Newson Cairn

Legal

Privacy notice

What we collect, why, who sees it, how long we keep it and your rights.

Who is responsible

Newson Cairn ("we"), Front Street, Hamilton HM 12, Bermuda, is responsible for your personal data.

For anything about your data, write to [email protected].

What we collect

  • What you send us: your name, role, email address and other contact details, information about your company, pitch decks, financial information, and your later emails and attachments.
  • Template downloads: if you download our application template, your email address, the programme and file format you chose, the date, and the country your connection comes from.
  • Co-investors: if you write to partners@ or we register you as a co-investor, your name, organisation, email address, investor type, ticket range and sectors of interest, your emails and attachments, the results of identity and compliance checks, and a record of each file you download from our partner file area (time and IP address).
  • Review fee payments: Stripe processes card payments for us. We receive your name, email address, the amount and a payment reference. We never see or store your card number.
  • Information from public sources: company registers, news, websites and sanctions lists, used to check the claims in a proposal and the people involved.
  • If we move towards investing: identity and ownership documents needed for anti-money-laundering and know-your-customer checks.
  • This website: our server records IP addresses and pages requested, for security only. Cloudflare, which delivers the website, counts visits without cookies and without identifying you. If you accept analytics cookies, Google Analytics records how you use the website (pages viewed, approximate location, device and browser). We use no advertising or tracking across other websites.

Why we use it

  • To review your proposal, ask questions and reply to you.
  • To tell you when the application template you downloaded changes. We send nothing else to that address.
  • To consider you as a co-investor, run identity and compliance checks, and invite you to opportunities by email.
  • To take and record your review fee.
  • To check facts, identities, sanctions and the background of a proposal.
  • To keep records and deal with disputes.

AI-assisted review

We use AI software to read proposals, summarise them, check the figures, research public information and draft memos and letters. For this, your documents and emails are sent to our AI provider, Anthropic, which processes them on our behalf under contract and does not use them to train its models.

Every decision is made by a person. We do not make decisions about you by automated means alone.

Who we share it with

We never sell your data or publish it. We share it only with:

  • service providers who work for us under contract: Hostinger (the server for this website and our case files), Cloudflare (website delivery, security and cookieless visit statistics), Namecheap (email), Anthropic (AI processing) and Google (website analytics, only if you accept cookies);
  • Stripe, which handles review fee payments and is responsible for the payment data it processes (see Stripe's own privacy policy);
  • regulated identity-check providers, lawyers and other professional advisers, if a review moves towards an investment;
  • authorities, where the law requires it.

Where your data is processed

Some of these providers process data in other countries, for example in the United States. We use only established providers bound by contract to protect it.

How long we keep it

  • Proposals we decline or that are withdrawn: up to 24 months after our decision, then deleted.
  • Proposals we invest in: for the life of the investment, then as long as the law requires (anti-money-laundering records, for example, for up to ten years).
  • Payment records: as long as accounting and tax law requires.
  • Template download records: up to 24 months, then deleted.
  • Co-investor records: while you are registered with us, and up to 24 months after the relationship ends, then deleted.
  • Server security logs: up to 14 days.
  • Data we delete also leaves our backups within 21 days.

Security

Your data is kept on a private server with encrypted connections. Access is limited to the people who need it and protected by strong passwords and two-step sign-in.

Your choices

You can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, send it to you or another organisation in a common format, or stop using it. It is free, and we reply within one month.

Write to [email protected].

Introducer applications and referral links

To become an introducer, you apply on newsoncairn.com/careers/introducers in one step: your name, email address, phone number, LinkedIn profile address, country and city, current role, sectors, languages and your answers about your network, and that you accept the introducer ground rules. A Cloudflare Turnstile check protects the form against automated abuse. If you arrived from one of our links, we also record the campaign it carried (for example which LinkedIn post), never anything about other websites you visited.

We email you a link to confirm your address; the link works for 48 hours, once. If you haven't confirmed after two days, we send one reminder. We record when you applied and confirmed, and the country Cloudflare reports for your connection, and we may look at your public LinkedIn profile.

Automatic scoring. When you confirm your email, your answers are scored automatically against our introducer criteria (your network, role, region, the founders you could introduce, and signs of practices we don't accept, such as charging founders). Applications that clearly meet the criteria are accepted at once; every other application is reviewed by a person. We never decline an application automatically, and you can ask for a person to review any decision by writing to [email protected].

Referral links. Accepted introducers get a personal code and link. When someone opens the link, we count the opening against the code, without recording anything about that person. When a founder writes to us with the code, we record the introduction on both the founder's file and the introducer's record. We send introducers one reminder if they haven't made an introduction 14 days after joining.

These details are used only internally by Newson Cairn, to assess your application, contact you about it and, if you join us, manage the introducer relationship and pay you. They are never shared, sold or published.

Applications whose email address is never confirmed are deleted after 30 days. Registrations from our earlier two-step form are deleted after 30 days if unconfirmed and after 12 months if no application followed. If we do not take your application forward, we delete it 24 months after our decision. If you become an introducer, we keep your details while you work with us and for up to 24 months afterwards, longer only where we still owe you payments. You can ask us to delete your details at any time by writing to [email protected].

WhatsApp contact

To get our WhatsApp number, you request it on our Contact page with your work email. Cloudflare Turnstile checks that the request comes from a person. We email you a one-time link and keep a record of the request (time, email address, country of your connection and the outcome) to prevent abuse. We delete these records after 24 months.

If you then message us on WhatsApp, WhatsApp (Meta Platforms Ireland Ltd) processes your number and messages under its own terms. We use them only to answer your question, don't use them for marketing, and delete chats after 12 months. Please don't send personal or company documents by WhatsApp. Send them by email.

Cookies and analytics

We use Cloudflare Web Analytics to count visits and see which pages are read. It sets no cookies and does not identify you.

With your agreement only, we also use Google Analytics. It sets the cookies _ga and _ga_*, kept for up to two years, to tell visits apart and to show us how the website is used. Google processes this data for us and may process it in the United States. If you reject, no Google Analytics code is loaded and no such cookies are set.

You can change your choice at any time with Cookie settings at the bottom of every page. Your choice is remembered in your browser, not in a cookie.

A private sign-in area for our own staff uses a single cookie that is strictly necessary to keep them signed in.

Changes

If we change this notice, we update the date below.

Last updated: 19 October 2026.