NEWPITCH LTD

Privacy Policy

Version 1.1 · Last updated: June 2026

Company number: 16960090
Registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ

This policy applies to all users of the NewPitch platform at newpitch.co including founders, investors, and website visitors.

1. WHO WE ARE

NewPitch Ltd ("NewPitch", "we", "us", "our") is a company registered in England and Wales under company number 16960090, whose registered address is 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ.

NewPitch operates an online investment introduction platform at newpitch.co (the "Platform") that connects pre-screened founders seeking investment with a curated panel of active investors through structured live pitch sessions called The Pitch.

NewPitch is the data controller for all personal data collected and processed through the Platform. This means we determine the purposes and means of processing your personal data and are responsible for it being handled lawfully.

NewPitch has designated a data protection lead responsible for overseeing compliance with this policy and with UK data protection law. You can contact our data protection lead at:

Email: privacy@newpitch.co
Post: NewPitch Ltd, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ

2. WHAT THIS POLICY COVERS

This Privacy Policy explains:

• What personal data we collect about you and how we collect it
• Why we collect it and the legal basis for doing so
• How we use it
• Who we share it with and the protections in place when we do
• How long we keep it
• Your rights in relation to your personal data
• How to contact us or make a complaint

This policy applies to all users of the Platform including founders who apply to pitch, investors who apply to join the panel, visitors to the website, and anyone who contacts us directly.

3. THE DATA WE COLLECT

3.1 Founders

When you apply to pitch through the Platform we collect:

• Identity data: Full name, position or title
• Contact data: Email address, phone number
• Business data: Company name, website, sector, stage of business, country of incorporation, amount being raised, amount raised to date, proposed valuation
• Document data: Pitch deck, financial model, investment memorandum, and any other documents uploaded as part of your application. These documents are stored securely and used solely for the purpose of facilitating introductions through the Platform
• Application data: Your response to the final application question, the date and time of your application, and the IP address of the device used to submit your application
• Agreement data: A record of your acceptance of the NewPitch Founder Platform Agreement including the version accepted, the date and time of acceptance, and the IP address of the device used
• Prior investor data: The list of investors you disclose as part of the pre-session investor disclosure process
• Communication data: Records of emails and other communications between you and NewPitch
• Session data: Records of which session you participated in, which investors were present, and any post-session information relating to investor interest
• Preparation service data: Where you purchase optional preparation services from NewPitch, the business information you provide for the purpose of those services

3.2 Investors

When you apply to join the investor panel we collect:

• Identity data: Full name
• Contact data: Email address
• Investor data: Investor type, sectors you typically invest in
• Certification data: Which sophisticated investor or high net worth individual criterion you selected, your confirmation that the certification is accurate, the date and time of certification, and the IP address of the device used
• Agreement data: A record of your acceptance of the NewPitch Investor Terms including the version accepted, the date and time of acceptance, and the IP address of the device used
• Communication data: Records of emails and other communications between you and NewPitch
• Session data: Records of which sessions you were invited to, which sessions you attended, and your attendance history on the Platform
• Interest data: Records of which founders you expressed interest in following a session, where that information has been voluntarily provided to NewPitch

3.3 Website Visitors

When you visit the Platform we may collect:

• Technical data: IP address, browser type and version, time zone setting, operating system and platform, and other technology on the devices you use to access the Platform
• Usage data: Information about how you use the Platform including pages visited, links clicked, and time spent on pages
• Cookie data: Data collected through cookies and similar tracking technologies as described in clause 11 of this policy

4. HOW WE COLLECT YOUR DATA

Directly from you: When you complete the founder application form, the investor request form, or any other form on the Platform. When you contact us by email, phone, or through the support form. When you accept our terms and agreements. When you purchase preparation services.

Automatically: When you visit the Platform we automatically collect technical and usage data through cookies and similar technologies as described in clause 11.

From third parties: We may receive data from email delivery services confirming whether emails we send you have been delivered and opened. We do not purchase personal data from third party data brokers.

5. LEGAL BASIS FOR PROCESSING

We process your personal data on the following legal bases under the UK General Data Protection Regulation (UK GDPR):

Performance of a contract: We process your data where it is necessary to perform the contract we have with you or to take steps at your request before entering into a contract. This covers processing your founder application, managing your investor panel membership, running sessions, and managing commission obligations.

