SIA Angel Hub — Privacy, Cookie & GDPR Policies
Privacy Policy
Last updated: October 7, 2026 · Effective date: October 5, 2026
This Privacy Policy explains how SIA Angel Hub, S.L. ("SIA Angel Hub", "we", "us", or "our") collects, uses, discloses, and protects personal data when you visit siaangelhub.com (the "Website"), complete our investor assessment, apply to our program, or otherwise interact with us.
We are committed to protecting your privacy in accordance with the EU General Data Protection Regulation (GDPR), the UK GDPR, and other applicable data protection laws. By using the Website, you acknowledge the practices described in this Policy.
1. Who We Are
SIA Angel Hub is a startup investor accelerator program. The data controller responsible for your personal data is:
SIA Angel Hub, S.L.
Calle Bilbao 237, 08018 Barcelona, Spain
Contact: info@siaangelhub.com
2. Personal Data We Collect
| Data | Collected when | Examples |
|---|---|---|
| Contact details | You apply, book a call, or contact us | Name, email address, phone number |
| Assessment / application responses | You complete the "Investor Assessment" at /apply | Your self-reported investing experience, goals, and stage |
| Professional background | You apply to the program | Any background information you choose to share with us as part of your application (for example, investment experience or professional background) |
| Payment information | Not currently collected through this Website | We do not process payments through this Website |
| Usage and device data | You browse the Website | IP address, browser type, device type, pages visited, referral source |
| Cookies and similar technologies | You browse the Website | See our Cookie Policy below |
We do not knowingly collect personal data from anyone under 18. The program is intended for adults evaluating or engaged in angel investing.
3. How We Use Your Personal Data
We use personal data to:
Operate, maintain, and improve the Website
Evaluate and respond to program applications
Communicate with you about the program, your application, or your enquiry
Send marketing communications about the program, events, or related content, where you have consented or it is otherwise permitted
Understand how visitors use the Website (via analytics and session-recording tools)
Comply with legal, tax, and regulatory obligations
Detect, prevent, and address fraud, security, or technical issues
Phone Calls & Event Invitations
If you sign up or apply, we collect your phone number to call you, discuss your application, and invite you to events. Outbound marketing calls require your prior consent (captured through the third-party intake/booking tool used when you apply) — you can withdraw it at any time, by telephone or by emailing info@siaangelhub.com, and we will stop calling you.
We do not use AI tools to process personal data such as your application, contact, or call details — these are handled and stored manually (for example, in internal spreadsheets). Separately, some content on this Website — such as text, images, or other materials — may have been created or assisted by AI tools; this does not involve your personal data.
4. Legal Basis for Processing (GDPR)
See the dedicated GDPR Compliance section below for the legal basis relied on for each category of processing.
5. Who We Share Data With
We do not sell personal data. We may share it with:
Service providers who process data on our behalf, such as: Google Analytics (website analytics), Microsoft Clarity (session recording/heatmaps), Google reCAPTCHA (spam and abuse protection on the application form), the software and service providers we use to manage applications, scheduling, and communications, and our website hosting provider.
Professional advisors such as lawyers, auditors, and accountants, where necessary
Authorities where required by law, regulation, or legal process
A successor entity, in the event of a merger, acquisition, or sale of assets
Every third party we share data with is contractually required to protect it and use it only for the purposes we specify.
6. International Data Transfers
Some of our service providers (including Google and Microsoft) may process personal data outside the European Economic Area (EEA), including in the United States. For example, application data submitted through the Website is stored in Google Sheets. Where this occurs, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, or the service provider's participation in the EU-U.S. Data Privacy Framework, to ensure your data remains protected to EU standards.
7. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes described in this Policy, including:
Application and assessment data: 2 years from your last interaction, unless you enroll
Enrolled-participant records: 2 years after program completion (plus any longer period required by Spanish tax/accounting law)
Marketing contact data: until you unsubscribe or we have no legitimate reason to retain it
Analytics data: per the retention settings of Google Analytics and Microsoft Clarity (configurable — see Cookie Policy)
8. Your Rights
See the GDPR Compliance section below for the full list of your rights and how to exercise them.
9. Security
We apply reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse, or alteration. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Last updated" date, and where appropriate, we will notify you directly.
11. Contact Us
Questions about this Policy or how we handle your data: info@siaangelhub.com.
Cookie Policy
Last updated: October 7, 2026
This Cookie Policy explains how SIA Angel Hub uses cookies and similar tracking technologies on siaangelhub.com, and how you can control them.
1. What Are Cookies
Cookies are small text files placed on your device when you visit a website. They are widely used to make websites work, work more efficiently, and to provide information to the site owner.
