Legal
Privacy Policy
How the platform collects, uses, stores and protects personal information.
This policy describes how The Nation Building Project handles personal data. It is written to be read, not to be defensible — where a practice would surprise a reasonable reader, it is stated plainly rather than buried.
What is collected
Account details for portal users (name, organisation, role, contact details), investor mandate fields where an institution chooses to record one, and enquiry submissions. Server logs record IP address and user agent for security purposes.
What is not collected
The platform does not use advertising trackers, does not sell personal data, and does not build behavioural profiles. Matching in Capital Match uses only the mandate fields an institution has explicitly recorded — nothing is inferred.
Why it is held
To operate portal access and its permissions, to route enquiries to the relevant function, to maintain the audit history that controlled documentation requires, and to meet legal and regulatory obligations.
Data room activity
Views, downloads and prints within a data room are logged and retained, including after access expires. This is a condition of counterparties sharing commercial and government material at all, and cannot be opted out of while access is held.
Retention
Account data is retained while an account is active and for the period afterward that legal obligations require. Audit records are retained for the life of the associated project record.
Sharing
Personal data is not shared with third parties except where a service provider processes it on NBP’s behalf under contract, or where disclosure is legally required.
Your rights
You may request access to the personal data held about you, ask for correction of inaccurate data, and request deletion where no legal or contractual obligation requires it to be kept. Requests are made through the contact page.
Changes
Material changes to this policy will be published here with the date they take effect.