Privacy Policy
How Rebel Syndicate handles the information you give us through this website.
The short version. When you submit the contact form, your answers are sent to us through a form service called Web3Forms and arrive by email. We use them to reply to you, and for nothing else. We do not sell them, and we do not add you to a mailing list.
1. Who we are
Rebel Syndicate ("we", "us") is a Cardiff-based angel investment syndicate. For the purposes of UK data protection law, we are the data controller for the personal information described in this policy.
You can contact us about anything in this policy at hello@rebelsyndicate.co.uk.
2. What we collect
We only collect what you choose to send us through the contact form. Nothing is collected automatically by this website.
If you contact us as a potential angel
| Information | Why we ask |
|---|---|
| Name | To know who you are and how to address you |
| Email address | To reply to you |
| City, town or village | To understand where our angels are based |
| Sectors and stages you want to invest in | To judge whether our deal flow is relevant to you |
| Your level of angel investing experience | To understand what support you may need |
| Your acknowledgement of investment risk | To record that you accepted the risk warning |
If you contact us as a company seeking funding
| Information | Why we ask |
|---|---|
| Name, email address, location | To know who you are and how to reply |
| Company name and website | To understand your business |
| What your company does | To assess fit with our investment focus |
| Sector and stage | To assess fit with our investment focus |
| SEIS or EIS advanced assurance status | Because tax-advantaged status affects whether our angels can invest |
| How much you are raising | To understand the size of the round |
| Where the company is based | Because we focus on Welsh tech companies |
| Why you want Rebel involved | To understand what you are looking for beyond capital |
3. How the form works
When you press Send to Rebel, your answers are sent to a form-handling service called Web3Forms, which forwards them to us by email.
This means:
- Your answers pass through Web3Forms' servers on their way to us. Web3Forms acts as our data processor and handles the data under its own privacy terms.
- We receive your answers as an email in our inbox. We do not keep a separate database of form submissions.
- Web3Forms may briefly retain submissions for delivery and spam prevention. We do not control that retention.
- We use Web3Forms' spam protection, which may process limited technical information about your browser to distinguish you from a bot.
4. How we use your information
We use the information you send us only to:
- reply to your enquiry;
- consider whether there is a fit between you and Rebel Syndicate, in either direction;
- keep a record of who has contacted us and what was discussed;
- meet our legal and regulatory obligations.
We do not sell your information, and we do not share it with third parties for marketing.
5. Our lawful basis
Under UK GDPR we rely on:
- Legitimate interests — to respond to enquiries and assess potential investment relationships, in either direction. We have a legitimate interest in running an angel syndicate and in considering opportunities.
- Legal obligation — where we must keep records to comply with the law, including financial and investment regulation.
- Consent — where we ask you for something specific and you agree, such as joining a mailing list. You can withdraw consent at any time.
6. Who we share it with
We keep your information within Rebel Syndicate. We may share it with:
- Our angels — if you are a company seeking funding, we may share your pitch information with syndicate members as part of assessing an investment. We will tell you before we do this.
- Angels Invest Wales and the Development Bank of Wales — where an investment is being considered for co-investment through the Wales Angel Co-Investment Fund, we may need to share information as part of that application.
- Web3Forms — our form-handling provider, which processes submissions on our behalf and forwards them to us by email.
- Professional advisers — lawyers, accountants and other advisers, where necessary.
- Authorities — where the law requires it.
We do not transfer your information outside the UK except where a service provider's systems require it, and then only with appropriate safeguards in place.
7. How long we keep it
- Enquiries that do not lead anywhere — up to 2 years, then deleted.
- Investment records — for as long as the investment relationship lasts, and for 6 years afterwards, to meet legal and tax requirements.
- Mailing list — until you unsubscribe.
8. Your rights
Under UK GDPR you have the right to:
- ask what personal information we hold about you, and get a copy;
- ask us to correct anything inaccurate;
- ask us to delete your information, where we do not need to keep it;
- ask us to restrict what we do with it;
- object to our processing;
- ask for your information in a portable format;
- withdraw consent where we relied on it.
To exercise any of these, email hello@rebelsyndicate.co.uk. We will respond within one month.
If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to resolve it with you first.
9. Cookies and tracking
This website sets no cookies of its own and uses no analytics, advertising or tracking technology. We do not profile visitors. Our form provider, Web3Forms, may process limited technical information to filter spam; it does not set advertising cookies on our behalf.
If that changes — for example if we add analytics — we will update this policy and, where the law requires it, ask for your consent first.
10. Links to other websites
This site links to companies we have invested in and to partner organisations. Those sites have their own privacy policies, and we are not responsible for how they handle your information. Please read theirs before giving them any personal data.
11. Security
Form submissions are transmitted over an encrypted connection to Web3Forms and forwarded to us by email. We hold enquiries in our email systems, protected by account security including multi-factor authentication. We do not maintain a separate database of form submissions. No system is completely secure, but we take reasonable steps to protect what you send us.
12. Children
This website is for adults. We do not knowingly collect information from anyone under 18.
13. Changes to this policy
If we change how we handle personal information, we will update this page and change the date at the top. Where the change is significant, we will make that clear on the site.
14. Contact
Questions about this policy, or about your information: