usually use Surveygizmo, Typeform to or Google Forms to process surveys, and they only process your information on our instructions. Typeform is based in the European Economic Area and complies with the GDPR framework for the storage and use of your information. For more information see: Surveygizmo and Google both operate in the U.S. but comply with the EU-U.S. Privacy Shield Framework. For more information see / If you agree to participate in any survey that will form part of any research project, we will tell you at the time you take part how your information will be used for the particular research project or programme, and how long it will be kept for.

Online activity: The information that we obtain about your device helps us to monitor the website and keep it secure. The cookies we use tell us how you use the site and what pages you have visited. In pursuing these activities, we use our legitimate interest of monitoring and improving the performance of the site and its security, and to help us understand more about our customer’s interests and preferences, and to inform our marketing strategy. Some of these cookies are used for remarketing purposes and, if you agree, will be used to send you tailored advertisements. For more information, see “Cookies” below.

Posts and Communications: If you post any comments on the website, any personal information you agree to provide will be displayed publicly on the website along with your comments.

Social media interaction: We use a third party providers to check whether the people whose contact email addresses we have collected have registered with those email accounts on social media platforms, such as Facebook or Twitter. We currently use 89up Limited, who provide us with statistical information about how many of our contacts are on Facebook. We do not receive any information as to who is on Facebook. 89up Limited also provides us with the Twitter handle for our contacts who are on Twitter. We use this information to follow our contacts on Twitter. In pursuing these activities, we are pursuing our legitimate interests to understand more about our contacts’ use of social media and this will then inform our marketing strategy. We have an appropriate contract in place with to ensure the security and protection of the data.

For all kinds of information collected: Please make sure that any personal details you provide are accurate and up to date, and let us know about any changes. Please get consent first before giving us anyone else’s information.
We will not share your information with any other organisation unless we have your permission first, unless we have a legitimate interest to do so (see section 5 below).

We may also use your information to carry out analysis and research to improve our publications, events and activities, customise our website and its content to your particular preferences, notify you of any changes to our website or to our activities that may affect you, to prevent and detect fraud and abuse, and to protect other users.

However you choose to engage with or support Nesta, we may retain your information for our own legitimate business interests for statistical analysis purposes, in order to review, develop and improve our business activities. In this situation, we will only keep any personal information if it is necessary to do so, and will always put in place appropriate safeguards, including where possible anonymising or minimising the data retained.

We use a third party to provide cloud based data security, storage and disaster recovery service to backup data that we hold, we currently use Baraccuda Networks lncorporated. Baraccuda are a company based in the U.S. and store your Data outside the EEA. Baraccuda complies with the EU-U.S. Privacy Shield Framework.

3. How long will we keep your information for?

General principle: We will only keep any personal information that you provide to us for as long as is necessary to fulfil the purpose for which you gave us the information and we will securely delete information when it is no longer needed for that purpose, as explained in more detail below.

Project Creators: We will keep your information for as long as your Project is active on the Site. Projects will remain on the Site once completed and used for marketing and promotion of Rocket Fund and the Project. We will retain your personal information for 3 years for evaluation and business development purposes to help us evaluate the Rocket Fund Programme and its Projects, and to contact you about future opportunities to apply for Projects to be part of the Rocket Fund programme. If you do not wish us to contact you about future opportunities, please let us know by writing to use or emailing us at the at the contact details below.

Donors: We will keep your information for as long as the Project to which you have donated is active on the Site

Project Creators and Donors: We will retain details of the Project, as may be necessary, including details of donation received and amounts raised and sent to Project Creators, for our own audit and accounting purposes and for a minimum of 6 years after the Project has been completed. We will minimise any personal data kept, where possible.

Suppliers: Where you have requested to list a product on the Site (via a Template Project), we will keep your information on our customer database to tell you about other services we offer that might be of interest to you. If you do not wish us to contact you about other services we offer, please let us know by emailing

Consent: We keep records of consent, and any withdrawal of consent, on our files for as long as your personal information is being used in-line with that consent and for a period of 6 years after the consent is withdrawn (unless otherwise requested by you).

Posts and communications: any information that you post on the website shall only be kept and displayed for such time as the subject matter to which is relates is publicly displayed.

Processing for statistical analysis purposes: This type of processing will only be undertaken whilst we retain your personal information in line with the principles explained above.

4. Marketing

If you sign up to our mailing list we will use your details to keep you informed about latest news, blogs, programme updates, research, publications, event details, jobs and funding opportunities, and may request feedback, including our annual audience survey.

Where you have requested to list a product on the Site (via a Template Project) on behalf of a Supplier, we may contact you about other services we offer that might be of interest to you.

We use third party providers to deliver our e-newsletters. We gather statistics around email opening and clicks using industry standard technologies to help us monitor and improve our e-newsletter. We currently use Mailchimp, Salesforce and Mixmax whose servers hosted are hosted in the USA, but do comply with the EU-U.S. Privacy Shield. If you want to know more about how your information will be stored and processed see, /

If you no longer want to receive marketing communications from us, you can unsubscribe from our mailing list at any time by please clicking the unsubscribe link, at the bottom of our emails or by emailing detailing your name and email address. If you are given the opportunity to update your contact preferences in any email from us, this will link to a form hosted by Surveygizmo. If this function is not made available, please email us at the above address with your preference updates.

We use third party marketing services to tailor advertising to you based upon your browsing history on this website, for more information see “Cookies” below.

5. Who else has access to your information?

Donors. Your name and the amount of your donation will be provided to the Project Creator of the Project you have donated to. Project Creators will use the Rocket Fund communications features (updates & messages) to inform you about the progress of the project or regarding rewards and their delivery. Where you have consented to be contacted direct by the project Creator they will receive your email address and postal address for the purpose of the delivery of rewards where relevant.

We may share your information with partners and companies who help us to operate this site, and Rocket Fund. Our legal basis for doing this is to pursue our legitimate interest of being able to work collaboratively with other organisations to operate Rocket Fund. Some of these organisations may process your information in countries outside the EEA, such as the United States, where data protection laws are not the same as in the EEA. Rest assured that we will always ensure any transfer is subject to appropriate security measures to safeguard your personal data. Where transfers are necessary to countries where data protection has not yet been declared to be adequate, we rely on GDPR Article 49(1)(c) for these transfers. Full details of these organisations, confirmation of where they would process your personal information, and details of the steps we have taken to safeguard your personal data will be notified to you when known.

We may share your information within the Nesta group of companies, for the purposes of managing the Rocket Fund. Nesta currently provides all support and services for its subsidiary companies, therefore, our legal basis for sharing your information is to pursue the legitimate interests of shared resources and management reporting between the companies within the group. Our group companies will not process your data outside the EEA unless we notify you otherwise. Details of our group companies can be found here.
Comments, blogs and other information which you post on the site are displayed publicly and can be viewed by other users. Please be careful when disclosing personal information which may identify you or anyone else. We are not responsible for the protection or security of information which you post in public areas.

Sponsorcraft Limited who are hosting this website, will have access to personal information that you provide, including your name and where you work, if provided, solely for the purpose of the administration and maintenance of the website. Nesta has an appropriate agreement in place with Sponsorcraft Limited to ensure the security of your personal information. Please also see the Sponsorcraft Limited privacy policy.

The Rocket Fund Blog is hosted by the blog hosting platform This platform is provided by Automattic who may store and process your information outside of the European Economic Area. Automattic complies with the EU-US Privacy Shield Framework. See the Automattic Privacy Policy for more information.

We may disclose your personal information to law enforcement agencies if required by law (in which case our legal basis for doing this is for compliance with a legal obligation), or to protect or defend ourselves or others against illegal or harmful activities (in which case, our legal basis for doing this is the pursuit of these legitimate interests).

6. Cookies

This site contains cookies. Cookies are small text files that are placed on your computer by websites you visit. They are widely used to make websites work, or work more efficiently, as well as to provide information to site owners. Most web browsers allow some control of most cookies through browser settings.

This site uses cookies that are strictly necessary to enable you to move around the site or to provide certain basic features, such as logging into secure areas.

The site also uses performance cookies which collect information about how you use the site, such as how you are referred to it and how long you stay on certain pages. This information is aggregated and therefore anonymous and is used to improve the performance of the site. If you want, you can block cookies by changing the settings on your browser. Please note that some of the features of the site may not work if you choose to block cookies.

We also use third party tracking cookies for remarketing, including Google Adwords. These third parties help us to send you tailored advertisements about Nesta, that we think may be of interest to you, based on what parts of Nesta’s websites you have viewed. The advertisements will be shown to you on other search results pages, or on sites within Google’s or any other third party display network. We do not collect any identifiable information through the use of these third party remarketing services.

If you do not wish to receive such advertisements, then you must deactivate these cookie from your account. For more information and links on how to manage your settings see our Cookies Policy.

Please also see the Sponsorcraft Limited Cookies Policy and Automattic Cookies Policy.

7. Security

We take steps to protect your personal information and follow procedures designed to minimise unauthorised access or disclosure of your information. If you have a password for an account on this site, please keep this safe and do not share it with anyone else. You are responsible for all activity on your account and must contact us immediately if you are aware of any unauthorised use of your password or other security breach.

8. Contacting us, exercising your rights and complaints

If you have any comments or questions regarding Rocket Fund and the Site are welcomed and should be addressed by email to

You are legally entitled to know what personal information we hold about you and how that information is processed, which includes the right to:

  • know what information we hold about you
  • ask us to correct any mistakes in your information which we hold
  • ask us to delete your personal information
  • ask us to stop using your personal information or restrict how we can use it, for example if you feel it is inaccurate or no - longer needs to be used by Nesta
  • to object to us using of your personal information
  • to object to any automated decision making that we may do using your personal information

If you wish to know what information we hold about you, or wish to exercise any of your other rights as detailed above, or have any complaint about how we are using your personal information, then please email us using or write to us at 58 Victoria Embankment London EC4Y 0DS UK and provide enough information to identify yourself (e.g. name and address or any registration details).

If our information is incorrect or out of date, please provide us with information to update it. If you want us to delete, restrict or stop using any information we hold about you, please explain the reasons why you are asking this. If you are unhappy with how we are using your information, again please explain to us the reasons and we will investigate the matter.

You can also write to the same address if you have a complaint about this policy.

If you are unhappy with how any data rights request or complaint has dealt with you have the right to complain to the Information Commissioner at Wycliff House, Water Lane, Wilmslow, Cheshire SK9 5AF or the following link. or helpline: 0303 123 1113.

9. Changes to the privacy policy

We may change this privacy policy from time to time. We will notify you of any changes that relate to information we already hold about you, where practicable. You should check this policy occasionally to ensure you are aware of the most recent version that will apply each time you access this website.

Nesta, a company limited by guarantee registered in England and Wales with company number 7706036 and charity number 1144091.

Registered as a charity in Scotland number SC042833.
Registered office: 58 Victoria Embankment, London, EC4Y 0DS

Rocket Fund is a pilot project by Nesta. Nesta is a registered charity in England and Wales 1144091 and Scotland SC042833