Privacy Policy

Responsible for data processing

The controller responsible for your personal data is Regeneration.VC, LLC. Our contact details are set out at the end of this policy.

Thank you for visiting our website. We take the protection of your privacy seriously. This policy explains what personal data we collect when you use our website, why we collect it, and the rights you have.

1. Access data and hosting

You can visit our website without telling us who you are. Each time you access a page, our web server automatically records a server log file. This contains, for example, the name of the file requested, your IP address, the date and time of access, the amount of data transferred and your internet provider (“Access Data”).

We use access data only to keep the website running reliably and to improve it. Our legal basis is our legitimate interest in presenting our website correctly (Art. 6(1)(f) GDPR and UK GDPR). Access data is deleted no later than seven days after your visit.

Our website is hosted and displayed partly by service providers acting as processors on our behalf. Unless this policy says otherwise, all access data and any data you submit through forms on this website is processed on their servers. Our hosting provider is Amazon Web Services, Inc. (AWS), based in the United States, and our website data is stored on AWS servers located in the United States. We also use Cloudflare, Inc., based in the United States, to deliver our website securely and efficiently. Cloudflare processes access data such as your IP address through its global network. Where data is transferred outside the UK or EEA, we rely on the EU-US Data Privacy Framework and its UK Extension, under which both providers are certified, and on the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum where applicable.

Content delivery network

To make pages load faster, we deliver some content, such as images and other media files, through a content delivery network (“CDN”) of regionally distributed servers. Access data is therefore processed on the CDN provider’s servers, acting as our processor. Our CDN provider is Amazon CloudFront, a service of Amazon Web Services, Inc., based in the United States. Transfers are safeguarded as described above.

If you have questions about our service providers or the basis of our cooperation with them, please contact us at [email protected].

2. Data we collect and why

We collect personal data that you choose to give us when you get in touch, for example through a contact or pitch submission form, or by email. Mandatory fields are marked, because we need that information to handle your enquiry. The data collected is shown in each form.

We use this data to process and respond to your enquiry, including assessing any investment opportunity you submit. Our legal basis is taking steps at your request before entering into a contract (Art. 6(1)(b) GDPR and UK GDPR) and our legitimate interest in evaluating opportunities and managing our relationships (Art. 6(1)(f)).

We keep pitch, job application and newsletter data for the periods set out in section 6. For other enquiries, once your enquiry has been fully handled, we delete your data, unless you have expressly consented to further use (Art. 6(1)(a)) or we are permitted by law to keep it, as described in this policy.

Pitch submissions

When you submit a pitch deck or other investment-related material through this website, by email or through another channel, we collect your name, company name, role, email address, phone number and any other information you include. We use this data to assess your company as a potential investment (Art. 6(1)(b) and (f) GDPR and UK GDPR).

Applications submitted through our website are collected using Fillout, a form service provided by Fillout, Inc., based in the United States, acting as our processor. Transfers are safeguarded as described in section 4.

Pitch materials often include personal data about co-founders, employees or other people. By sending them to us, you confirm that those people know you are sharing their data with us and have been made aware of this policy.

Providing this data is voluntary, but without it we may not be able to consider your company for investment.

Job applicants

If you apply for a role with us, we collect your name, contact details, CV, education and employment history, and any other information you include in your application. We use it to assess your application and manage the recruitment process (Art. 6(1)(b) and (f) GDPR and UK GDPR).

Newsletter

If you sign up for our newsletter, we collect your name and email address. We send the newsletter only with your consent (Art. 6(1)(a) GDPR and UK GDPR, and PECR). You can unsubscribe at any time using the link in each email or by emailing [email protected].

Our newsletter is sent using Flodesk, an email service provided by Flodesk, Inc., based in the United States, acting as our processor. Flodesk stores your details and records whether our emails are opened and which links are clicked, so we can understand what our readers find useful. Transfers are safeguarded as described in section 4.

3. Cookies and similar technologies

To make our website work well and enable certain features, we use cookies and similar technologies on some pages. Cookies are small text files stored automatically on your device. Session cookies are deleted when you close your browser; persistent cookies stay on your device so we can recognise your browser on your next visit.

We use strictly necessary technologies that certain website functions depend on, such as remembering your preference settings. These collect your IP address, time of visit, device and browser information, and information about how you use our website. Our legal basis is our legitimate interest in presenting our website in an optimised way (Art. 6(1)(f) GDPR and UK GDPR), and the strictly necessary exemption under the UK Privacy and Electronic Communications Regulations (PECR) and the ePrivacy Directive.

3.1 General information

We also use these technologies to meet our legal obligations, for example to show that you have consented to processing, and, only with your consent, for web analytics such as Google Analytics. The relevant legal bases are set out in the sections below.

You can manage cookies in your browser settings: Microsoft Edge, Safari, Chrome, Firefox and Opera each provide controls. If you decline cookies, some features of our website may not work fully.

