Privacy, data handling, and preference management

What we may collect

We may collect information you submit through contact, precheck, upload, booking, consent, investor-eligibility, or partner-application flows, together with device data, source-page data, UTM tags, access logs, file metadata, and audit records.

Why we use it

We use this information to run borrower-readiness workflows, manage documents, coordinate communication, review eligibility, screen investor or partner access, secure the platform, prevent misuse, analyse operations, maintain compliance records, and follow up where you have clearly requested or allowed that follow-up.

Where information may also come from

In addition to information you submit directly, we may receive supporting information from brokers, introducers, professional advisers, identity-verification providers, payment or infrastructure vendors, and other third parties you authorise.

When information may be shared

We share information only where reasonably necessary to provide the service, support operations, meet legal obligations, prevent fraud, or complete compliance review, and we try to keep that sharing to the minimum necessary scope.

Cross-border processing and vendors

The platform may rely on cloud storage, analytics, communications, identity-verification, or AI vendors located outside your home country. Where a specific workflow involves identifiable cross-border disclosure, that workflow should provide a more specific notice or contractual document set.

AI and automation

HarbourStep AI features and readiness outputs are used for organisation, triage support, and next-step guidance. They are not formal credit decisions, securities-offer determinations, or personalised investment advice. If a future workflow uses automation in a way that materially affects an individual, that workflow should explain it clearly.