2. Cookies Currently Used on This Site
The following cookies and similar technologies are used on this Website. Analytics cookies only load after you accept them:
| Name / Provider | Purpose | Type | Duration |
|---|---|---|---|
Google Analytics (_ga, _ga_*) — Google LLC | Measures site traffic and visitor behavior (pages viewed, session duration, source) | Analytics (non-essential) | Up to 2 years |
Microsoft Clarity (_clck, _clsk, CLID, MR, SM) — Microsoft Corporation | Session recording and heatmaps to understand how visitors use the site | Analytics (non-essential) | Up to 1 year |
| Google reCAPTCHA — Google LLC | Protects the application form at /apply from spam and automated abuse | Strictly necessary | Set by Google (see Google's Privacy Policy) |
3. Categories of Cookies
Strictly necessary — required for the Website to function securely (e.g. protecting the application form from spam with Google reCAPTCHA). These cannot be switched off and do not require consent under GDPR/ePrivacy rules.
Analytics / performance — help us understand how visitors use the Website (Google Analytics, Microsoft Clarity). Require your consent for EU/UK visitors before they load.
Marketing / advertising — none currently used on this Website.
4. Consent and Your Choices
Under GDPR and the ePrivacy Directive, non-essential cookies (including analytics cookies like Google Analytics and Microsoft Clarity) may not be set before a visitor gives affirmative consent if the visitor is in the EU/UK/EEA. We therefore only load analytics cookies after you accept them in our consent banner. You can decline them, and change your choice at any time via "Cookie Settings" at the bottom of every page.
You can also control cookies through:
The consent banner on this site, which you can reopen at any time via "Cookie Settings" at the bottom of every page
Your browser settings (most browsers let you block or delete cookies)
Opt-out tools: Google Analytics Opt-out Browser Add-on, Microsoft Clarity respects the "Do Not Track" / consent signals passed to it
Blocking some cookies may affect site functionality.
5. Changes to This Policy
We may update this Cookie Policy as we add or remove tools from the Website. Check back periodically for updates.
GDPR Compliance
SIA Angel Hub has a genuinely international audience (testimonials and applicants from the EU, UK, and beyond), so this section applies GDPR as the baseline standard site-wide rather than only to EU visitors.
Legal Basis for Each Processing Activity
| Processing activity | Legal basis |
|---|---|
| Responding to applications and enquiries | Performance of a contract / pre-contractual steps taken at your request (Art. 6(1)(b)) |
| Running the program for enrolled participants | Performance of a contract (Art. 6(1)(b)) |
| Marketing communications (newsletters, program updates) | Consent (Art. 6(1)(a)), or legitimate interest for existing applicants/participants where permitted |
| Website analytics (Google Analytics, Microsoft Clarity) | Consent (Art. 6(1)(a)) — required before these cookies load for EU/UK/EEA visitors |
| Fraud prevention, security (including Google reCAPTCHA on the application form), legal compliance | Legal obligation (Art. 6(1)(c)) / legitimate interest (Art. 6(1)(f)) |
| Phone calls & event invitations (outbound marketing contact) | Consent (Art. 6(1)(a)); calls are made in line with Spain's telemarketing rules, including the Lista Robinson exclusion list. |
Your Rights as a Data Subject
If you are located in the EEA, UK, or another jurisdiction with equivalent protections, you have the right to:
Access — request a copy of the personal data we hold about you
Rectification — request correction of inaccurate or incomplete data
Erasure ("right to be forgotten") — request deletion of your data, subject to legal exceptions
Restriction — request that we limit how we use your data
Portability — receive your data in a structured, machine-readable format
Object — object to processing based on legitimate interest, including direct marketing, at any time
Withdraw consent — where processing is based on consent, withdraw it at any time without affecting prior lawful processing
Lodge a complaint with your local data protection authority — in Spain, the Agencia Española de Protección de Datos (AEPD), or your own country's equivalent regulator
To exercise any of these rights, contact info@siaangelhub.com. We will respond within one month, as required by GDPR.
Data Protection Officer / EU Representative
We have not appointed a Data Protection Officer, as our processing activities do not meet the GDPR's criteria requiring one. For any data protection question or request, use the contact details above.
International Transfers
As noted in the Privacy Policy, data processed by Google (Analytics, reCAPTCHA, and Google Sheets, where application data is stored) and Microsoft (Clarity) may leave the EEA. Both companies self-certify under the EU-U.S. Data Privacy Framework and/or rely on Standard Contractual Clauses to ensure your data remains protected to EU standards.
Use of AI
We do not currently use AI tools to process personal data — applications and enquiries are reviewed and stored manually (for example, in internal spreadsheets). If this changes, we will update this Policy to describe the new processing and its legal basis, including appropriate safeguards against solely automated decision-making under Article 22, before it begins.
Data Protection Impact Assessment (DPIA)
Our current processing activities are not likely to result in a high risk to individuals, so a formal Data Protection Impact Assessment (DPIA) is not required. If we introduce processing that may result in a high risk (for example, collecting special-category data or identity documents), we will carry out a DPIA before it begins.