3.2 Consent management

We use CookieYes, a consent management platform provided by CookieYes Limited, to tell you about the cookies and other technologies on our website, and to obtain, manage and record any consent you give. This is necessary to meet our legal obligation to demonstrate consent (Art. 6(1)(c) with Art. 7(1) GDPR).

When you submit your cookie choices, the consent tool stores your IP address, the date and time of your choice, browser information, language, the URL from which you made it, and your consent choices. A cookie also stores your consent choices. This data is deleted after 365 days, unless you have expressly consented to further use (Art. 6(1)(a)) or we are permitted by law to keep it.

You can change or withdraw your consent at any time by clicking the cookie settings icon at the bottom of any page.

3.3 Google Analytics

With your consent, we use Google Analytics, a web analytics service provided by Google Ireland Limited for users in the EEA and UK, and by Google LLC, based in the United States. Google Analytics uses cookies to help us understand how visitors use our website, for example which pages are viewed and how long visitors stay. Google Analytics does not log or store IP addresses. Our legal basis is your consent (Art. 6(1)(a) GDPR and UK GDPR, and PECR), which you can withdraw at any time through the cookie settings icon. Google is certified under the EU-US Data Privacy Framework and its UK Extension.

3.4 Cloudflare Web Analytics

We use Cloudflare Web Analytics, provided by Cloudflare, Inc., to measure website traffic and performance. It does not use cookies and does not track individual visitors across websites. Our legal basis is our legitimate interest in understanding and improving our website (Art. 6(1)(f) GDPR and UK GDPR).

4. Who we share your data with

Only Regeneration.VC team members who need your data for the purposes in this policy can access it. We may share it with:

  • funds and other entities managed or advised by Regeneration.VC, where needed to assess or make an investment;
  • co-investors in a potential investment, where needed to assess or complete that investment;
  • service providers who process data on our behalf, such as our website host, form, CRM, email and fund administration providers; and
  • courts, regulators, law enforcement or other authorities, where we are required to by law or regulation (Art. 6(1)(c) GDPR and UK GDPR).

International transfers

Some of these recipients are based outside the UK and EEA, including in the United States. We transfer data only where appropriate safeguards are in place, such as the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum, or the EU-US Data Privacy Framework and its UK Extension. You can request a copy of the safeguards by emailing [email protected]

5. How we protect your data

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss or destruction. We review our security policies and procedures regularly.

6. How long we keep your data

  • Pitch submissions: we keep your pitch materials and contact details in our CRM until the end of the relevant fund’s investment period, and for no more than 7 years. We have a legitimate interest in following your company’s progress in case of a later funding round. If you think your interests outweigh ours, you can exercise the rights set out in section 7.
  • Job applicants: if we do not offer you a role, we delete your application data 6 months after the process ends. If you join us, we keep it as part of your employment record.
  • Newsletter subscribers: we delete your data without undue delay after you unsubscribe.
  • Website access data and consent records: we keep these for the periods set out in sections 1 and 3.


7. Your rights and how to contact us

As a data subject, you have the right:

  • to access the personal data we hold about you (Art. 15 GDPR and UK GDPR);
  • to have inaccurate data corrected or incomplete data completed without undue delay (Art. 16);
    • to have your data erased (Art. 17), unless we need to keep processing it:
    • to exercise the right of freedom of expression and information;
    • to comply with a legal obligation;
    • for reasons of public interest; or
    • to establish, exercise or defend legal claims;
  • to restrict processing of your data (Art. 18) where:
    • you dispute its accuracy;
    • the processing is unlawful but you oppose erasure;
    • we no longer need the data but you need it to establish, exercise or defend legal claims; or
  • you have objected to processing under Art. 21;
    to receive the data you gave us in a structured, commonly used, machine-readable format, or have it sent to another controller (Art. 20);
  • to withdraw any consent you have given, at any time, without affecting processing before withdrawal; and
  • to complain to a supervisory authority (Art. 77). In the UK this is the Information Commissioner’s Office (ico.org.uk). In the EU, our lead authority is the Belgian Data Protection Authority (www.dataprotectionauthority.be), as our EU entity is established in Brussels. You can also complain to the authority where you live or work.

For questions about how we collect, process or use your personal data, or to request access, correction, restriction or erasure, withdraw consent or object to a particular use, please email [email protected] or write to us at the address below.

Right to object

Where we process your personal data on the basis of our legitimate interests, you may object to that processing with effect for the future. If we process your data for direct marketing, you can object at any time, as described above. For other purposes, you may object on grounds relating to your particular situation.

Once you object, we will stop processing your data for those purposes, unless we can show compelling legitimate grounds that override your interests, rights and freedoms, or the processing is needed to establish, exercise or defend legal claims. This exception does not apply to direct marketing: if you object, we will stop processing your data for that purpose.

Changes to this policy

We may update this policy from time to time. The current version is always available on this page.

Last updated: 27 October 2026.

Contact

Regeneration.VC, LLC
Registered addresses of our fund entities:
1732 Aviation Blvd #154, Redondo Beach, CA 90278, USA
Esplanade 1 bus 85, 1020 Brussels, Belgium

Contact: [email protected]