Legitimate interests: We process certain data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and interests. Examples include sending session reminders, maintaining the security of the Platform, preventing fraudulent applications, improving the quality of our screening process, and improving the Platform generally.

Legal obligation: We may process your data where we are required to do so by law, including for compliance with UK financial promotion rules, anti-money laundering obligations, and court orders.

Consent: Where we rely on consent as a legal basis we will ask for your consent clearly and separately. You have the right to withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

6. HOW WE USE YOUR DATA

6.1 Founders

We use your personal data to:

• Review and assess your application to pitch
• Conduct screening and assess your investment readiness, using automated tools as described in clause 6.3
• Match you to an appropriate session based on your sector, stage, and raise size
• Notify you of your session date, time, and Zoom details
• Send you investor profiles in advance of your session
• Run your session and facilitate introductions
• Send you post-session summaries and investor contact details
• Manage our commission entitlement and enforce the Founder Platform Agreement
• Respond to your support requests and send communications relevant to your application and session
• Comply with our legal obligations and maintain records for audit and dispute resolution purposes

Where you purchase preparation services from NewPitch, the business information you provide for the purpose of those services will be used solely to deliver the service requested. It will not be shared with investors or used for any other purpose without your explicit consent.

6.2 Investors

We use your personal data to:

• Review and assess your request to join the investor panel
• Manage your panel membership and match you to sessions based on your sector interests
• Send you session invitations, founder briefing materials, and session reminders
• Send you post-session summaries with founder contact details
• Maintain records of your attendance and certification
• Respond to your support requests and send communications relevant to your panel membership
• Comply with UK financial promotion rules and maintain records for audit and compliance purposes

Session communications — including session invitations, founder materials, reminders, and post-session summaries — are essential to your panel membership and are processed on the basis of contractual necessity. You may not opt out of these communications while remaining an active panel member. If you wish to stop receiving these communications you should notify us that you wish to end your panel membership at privacy@newpitch.co.

Attendance data is used solely for the purpose of managing session logistics and maintaining accurate records of panel activity. It is not shared with founders or other investors. It may be reviewed by NewPitch administrators for the purpose of managing panel capacity and ensuring sessions are well attended.

6.3 Automated Processing and Screening

NewPitch uses automated tools to assist with the initial screening of founder applications. These tools analyse application data to assess investment readiness based on criteria including sector, stage, raise size, and the completeness and quality of submitted materials. All screening decisions are reviewed and confirmed by a member of the NewPitch team before any decision is communicated to a founder. No purely automated decision that produces legal or similarly significant effects is made about your application without human review. If you wish to request human review of any screening decision, please contact us at privacy@newpitch.co.

7. DATA SHARING

7.1 Sharing between founders and investors

Founder data shared with investors: We share founder business materials — including pitch decks, financial models, investment memoranda, and business summaries — with investors assigned to your session in advance of that session. We share your direct contact details — name, email address, and phone number — with all investors who attended your session in the post-session summary email. This allows any investor to reach out to you directly if they wish to continue the conversation.

Investors are bound by confidentiality obligations under the NewPitch Investor Terms and may not share, distribute, reproduce, or use your materials for any purpose other than evaluating a potential direct investment in your business. Investors may share your materials with their own professional advisers — including solicitors, accountants, and financial advisers — for the purpose of obtaining advice on a potential investment, provided those advisers are bound by equivalent confidentiality obligations.

NewPitch's liability for investor disclosure: Whilst NewPitch takes all reasonable steps to bind investors to confidentiality obligations through the Investor Terms, NewPitch cannot be held responsible for any unauthorised disclosure, sharing, or misuse of your materials by an investor or any third party to whom an investor improperly discloses your materials. If you believe an investor has breached their confidentiality obligations, please notify us immediately at privacy@newpitch.co and we will take all reasonable steps to investigate and address the breach. NewPitch will provide your contact details to you so that you may pursue a direct claim against the investor where appropriate.

Investor data shared with founders: NewPitch does not share investor identities, contact details, or any personal information with founders at any stage. Founders are not told who is on the panel for their session before or after the session. If an investor chooses to contact a founder directly using the contact details provided in the post-session summary, their identity will become known to that founder as a result of their own action. NewPitch accepts no responsibility for data shared as a result of direct contact initiated by an investor.

