Privacy Policy

Last updated: 7 September 2026

1. Who We Are

JustStart Limited ("JustStart", "we", "us", or "our") is an operator-led venture studio registered in England and Wales. We work alongside people who have a venture idea to validate it, build it, launch it, and grow it, and we publish free tools to help them decide where to start.

For the purposes of data protection law, JustStart Limited is the data controller responsible for your personal data. If you have questions about this policy, please contact us at privacy@juststart.tech.

2. Information We Collect

Information you provide directly

  • Intro call enquiries: your name, email address, optional phone number, a description of your venture idea, the stage you are at, and what you tell us is standing in your way, when you ask us for an intro call. Please do not include confidential or commercially sensitive details in this form. If you want a confidentiality agreement in place first, tell us on the call.
  • Registration data: name, email address, and phone number when you subscribe to our newsletter or, where a programme is open for enrolment, when you register for it.
  • Payment information: payment card details processed securely by our payment provider Stripe. We do not store full card numbers on our servers.
  • Assessment and scorecard responses: answers you provide through our Readiness Assessment and Idea Scorecard tools.
  • Communications: messages you send to us via email or through our platform.

Information collected automatically

  • Usage data: pages visited, features used, time spent on site, and interaction patterns.
  • Device information: browser type, operating system, screen resolution, and device identifiers.
  • Log data: IP address, access times, and referring URLs.

3. How We Use Your Information

We use your personal data to:

  • Respond to your intro call enquiry, arrange and hold the call, and assess whether we are able to help you.
  • Deliver and administer any venture studio engagement or programme you take part in.
  • Process payments and manage your account.
  • Send service updates, session reminders, and relevant communications.
  • Provide personalised feedback through our assessment and scorecard tools.
  • Send our newsletter and marketing communications (only with your consent).
  • Improve our platform, content, and user experience.
  • Comply with legal obligations and protect against fraud or misuse.

4. Legal Basis for Processing

Under UK GDPR, we process your personal data on the following legal bases:

  • Contract: processing necessary to deliver the services you have purchased or registered for, and to take steps at your request before entering into a contract, such as responding to an intro call enquiry.
  • Consent: marketing communications and newsletter subscriptions, which you can withdraw at any time.
  • Legitimate interests: improving our services, preventing fraud, and understanding how our platform is used.
  • Legal obligation: where required by applicable law, such as financial record-keeping.

5. How We Share Your Information

We do not sell your personal data. We may share your information with:

  • Stripe: our payment processor, to handle transactions securely.
  • Supabase: our database provider, which hosts enquiry, programme, and account data.
  • Resend: our transactional email provider. When you request an intro call, the details you submit are emailed to our team through Resend so that we can reply to you.
  • Vercel: our hosting provider, which serves this website and processes server logs.
  • Analytics providers: to help us understand site usage and improve the experience.
  • Legal and regulatory authorities: where required by law or to protect our rights.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy. Specifically:

  • Account data: retained while your account is active and for up to 2 years after your last interaction.
  • Payment records: retained for 7 years as required by UK financial regulations.
  • Marketing preferences: retained until you unsubscribe or withdraw consent.
  • Assessment data: retained for 12 months to allow you to revisit your results, then anonymised.
  • Intro call enquiries: retained for up to 2 years from your last contact with us, so that we can pick up a conversation where it left off, then deleted.

7. Your Rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you.
  • Rectify inaccurate or incomplete data.
  • Erase your personal data in certain circumstances.
  • Restrict or object to processing of your data.
  • Data portability: receive your data in a structured, machine-readable format.
  • Withdraw consent at any time where consent is the basis for processing.

To exercise any of these rights, contact us at privacy@juststart.tech. We will respond within 30 days.

8. International Transfers

Some of our service providers may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions, to protect your data to the same standard as under UK GDPR.

9. Security

We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit (TLS), secure authentication, access controls, and regular security reviews. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

10. Children

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of material changes by posting the updated policy on our website with a revised "last updated" date. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions about this privacy policy or how we handle your data, please contact us at:

JustStart Limited
Email: privacy@juststart.tech

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data protection rights have been violated.