SUDStartup Disruptors

Legal

Privacy Policy

How we collect, use and protect your personal data — and the rights you have over it.

Last updated: 10 August 2026

1. About this privacy policy

Startup Disruptors is a brand owned and operated by Little Kanga Ltd.

This privacy policy explains how Little Kanga Ltd collects, uses, stores and protects personal data when you interact with Startup Disruptors, including when you:

  • visit the Startup Disruptors website;
  • contact us;
  • apply to join the Startup Disruptors community;
  • become a member;
  • become a partner;
  • register for an online session;
  • submit or respond to an opportunity;
  • make a payment;
  • subscribe to communications; or
  • otherwise interact with Startup Disruptors.

For the purposes of UK data protection law, Little Kanga Ltd is the data controller responsible for personal data processed through the Startup Disruptors website, membership services and community.

Our company details

Little Kanga Ltd — company number 10427511. Registered office: c/o Mailboxes Etc, Mailbox 107, 5 Charter House, Lord Montgomery Way, Portsmouth, Hants, UK, PO1 2SN.

Privacy contact: info@littlekanga.co.uk

Startup Disruptors is a brand and is not a separate legal entity.

2. The personal data we collect

The information we collect depends on how you interact with Startup Disruptors.

Identity information

  • name;
  • job title;
  • company name;
  • username or member identifier.

Contact information

  • email address;
  • telephone number;
  • business address;
  • website or social media details where you choose to provide them.

Business information

If you are a founder, member or partner, this may include information about your business, your role, your industry, your products or services, your business stage, what your business is looking for, what it can offer, business opportunities you submit, and information included in your Startup Disruptors profile.

Membership and payment information

If you become a member or partner, we may process information relating to your membership, subscription status, payments, invoices, transaction history and communications relating to your account.

Payments may be processed by third-party payment providers. We do not normally store your full payment card details ourselves.

Communications information

This may include information you provide when you contact us, complete a form, request information, subscribe to communications, provide feedback, participate in a survey, register for an online session, or communicate with us as a member or partner.

Technical and website information

  • IP address;
  • browser type;
  • device information;
  • operating system;
  • website pages visited;
  • referring website;
  • website usage information; and
  • information collected through cookies and similar technologies.

The use of cookies and similar technologies is explained in our cookie policy.

3. Information you choose to provide

You may choose to provide additional information about yourself or your business when using Startup Disruptors. Please do not provide sensitive personal information unless we specifically ask for it and explain why it is required.

Some information may constitute special category personal data under UK data protection law. This includes certain information concerning health, racial or ethnic origin, religious or philosophical beliefs, sexual orientation and other particularly sensitive information.

Startup Disruptors does not require members to provide special category information simply to join or participate in the community. If you voluntarily provide information of this nature, we will only use it where we have an appropriate lawful basis and, where required, an additional legal condition for processing special category data. We aim to minimise the collection and use of sensitive personal information.

4. How we collect personal data

Directly from you

  • joining Startup Disruptors;
  • completing a membership application;
  • completing a partner enquiry;
  • creating or updating a profile;
  • registering for an online session;
  • submitting an opportunity;
  • contacting us;
  • subscribing to communications;
  • making a payment; or
  • providing feedback.

Automatically

We may collect technical and usage information when you browse or interact with our website through cookies and similar technologies.

From third parties

Where appropriate, we may receive information from organisations that provide services to us or from publicly available sources, including:

  • payment providers;
  • website and hosting providers;
  • membership or community platforms;
  • email and communications providers;
  • analytics providers;
  • registration platforms;
  • professional advisers;
  • business partners; and
  • other service providers.

We only use information obtained from third parties where we have a lawful basis to do so.

5. How we use your personal data

We use personal data only where permitted by applicable data protection law. Depending on the circumstances, our lawful bases for processing may include:

Contract

Where processing is necessary to provide a membership, partnership or other service you have requested, or to take steps at your request before entering into a contract — for example creating and managing your member account, providing membership services, managing your partnership, processing payments and providing services you have requested.

