1. Introduction
This Privacy Policy explains how The Ventures Lab collects, uses, stores, and protects your personal data. The Ventures Lab is operated by Challenges Catalyst Ltd (company number SC377928), whose registered office is at 5–7 Montgomery Street Lane, Edinburgh, EH7 5JT (“we”, “us”, “our”), part of The Challenges Group.
Challenges Catalyst Ltd is the data controller responsible for your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy applies to all visitors to the The Ventures Lab website, as well as applicants for our services, service participants, and newsletter subscribers. By using the website, you acknowledge the practices described in this policy.
2. Information We Collect
- Information you give us directly: your name, email address, phone number, organisation, and service interests, together with any details you submit via our contact forms or when subscribing to our newsletter.
- Information collected automatically: your IP address, browser and device type, operating system, referral source, pages visited, and time spent on the Website, collected via Google Analytics and standard website server logs.
- Cookie data: collected as described in Section 4 below.
- Meeting and communication data: if you have a call, meeting, or consultation with us, notes and/or a transcript may be generated using AI-assisted notetaking software (Granola AI) so that we can follow up accurately.
We do not knowingly seek special category data (such as health or ethnicity information). Where a service application form requests it for a specific, legitimate purpose, we will explain why and seek your explicit consent.
3. How We Use Your Information
We use your personal data for the following purposes:
- To operate, host, and maintain the Website (via WordPress).
- To manage enquiries, applications, and ongoing relationships through our customer relationship management system (Monday.com).
- To respond to your enquiries and provide information about our services.
- To send newsletters and marketing communications you have opted in to (via Mailchimp) — you may unsubscribe at any time.
- To analyse and improve Website performance, content, and user experience (via Google Analytics).
- To support internal administrative work — such as summarising meetings, drafting correspondence, or handling routine enquiries — using AI-powered tools including Granola AI and Claude AI (provided by Anthropic). These tools process data on our instructions and are not used to make automated decisions that have a legal or similarly significant effect on you.
- To comply with our legal, regulatory, or contractual obligations, and to establish, exercise, or defend legal claims.
Our legal bases for this processing include: your consent (e.g. for marketing or optional data); performance of a contract with you; our legitimate interests (e.g. improving our services and Website security); and compliance with a legal obligation.
AI tools and model training: we use Granola AI under a Business/Enterprise plan and Claude AI under Anthropic’s commercial terms (Claude for Work / API). Under the current terms of both providers, your data – including your intellectual property and any customer data processed through these tools – is not used to train their underlying AI models. We review these terms periodically to confirm this protection remains in place, and we do not enable optional feedback or data-sharing features with these providers that would allow model training on our account data.
4. Cookies and Tracking Technologies
The Website uses cookies and similar tracking technologies, including:
- Strictly necessary / functional cookies: required for the Website (built on WordPress) to function correctly.
- Analytics cookies: Google Analytics uses cookies to collect aggregated, pseudonymised statistics about how visitors use the Website, which helps us improve it.
- Email tracking: Mailchimp may use tracking pixels within our emails to tell us whether a message has been opened or a link clicked, so we can measure engagement with our newsletters.
You can control or disable cookies at any time through your browser settings; please note that disabling certain cookies may affect how the Website functions. Where required by law, we will ask for your consent to non-essential cookies via a cookie banner or consent tool on the Website.
5. Data Sharing and Disclosure
We do not sell your personal data. We share personal data only where necessary, with the following categories of trusted third-party service providers, each of which acts as a data processor on our behalf and is contractually required to protect your data and use it only for the purposes we specify:
- Monday.com — our CRM system, used to store contact and service-related information.
- WordPress and our website hosting provider — used to host and operate the Website.
- Google Analytics (Google LLC) — used for website analytics.
- Mailchimp (The Rocket Science Group / Intuit) — used to send newsletters and marketing emails.
- Granola AI — an AI notetaking tool used to record and summarise meetings, used under a Business/Enterprise plan under which our data is excluded from model training by default.
- Claude AI (Anthropic) — an AI assistant used to support internal drafting, research, and administrative tasks, used under Anthropic’s commercial terms (Claude for Work / API), under which inputs and outputs are not used to train Anthropic’s models by default.