Anonymised sector interest data — without any identifying information — may be used internally by NewPitch to match founders to appropriate sessions. This anonymised data is not shared with founders in any form that could identify individual investors.

7.2 Service providers

We share personal data with third party service providers who process data on our behalf and under our instructions. These include:

Supabase: Our database and storage provider, used to store all application data, session records, and uploaded documents. Founder documents are stored using secure access controls with expiring links used when sharing materials with investors.

Resend: Our email delivery service, used to send all transactional and session communications.

Lovable: The platform on which the NewPitch site is built and hosted.

All service providers are contractually required to process data only on our instructions, maintain appropriate security measures, and not use your data for their own purposes.

7.3 Zoom Session Data

NewPitch conducts The Pitch sessions via Zoom. The following applies to all sessions:

Who is present: Each session is hosted and facilitated by the NewPitch team. The number of NewPitch team members present on any session may vary depending on operational requirements. All NewPitch team members present on a session are bound by confidentiality obligations and may not disclose or share any information discussed during the session outside of NewPitch's internal operations.

Recording: Sessions will never be recorded without the explicit prior consent of all founders and all investors present on that session. Consent will be sought in writing in advance of the session — not verbally during it — and must be confirmed by every participant before recording begins. If any founder or investor withholds or withdraws consent, the session will not be recorded under any circumstances. Where consent is given and a session is recorded, the recording will be stored securely, used only for the purpose for which consent was given, and deleted within 90 days of the session date unless a longer retention period has been separately agreed in writing with all consenting participants.

Notes and monitoring: NewPitch team members present on a session may take written notes during the session for internal purposes. These notes are used solely to provide constructive feedback to founders following the session and to improve the quality of future sessions. Notes are not shared with investors and are not used for any commercial purpose beyond the session debrief. Notes are retained for the same period as the founder's session data as set out in clause 9.1 of this policy.

Feedback: Following the session, NewPitch may use notes taken during the session to provide founders with constructive feedback on their pitch performance. This feedback is provided to the relevant founder only and is not shared with other founders, investors, or third parties.

Zoom as a platform: Sessions are conducted through Zoom Video Communications Inc. Zoom processes certain technical data in connection with session delivery including IP addresses, device information, and connection data. Zoom's processing of this data is governed by Zoom's own Privacy Policy, available at zoom.us/privacy. NewPitch is not responsible for Zoom's data processing practices. Participants should review Zoom's Privacy Policy before joining a session. By joining a NewPitch session via Zoom, participants acknowledge that Zoom's terms and privacy practices apply to their use of the Zoom platform.

Participant conduct during sessions: Participants joining a NewPitch session via Zoom should be aware that other participants — including founders, investors, and NewPitch team members — may be able to see their name, profile image, and any content they share during the session. Participants are responsible for ensuring their own Zoom settings and environment are appropriate before joining a session. NewPitch accepts no responsibility for personal data inadvertently disclosed by a participant through their own Zoom account or settings.

7.4 Legal and regulatory disclosure

We may disclose your personal data to courts, regulators, law enforcement agencies, or other third parties where we are legally required to do so or where disclosure is necessary to protect our legal rights, enforce our agreements, or respond to a legal claim.

7.5 Business transfers

In the event of a merger, acquisition, or sale of NewPitch or its assets, personal data held by NewPitch may be transferred to the acquiring entity. We will notify affected users of any such transfer in advance where reasonably practicable and will ensure the acquiring entity is bound by obligations no less protective than those in this policy.

7.6 We do not sell your data

We do not sell, rent, or trade your personal data to any third party for marketing or commercial purposes under any circumstances.

8. INTERNATIONAL TRANSFERS

NewPitch is based in the United Kingdom. Some of our service providers may process data outside the UK or European Economic Area. Where this occurs we ensure appropriate safeguards are in place — such as standard contractual clauses approved by the Information Commissioner's Office — to protect your data in accordance with UK GDPR requirements. Details of the safeguards applicable to each service provider are available on request at privacy@newpitch.co.

9. DATA RETENTION

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements. When data is no longer required it is securely deleted or anonymised so that it can no longer be associated with you.