Legitimate interests

Where processing is necessary for our legitimate business interests and those interests are not overridden by your rights and interests. This may include:

  • operating Startup Disruptors;
  • administering our community;
  • communicating with members and partners;
  • managing business relationships;
  • improving our services;
  • understanding website usage;
  • maintaining website and system security;
  • preventing fraud or misuse;
  • promoting relevant Startup Disruptors activities; and
  • managing and protecting our business.

Where we rely on legitimate interests, we consider the potential impact on individuals and the safeguards available to protect their rights.

Legal obligation

Where we need to process personal data to comply with a legal, accounting, tax or regulatory obligation.

Consent

Where consent is required by law, we will ask for it. You can withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

6. What we use your information for

Membership administration
Creating and managing member accounts.
Partner management
Managing partner relationships and enquiries.
Payments
Processing subscriptions, invoices and payments.
Community services
Providing access to relevant community services.
Profiles
Displaying information you choose to make available.
Online sessions
Registration and administration.
Opportunities
Publishing and administering opportunities submitted to Startup Disruptors.
Communications
Responding to enquiries and providing service information.
Marketing
Sending relevant Startup Disruptors marketing where permitted.
Website operation
Security, troubleshooting, maintenance and administration.
Analytics
Understanding website use and improving our services.
Business administration
Accounting, legal, compliance and general business administration.
Security
Protecting our website, systems, members and business.

7. Member and partner profiles

If you become a Startup Disruptors member or partner, you may have the option to create a profile within the community. Information you choose to make available may include your name, company, job title, business description, website, industry, location, areas of expertise, what you are looking for, what you can offer and other information you choose to provide.

We will make clear whether information is publicly available or available only within the Startup Disruptors community. You can contact us to request correction or removal of inaccurate information.

Please do not include sensitive personal information in a public or community profile unless you have specifically considered the consequences of doing so.

8. Marketing

We may send you information about Startup Disruptors, including:

  • membership opportunities;
  • partner opportunities;
  • online sessions;
  • community activity;
  • relevant business opportunities;
  • news and updates; and
  • other Startup Disruptors services or activities that may be relevant to you.

We will comply with the Privacy and Electronic Communications Regulations (PECR) and applicable data protection law when sending electronic marketing. Where consent is required, we will obtain it before sending marketing communications. Where the law allows another lawful basis for direct marketing, we will comply with the applicable requirements.

You have an absolute right to object to the use of your personal data for direct marketing, and every marketing email will include an appropriate way to unsubscribe where applicable. Unsubscribing will not stop essential service or transactional communications, such as information about your membership, payments, security or important changes to our services.

9. Sharing your personal data

We may share personal data with trusted third parties where necessary for the purposes described in this policy. These may include:

  • payment providers;
  • website hosting and technology providers;
  • membership or community platform providers;
  • email and communications providers;
  • analytics providers;
  • online session or registration providers;
  • professional advisers, accountants, insurers and lawyers;
  • regulators and government authorities where required;
  • IT and security providers; and
  • other service providers acting on our instructions.

Where appropriate, organisations processing personal data on our behalf will be subject to contractual requirements relating to data protection and confidentiality. We may also share information within the Startup Disruptors community where you have chosen to make that information available, for example through a member profile or opportunity submission.

We do not sell your personal data. We do not allow third parties to use your personal data for their own direct marketing purposes unless you have specifically agreed to this or the law otherwise permits it.

10. Business changes

If Little Kanga Ltd or Startup Disruptors is involved in a merger, acquisition, restructuring, sale of assets or similar business transaction, personal data may be transferred as part of that transaction where legally permitted. Any new owner or controller will be required to handle personal data in accordance with applicable data protection law.

11. International transfers

Some of our service providers may process personal data outside the United Kingdom. Where personal data is transferred outside the UK, we will ensure the transfer is permitted under applicable UK data protection law and that appropriate safeguards are used where required. Depending on the circumstances, this may include an applicable UK adequacy regulation or decision, appropriate contractual safeguards or another lawful transfer mechanism.

You can contact us if you would like more information about the safeguards used for a particular international transfer.

12. Cookies and similar technologies

Our website uses cookies and similar technologies. Some cookies are necessary for the website to operate. Others, such as certain analytics, advertising or tracking technologies, may require your consent before they are used.

