Privacy Policy
Last updated: 11 July 2026
1. Introduction
My Finance Foundation ("MFF", "we", "us", "our") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, store, and protect your information when you use our portal at portal.myfinancefoundation.com.
We comply with the UK Data Protection Act 2018 and the General Data Protection Regulation (GDPR).
2. Information We Collect
We collect the following categories of personal data:
- Identity data: name, date of birth, nationality, gender
- Contact data: email address, phone number, postal address
- Academic data: educational history, qualifications, test scores
- Financial data: payment records, transaction history (we do not store full card numbers)
- Document data: passports, transcripts, recommendation letters, financial documents
- Technical data: IP address, browser type, login timestamps, device information
- Usage data: pages visited, applications submitted, interactions with our platform
3. How We Use Your Information
We use your personal data for the following purposes:
- Processing scholarship and study applications
- Communicating about your applications, payments, and vouchers
- Verifying your identity and uploaded documents
- Issuing scholarship funding vouchers
- Conducting video interviews and assessments
- Improving our services and user experience
- Complying with legal obligations
- Preventing fraud and ensuring platform security
4. Legal Basis for Processing
Under GDPR, we process your data based on:
- Contract: To deliver our services to you
- Consent: For marketing communications (which you can withdraw)
- Legitimate interests: To operate, improve, and secure our platform
- Legal obligation: To comply with applicable laws
5. Data Storage and Security
Your data is stored on secure servers hosted within the EU/UK. We implement industry-standard security measures including:
- Encrypted password storage using bcrypt hashing
- HTTPS/TLS encryption for all data transmission
- CSRF protection on all forms
- Restricted access to personal data within our team
- Regular security audits and updates
6. Data Sharing
We do not sell your personal data. We may share your information with:
- Universities and educational institutions as part of your application process
- Payment processors (Stripe) for transaction processing
- Email service providers for sending notifications
- Legal authorities when required by law
7. Your Rights Under GDPR
You have the right to:
- Access your personal data we hold
- Rectify inaccurate or incomplete data
- Erasure ("right to be forgotten") — request deletion of your data
- Restrict processing of your data
- Data portability — receive your data in a structured format
- Object to certain types of processing
- Withdraw consent at any time
To exercise these rights, contact us at privacy@myfinancefoundation.com.
8. Data Retention
We retain your data for as long as your account is active or as needed to provide services. After account deletion, your data is permanently removed within 30 days, except where retention is required by law or for legitimate business purposes (such as financial records).
9. Cookies
We use cookies and similar technologies to:
- Maintain your login session
- Remember your preferences
- Analyze platform usage
- Provide security against fraud
You can control cookies through your browser settings. Disabling essential cookies may affect platform functionality.
10. International Data Transfers
If you access our services from outside the UK/EU, your data may be transferred to and processed in countries with different data protection laws. We ensure appropriate safeguards are in place for such transfers.
11. Children's Privacy
Our services are not intended for individuals under 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.
12. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of significant changes via email or platform notification. The "Last updated" date at the top reflects the most recent version.
13. Contact Us
For privacy-related questions or to exercise your rights, contact:
If you believe we have not addressed your privacy concerns satisfactorily, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.