9.1 Founders

Successful applicants: We retain application data, session records, and commission-related data for a period of 24 months from the date of your session. Where a commission dispute is ongoing at the end of this period, data will be retained until the dispute is fully resolved and then deleted within 30 days of resolution.

Where commission is paid early: Where commission has been paid in full and no dispute exists, NewPitch will delete your personal data and business documents within 12 months of commission payment upon written request from you to privacy@newpitch.co.

Rejected applicants: Where your application is unsuccessful, your personal data and all uploaded documents — including your pitch deck and financial model — will be deleted within 90 days of the rejection decision being communicated to you. Your email address may be retained for a further period solely to avoid sending duplicate rejection communications if you reapply within that period.

9.2 Investors

We retain investor panel data for a period of 12 months from the date your panel membership ends or from the date of the last session you attended, whichever is later.

Certification data: Investor certification data is retained for a period of 6 years from the end of your panel membership in accordance with our obligations under UK financial promotion rules. This retention period reflects the regulatory requirement to demonstrate compliance with the financial promotion exemptions relied upon during your membership.

Where membership is revoked: Where your panel membership is revoked by NewPitch or terminated by you, your personal data will be retained for 12 months from the date of termination for audit, compliance, and dispute resolution purposes. Certification data will be retained for 6 years as above. After the applicable retention period your data will be securely deleted.

Change of circumstances: If your circumstances change and you no longer meet the sophisticated investor or high net worth individual certification criterion you selected, you are obliged to notify NewPitch immediately at privacy@newpitch.co. Continued access to the Platform while not meeting the certification criteria may constitute a breach of the Investor Terms and will result in suspension of your panel membership.

9.3 Session recording

Where a session is recorded with the explicit prior consent of all participants, the recording will be deleted within 90 days of the session date unless a longer retention period has been separately agreed in writing with all consenting participants.

9.4 Website visitors

Technical and usage data collected through cookies is retained in accordance with clause 11 of this policy. IP addresses collected in connection with form submissions are retained for the same period as the relevant application or agreement.

9.5 Communications

Records of emails and other communications are retained for the same period as the relevant application, session, or agreement to which they relate, as set out in clauses 9.1 and 9.2 above.

10. DATA SECURITY

We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, loss, destruction, or alteration. These measures include:

• Secure cloud infrastructure provided by Supabase with row-level security policies restricting access to authorised users only
• Encryption of data in transit using TLS
• Access controls limiting data access to authorised NewPitch personnel only
• Secure document storage with expiring access links for founder materials shared with investors, ensuring links cannot be reused after the session date
• Regular review of our security practices and service provider arrangements

No method of transmission over the internet or electronic storage is 100% secure. While we take all reasonable steps to protect your data we cannot guarantee absolute security. If you become aware of any security vulnerability or breach relating to the Platform please notify us immediately at privacy@newpitch.co.

In the event of a data breach: Where a personal data breach is likely to result in a risk to your rights and freedoms we will notify the Information Commissioner's Office within 72 hours of becoming aware of it as required by UK GDPR. Where a breach is likely to result in a high risk to your rights and freedoms — for example unauthorised access to your pitch materials, financial documents, or certification data — we will contact you directly without undue delay to explain what happened, what data was affected, what the likely consequences are, and what steps we are taking to address it and to mitigate any adverse effects.

11. COOKIES AND COOKIE CONSENT

The Platform uses cookies and similar tracking technologies. A cookie is a small text file placed on your device when you visit a website.

Strictly necessary cookies are required for the Platform to function correctly. These include cookies that maintain your session, remember your form progress, and ensure the security of the Platform. These cookies do not require your consent and cannot be disabled without affecting core Platform functionality.

Analytics cookies are used to understand how visitors use the Platform so we can improve it. We use anonymised analytics data only. These cookies are only placed on your device with your consent. You can withdraw consent at any time by adjusting your cookie preferences.

Preference cookies are used to remember your settings and preferences across visits. These cookies are only placed on your device with your consent.

When you first visit the Platform you will be shown a cookie consent banner asking for your consent to non-essential cookies. You can accept all cookies, reject non-essential cookies, or manage your preferences individually. You can change your cookie preferences at any time by clicking the Cookie Settings link in the footer of the Platform.

* Cookie names to be completed by NewPitch before publication.

12. YOUR RIGHTS

Under UK GDPR you have the following rights in relation to your personal data. These rights are not absolute and may be subject to exemptions in certain circumstances.

