Privacy Notice
Last updated: 24 August 2026
This notice explains how Canopy Ventures Ltd ("we", "us"), trading as The CFO Stack (thecfostack.app) and RSVP Business Angel (rsvpbusinessangel.com), collects, uses, and protects personal data in connection with our management consulting, investment-readiness advisory, investor-founder matchmaking events, and newsletter services.
We are the data controller for the personal data described below.
Company: Canopy Ventures Ltd (Company No. 16585392)
Trading as: The CFO Stack, RSVP Business Angel
Contact for privacy queries: elenasuciu@rsvpbusinessangel.com
Registered office: 2nd Floor College House, 17 King Edwards Road, Ruislip, London, HA4 7AE, United Kingdom
1. What data we collect
Depending on your relationship with us, we may collect:
- Contact details: name, email address, phone number, company name, job title, LinkedIn profile
- Business information: company details, sector, fundraising stage, investment materials you share with us (decks, financial models)
- Investor profile information: investment focus, ticket size, geography, priority/fit notes we record for matching purposes
- Event attendance data: for Pitch Lounge-style matchmaking events — name, company, contact details, and attendance record
- Newsletter subscriber data: email address, and engagement data (opens/clicks) if our email platform provides it
- Identity verification details, where specifically requested for a formal process (e.g. an NDA): we only request this when necessary for that specific process, and will explain why at the time
We do not collect more than we need for the specific purpose it's collected for.
2. Why we collect it, and our legal basis
| Purpose | What data | Legal basis |
|---|---|---|
| Delivering consulting/advisory engagements | Contact details, business information, materials you share | Contract / legitimate interest |
| Matching investors and founders at events | Contact details, investment/business profile | Legitimate interest |
| Sending our newsletter | Email address | Consent (you can withdraw at any time) |
| Building and maintaining our investor/founder database for matchmaking purposes | Contact details, investment focus, business information | Legitimate interest |
| Responding to enquiries | Contact details, message content | Legitimate interest / contract |
Where we rely on legitimate interest, we've considered that our processing is proportionate, expected in a B2B advisory/networking context, and doesn't override your own rights and interests. You can object to this processing at any time (see Section 6).
3. Who we share data with
We use the following service providers to run our business, who process data on our behalf under their own data protection terms:
- Notion (workspace and database management)
- Microsoft 365 / Outlook (email and calendar)
- Cal.com (meeting scheduling)
- Our newsletter distribution platform
We do not sell personal data. We only share investor/founder contact details with each other where it's directly relevant to a specific introduction or matchmaking purpose, and we exercise judgment about who we introduce.
Some of these providers may process data outside the UK/EEA. Where this happens, we rely on their standard contractual clauses or equivalent safeguards.
4. How long we keep data
We keep personal data for as long as necessary for the purpose it was collected:
- Client engagement records (contracts, invoices, correspondence): 6 years after the engagement ends
- Investor/founder database entries: reviewed periodically and removed or refreshed if no longer relevant
- Newsletter subscribers: until you unsubscribe
- Event attendee data: up to 24 months after the event
- Prospective clients who don't proceed with an engagement: 12 months, then deleted or anonymised
5. Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data (subject to legal/contractual exceptions)
- Object to processing based on legitimate interest
- Withdraw consent at any time (e.g. unsubscribe from the newsletter)
- Request a copy of your data in a portable format
- Complain to the Information Commissioner's Office (ICO) if you believe we've mishandled your data — ico.org.uk
To exercise any of these rights, contact us at elenasuciu@rsvpbusinessangel.com.
6. Objecting to processing / unsubscribing
You can object to being included in our investor/founder database, or unsubscribe from the newsletter, at any time by contacting elenasuciu@rsvpbusinessangel.com or using the unsubscribe link in any newsletter email.
7. Changes to this notice
We may update this notice from time to time. The "last updated" date at the top reflects the most recent revision.