Where consent is required, you will be given a genuine choice to accept or reject non-essential cookies, and you will be able to change your preferences through our cookie settings. Please see our separate cookie policy for information about the cookies and similar technologies used on the website, including what they do and why they are used.

13. Data security

We take appropriate technical and organisational measures to protect personal data against:

  • unauthorised access;
  • accidental loss;
  • destruction;
  • alteration;
  • unauthorised disclosure; and
  • other unlawful or unauthorised processing.

Access to personal data is limited to people and organisations that need it for legitimate business purposes. Where appropriate, organisations processing personal data on our behalf are subject to confidentiality obligations and contractual data protection requirements. If we become aware of a personal data breach, we will assess it and take any steps required by applicable data protection law.

14. How long we keep your data

We keep personal data only for as long as reasonably necessary for the purpose for which it was collected, unless we are required or permitted by law to retain it for longer. The appropriate retention period depends on:

  • the type of information;
  • why we collected it;
  • whether you remain a member or partner;
  • legal and accounting requirements;
  • our legitimate business needs;
  • the risks associated with retaining the information; and
  • whether the purpose can be achieved by retaining less information.

When personal data is no longer required, we will securely delete it or anonymise it where appropriate. Some information may need to be retained for longer periods to meet legal, accounting, tax, regulatory or dispute-resolution requirements.

15. Your data protection rights

Depending on the circumstances and applicable law, you may have the right to:

  • Access — request access to the personal data we hold about you.
  • Rectification — ask us to correct inaccurate or incomplete personal data.
  • Erasure — ask us to delete personal data where there is no lawful reason for us to continue processing it.
  • Restriction — ask us to restrict processing in certain circumstances.
  • Data portability — in certain circumstances, receive personal data you have provided in a structured, commonly used and machine-readable format, and ask us to transfer it to another organisation.
  • Object — object to certain processing of your personal data. You have an absolute right to object to direct marketing.
  • Withdraw consent — where we rely on your consent, you can withdraw it at any time.

These rights are subject to certain legal exceptions and limitations.

16. How to exercise your rights

To exercise your data protection rights, contact info@littlekanga.co.uk. Please provide enough information for us to identify you and understand your request. We may need to verify your identity before providing personal information or making changes to your account.

We will respond to valid requests within the applicable legal time period. We will not normally charge a fee. We may charge a reasonable fee or refuse a request where permitted by law, for example where a request is manifestly unfounded or excessive.

17. Automated decision-making and profiling

We do not currently make decisions about you based solely on automated processing that produce legal or similarly significant effects. If this changes, we will provide the information required by applicable data protection law and explain the relevant safeguards and your rights.

18. Data protection complaints

If you have concerns about how we have handled your personal data, you can make a data protection complaint to us at info@littlekanga.co.uk. You may also use our online data protection complaints form where available.

We will:

  • acknowledge your complaint within 30 days;
  • investigate it appropriately;
  • keep you informed about the progress of the investigation where appropriate; and
  • communicate the outcome to you without undue delay.

These requirements reflect the current UK data protection complaints framework introduced by the Data (Use and Access) Act 2025.

If you remain unhappy with our response, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk. You do not have to contact us before contacting the ICO, although we would appreciate the opportunity to try to resolve your concerns first.

19. Changes to this privacy policy

We may update this privacy policy from time to time to reflect:

  • changes to our services;
  • changes to how we process personal data;
  • changes to our technology;
  • changes to applicable law or regulatory guidance; or
  • changes to our business.

The latest version will always be published on this website with the date it was last updated.

20. Contact us

If you have questions about this privacy policy, how Startup Disruptors handles personal data, or wish to exercise your data protection rights, please contact:

Little Kanga Ltd — company number 10427511
c/o Mailboxes Etc, Mailbox 107, 5 Charter House
Lord Montgomery Way, Portsmouth, Hants, UK, PO1 2SN

Privacy email: info@littlekanga.co.uk

Startup Disruptors is a brand owned and operated by Little Kanga Ltd.

Last updated: 10 August 2026