- Xama – used for Anti Money Laundering compliance data gathering and storage
- Tally – used for onboarding information gathering for new ventures.
- Venture Growth Services Dashboard – used to present key data analytics gathered from other systems to Venture Growth Services clients
We may also share personal data: within The Challenges Group, where relevant to delivering our services; with our professional advisers (such as auditors or legal counsel); where required by law, regulation, or a valid request from a public authority; or in connection with a business reorganisation, merger, or sale of assets.
- International transfers: some of our service providers (including Google, Mailchimp/Intuit, Granola AI, and Anthropic) may process personal data outside the UK, including in the United States. Where this occurs, we ensure appropriate safeguards are in place — such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or reliance on an adequacy decision — so that your data continues to receive an equivalent level of protection.
6. Data Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or loss. These include access controls, staff training, and working only with reputable service providers who are contractually bound to protect your data.
We retain personal data only for as long as necessary for the purposes described in this policy, or as required by law, after which it is securely deleted or anonymised. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.
7. Your Rights
Under the UK GDPR and the Data Protection Act 2018, you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate or incomplete data.
- Request erasure of your data in certain circumstances.
- Restrict or object to our processing of your data.
- Request a copy of your data in a portable format.
- Withdraw consent at any time where processing is based on consent, including opting out of marketing communications.
- Lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk, or by calling 0303 123 1113, if you believe your data has been mishandled.
To exercise any of these rights, please contact us using the details in Section 10 below.
8. Third-Party Links
The Website may contain links to third-party websites, plugins, or applications that are not operated by us. Clicking on those links may allow third parties to collect or share data about you. We do not control, and are not responsible for, the privacy practices or content of any third-party sites, and we encourage you to review their privacy policies before providing any personal data.
9. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, the tools and technologies we use, or legal requirements. Any changes will be posted on this page with an updated “last updated” date. We encourage you to review this policy periodically. Where changes are significant, we will take reasonable steps to notify you directly.
10.contact us
If you have any questions about this Privacy Policy, how we handle your personal data, or if you wish to exercise any of your rights, please contact us at:
Challenges Catalyst Ltd, trading as The Ventures Lab
5–7 Montgomery Street Lane, Edinburgh, EH7 5JT
Email: admin@thechallengesgroup.com
SHAPE IMPACT?
Whether you are exploring an idea, preparing to raise investment, or scaling post-investment, we are here to support you for the journey.
- Enquire About Growth
- Enquire About Growth
- Enquire About Growth
- Enquire About Growth
- Enquire About Growth
- Enquire About Growth
- Enquire About Growth
- Enquire About Growth
- Enquire About Growth
- Enquire About Growth
- Enquire About Growth
- Enquire About Growth
- Enquire About Growth
- Enquire About Growth
- Enquire About Growth
- Enquire About Growth
- Enquire About Growth
- Enquire About Growth
- Enquire About Growth
- Enquire About Growth
- Enquire About Growth
- Enquire About Growth
- Enquire About Growth
- Enquire About Growth
- Enquire About Growth
- Enquire About Growth
- Enquire About Growth
- Enquire About Growth
- Enquire About Growth
- Enquire About Growth
- Enquire About Growth
- Enquire About Growth
- Enquire About Growth
- Enquire About Growth
- Enquire About Growth
- Enquire About Growth
- Enquire About Growth
- Enquire About Growth
- Enquire About Growth
- Enquire About Growth
- Enquire About Growth
- Enquire About Growth
- Enquire About Growth
- Enquire About Growth
- Enquire About Growth
- Enquire About Growth
- Enquire About Growth
- Enquire About Growth
- Enquire About Growth
- Enquire About Growth
- Enquire About Growth
- Enquire About Growth
- Enquire About Growth
- Enquire About Growth
- Enquire About Growth
- Enquire About Growth
- Enquire About Growth
- Enquire About Growth
- Enquire About Growth
- Enquire About Growth
- Enquire About Growth
- Enquire About Growth
- Enquire About Growth
- Enquire About Growth
- Enquire About Growth
- Enquire About Growth
- Enquire About Growth
- Enquire About Growth
- Enquire About Growth