Right of access: You have the right to request a copy of the personal data we hold about you. We will respond within one month of receiving your request. We may extend this by a further two months for complex or numerous requests and will notify you if this is the case.

Right to rectification: You have the right to request that we correct inaccurate or incomplete personal data we hold about you. We will respond within one month.

Right to erasure: You have the right to request that we delete your personal data in certain circumstances including where the data is no longer necessary for the purpose it was collected or where you withdraw consent. This right is not absolute and may be limited where we have a legal obligation to retain data, where retention is necessary for the establishment, exercise, or defence of legal claims, or where the data is necessary to enforce a commission obligation under the Founder Platform Agreement.

Right to restriction: You have the right to request that we restrict the processing of your personal data in certain circumstances including where you contest the accuracy of the data or where you have objected to processing.

Right to data portability: Where we process your data by automated means on the basis of your consent or a contract, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.

Right to object: You have the right to object to processing of your personal data where we rely on legitimate interests as our legal basis. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests or unless processing is necessary for the establishment, exercise, or defence of legal claims.

Rights related to automated decision-making: You have the right not to be subject to a decision made solely by automated processing that produces legal or significant effects concerning you. As described in clause 6.3, NewPitch uses automated tools to assist with initial screening but all decisions are reviewed by a human before being communicated to you. If you wish to request human review of any screening decision, please contact us at privacy@newpitch.co.

Right to withdraw consent: Where we rely on consent as our legal basis you have the right to withdraw that consent at any time by contacting us at privacy@newpitch.co or by adjusting your cookie preferences for cookie-based consent. Withdrawal does not affect the lawfulness of processing before withdrawal.

How to exercise your rights: To exercise any of the above rights please contact us at privacy@newpitch.co. We will respond within one month of receiving your verified request. We may need to verify your identity before processing your request. We will not charge a fee unless your request is manifestly unfounded or excessive.

13. CHILDREN

The Platform is not directed at children under the age of 18 and is intended solely for use by adults who meet the investor certification criteria or who are founders operating a business. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child under 18 please contact us immediately at privacy@newpitch.co and we will delete that data promptly.

14. THIRD PARTY LINKS

The Platform may contain links to third party websites including external resources referenced in blog articles and Further Reading sections. This Privacy Policy does not apply to those websites and we are not responsible for their content or privacy practices. We encourage you to read the privacy policy of any third party website you visit. We have no control over and accept no responsibility for the privacy practices of third party websites.

15. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, the Platform, or applicable law. We will update the version number and the Last updated date at the top of this policy when we do so.

For material changes — those that significantly affect how we use your data or your rights — we will notify registered founders and investors by email to the address held on file no less than 14 days before the change takes effect. Non-material changes such as corrections of typographical errors or clarifications that do not alter the substance of the policy may be made without prior notice.

The current version of this policy is always available at newpitch.co/privacy. Your continued use of the Platform following notification of material changes constitutes your acceptance of the updated policy. If you do not accept the updated policy please contact us at privacy@newpitch.co.

16. HOW TO COMPLAIN

If you are unhappy with how we have handled your personal data please contact us in the first instance at privacy@newpitch.co. We take all complaints seriously and will investigate your concern and respond within 14 days.

If you remain dissatisfied after contacting us, or if you wish to raise a concern directly with the regulatory authority, you have the right to lodge a complaint with the Information Commissioner's Office, the UK's data protection supervisory authority:

Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk · Helpline: 0303 123 1113
Report a concern: ico.org.uk/make-a-complaint

You also have the right to seek a judicial remedy through the courts if you believe your rights under UK GDPR have been infringed.

17. CONTACT US

For all privacy-related enquiries, requests to exercise your data subject rights, concerns about how we handle your personal data, or to notify us of a change in your investor certification status, please contact us:

By email: privacy@newpitch.co
By post: NewPitch Ltd, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ
Data controller: NewPitch Ltd
Company number: 16960090
Registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ

This Privacy Policy is Version 1.1, last reviewed and updated in June 2026. It applies to all personal data processed by NewPitch Ltd (company number 16960090) through the newpitch.co platform and all associated services. The previous version of this policy (Version 1.0) is available on request.

NewPitch Ltd · Company No. 16960090 · 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