GDPR & UK Data Protection

This page summarises how UK GDPR applies to CoStartups and the rights you have over your personal data.

Last updated: 22 May 2026

1. Data controller

Northbrik Systems LTD (Companies House 17184680, ICO ZC135104) is the data controller for personal data processed through CoStartups (costartups.app). Registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ. For full details on what we collect and why, see our Privacy Policy.

Data protection enquiries: privacy@costartups.app.

2. Lawful bases

We process personal data under UK GDPR on the following bases:

  • Contract: to create your account, operate profiles, posts, notifications, and other features you use
  • Legitimate interests: to keep the network secure, prevent abuse, improve the service, and maintain platform integrity
  • Consent: where required, for example optional marketing email if you subscribe to our digest
  • Legal obligation: where we must retain or disclose data under UK law

3. Your rights

Under UK data protection law you may have the right to:

  • Access a copy of the personal data we hold about you
  • Rectification of inaccurate or incomplete data
  • Erasurein certain circumstances ("right to be forgotten")
  • Restriction of processing in certain circumstances
  • Object to processing based on legitimate interests in certain circumstances
  • Data portability for data you provided, where processing is automated and based on contract or consent
  • Withdraw consent where processing is based on consent, without affecting prior lawful processing

We do not use automated decision-making or profiling that produces legal or similarly significant effects.

4. How to exercise your rights

Email privacy@costartups.app with the request and enough information to verify your identity. We respond within one month in most cases. We may extend this by up to two further months for complex requests and will tell you if we do.

You can update much of your profile data directly in profile settings. To delete your account, contact privacy@costartups.app.

5. International transfers

Our subprocessors (including Supabase and Vercel) may process data outside the UK. Where data is transferred internationally, we rely on appropriate safeguards such as UK adequacy regulations or standard contractual clauses. See our Privacy Policy for more detail.

6. Complaints

If you are unhappy with how we handle your data, contact us first at privacy@costartups.app. You may also lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk. Our ICO registration number is ZC135104.

7. Related policies