Privacy Policy

Suma is a London-based executive placement and advisory business. We work with consumer startup founders at pre-seed, seed, and Series A to place fractional and full-time executives, make investor introductions, and provide hiring advisory.

Website: suma.ventures Contact: hello@suma.ventures

For the purposes of UK GDPR, Suma is the data controller.

We collect personal data in the following circumstances:

When you submit a form on our website (candidates page or investors page), we collect: your name, email address, LinkedIn profile URL, and the information you provide in the form fields.

When you book a call via our booking tool, we collect your name, email address, and any information you provide at the time of booking.

When you contact us directly by email, we collect your name, email address, and the contents of your correspondence.

We do not collect sensitive personal data. We do not use cookies for advertising or tracking purposes.

We will only share a candidate's personal data with a client company where we have obtained the candidate's explicit prior consent to do so. Candidates may withdraw consent at any time by contacting hello@suma.ventures, at which point their data will no longer be shared with prospective clients.

We use the personal data we collect for the following purposes:

• To respond to enquiries and booking requests
• To assess your suitability for roles we are working on (candidates)
• To match your investment thesis to relevant opportunities (investors)
• To communicate with you about relevant opportunities
• To fulfil our contractual obligations where a placement or introduction agreement is in place

We do not sell your data to third parties. We do not use your data for automated decision-making.

We process your personal data on the following legal bases under UK GDPR:

• Legitimate interests: where we have a legitimate business interest in contacting you about relevant opportunities, and that interest is not overridden by your rights
• Contract: where processing is necessary to fulfil a contractual obligation
• Consent: where you have actively submitted your details via our website forms

We share your data only where necessary to operate our business. This includes:

• Cal.com: we use Cal.com to manage booking requests
• Email providers: we use standard email to communicate with you

All third party tools we use are GDPR compliant. We do not share your personal data with any other third parties without your consent, except where required by law.

We retain your personal data for as long as is necessary for the purposes set out in this policy.

For candidates: we retain your details for up to 24 months from the date of submission, or until you request deletion.

For investors: we retain your details for as long as you wish to receive deal flow, or until you request deletion.

For general enquiries and correspondence: we retain email correspondence for up to 12 months.

Under UK GDPR you have the following rights:

• The right to access the personal data we hold about you
• The right to correct inaccurate data
• The right to request deletion of your data
• The right to restrict or object to processing
• The right to data portability
• The right to withdraw consent at any time

To exercise any of these rights, contact us at simon@suma.ventures. We will respond within 30 days. If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner's Office at ico.org.uk.

We take reasonable steps to protect your personal data from unauthorised access, loss, or disclosure. Data is stored in password-protected systems and shared only where necessary.

This website uses Google Analytics 4, a web analytics service provided by Google LLC. Analytics help us understand how visitors find and use the site so we can improve it. No advertising networks or third-party data sharing are involved.

Google Analytics may set a single first-party cookie on your device. This cookie is only placed after you give consent via the banner shown on your first visit. If you decline, Google Analytics runs without cookies and no data is stored on your device.

IP addresses are anonymised before any data reaches Google's servers. No data collected via analytics is used for advertising purposes.

You can withdraw consent at any time by clearing your browser's site data for suma.ventures. This is usually found under your browser's privacy or developer settings. Once cleared, the analytics cookie will be removed and will not be set again until you give consent.

We may update this privacy policy from time to time. The current version will always be available at suma.ventures. We will notify you of any material changes where we have your contact details.