GLA Grants Services privacy policy

We require basic information to enable your use of our services. This includes your first name, last name and work email address, which are required to set up an account. We use these to: 

• send you emails relating to the administration of your account. For example, that your account has been approved or that you need to reset your password

• notify you of updates relating to your applications. For example information about claims or project updates and submission requests

• send you communications about related grants which may be of interest

• ask you to complete customer satisfaction surveys.

Unless the reason for communication is required, we will offer you the option to opt in and out.

Grant applications

When you apply for a grant, we will require further information about you and your organisation which may include financial or personal information. 

This is required as part of the grant application process and to protect the GLA from fraudulent applications.

Other information

We also record information about how you connect to our services, such as your IP address, the time you use our service and details of which version of web browser you used. 

This is necessary for security purposes, so that we can monitor and audit use of our services and ensure they are being used legitimately. 

We may, with your consent, collect additional information for analytical purposes, so we can understand how users engage with our services and find ways to improve them. Where these are used, you will have the option to enable and disable them at any time via your browser.

To carry out our necessary activities, we will need to share your information with a small number of trusted partners. 

Deloitte UK is contracted to provide technical and development support for GLA OPS and Skills Gateway. To fulfil this activity, our supplier has limited privileged information to user data. Such access is logged and governed by a data sharing agreement. 

Our Grants for London platform is hosted by Salesforce. Hyphen8 is contracted to provide development and critical support for grants programmes on this platform. To fulfil this activity, our suppliers have limited privileged information to user data, which is governed by data sharing agreements. 

We make use of Spotlight, a fraud prevention service provided by the UK Government Cabinet Office. This compares the data you provide with various databases, such as Companies House, to ensure the validity of applications. Spotlight does not perform any automated decision-making. 

As part of its fraud checking and prevention capabilities, Spotlight may also share data with government bodies, including government departments, arm’s length bodies and local authorities. The authorisation for processing this data is outlined in the Cabinet Office's privacy notice for Spotlight. 

We will not sell or rent your data to third parties 

The GLA may be required to share your personal information with the police and other law enforcement agencies for the purposes of crime prevention or detection. If we are asked to disclose your information, we ask the requesting organisation to demonstrate that the data will assist in the prevention or detection of crime, or that the GLA is legally obliged to disclose it.