Last updated: May 2026

Project Finance Exchange ("PFX", "we", "us"), accessible from https://pfx.exchange, takes the privacy of our visitors and registered users ("you", "your") very seriously. This Privacy Policy describes what personal information we collect, how we use it, and your rights in relation to it.

If you have questions about this policy, do not hesitate to contact us at [email protected].

Log Files
PFX follows standard industry practice in using server log files. These automatically record information including IP addresses, browser type, Internet Service Provider (ISP), date and time of visits, referring and exit pages, and click activity. This data is not linked to any personally identifiable information and is used solely for analysing trends, administering the site, and gathering aggregate demographic information.

How We Use Your Data
PFX collects personal data that you voluntarily submit through registration forms, enquiry forms, or other interactions with the Site. This data is used to provide and administer PFX services, communicate with you regarding those services, and — where you have consented — send marketing communications about PFX developments and the wider project finance market.

PFX may reference registered user company names, redacted project information, and anonymised project data in our public and internal marketing communications, where doing so benefits the services and our user community.

All personal data is stored on secured cloud servers located within the United Kingdom or European Economic Area.

Lawful Basis for Processing
PFX processes personal data on the following lawful bases under UK GDPR:

Contractual necessity — processing required to create and administer your registered account and deliver PFX services to you
Legitimate interests — server logging, error monitoring, security, fraud prevention, and the use of anonymised data in marketing communications
Consent — marketing email communications, which you may withdraw at any time by unsubscribing or contacting [email protected]
Legal obligation / legal claims — retention of data where required by law or where necessary to establish, exercise, or defend legal proceedings

Data Retention
Personal data is retained for five years following your last activity on the platform and is reviewed annually for removal. Where PFX has reasonable grounds to suspect fraudulent activity, misrepresentation, or other conduct that may give rise to legal proceedings, relevant personal data will be retained indefinitely, or for as long as necessary to investigate, comply with legal obligations, or establish, exercise, or defend legal claims — regardless of any request for erasure.

Data relating to projects listed on the platform is held indefinitely where the project remains active or published. Where a project is unpublished or inactive, project data is retained for up to five years and reviewed annually for removal.

Cookies
PFX uses cookies to store information such as your preferences and the pages you visit. This helps us personalise your experience based on your browser type and prior activity. You can disable cookies through your browser settings, though doing so may limit your access to certain features of the Site.

Third-Party Service Providers
PFX works with a small number of trusted third-party providers to operate the Site and deliver our services. These providers process personal data only on our instruction and in accordance with applicable data protection law:

DigitalOcean — infrastructure and hosting
20i — transactional email delivery
Mailjet — marketing email communications and some transactional notifications
Sentry — application error monitoring.

These providers have their own privacy policies governing their handling of data. PFX's Privacy Policy does not extend to third-party websites or services linked from the Site.

Your Rights
Under UK GDPR, you have the following rights in relation to your personal data:

Access — you may request a copy of the personal data we hold about you
Rectification — you may ask us to correct inaccurate or incomplete data
Erasure — you may request deletion of your personal data, subject to the exceptions described in the Data Retention section above
Restriction — you may ask us to restrict processing of your data in certain circumstances
Portability — you may request your data in a structured, commonly used, machine-readable format
Objection — you may object to processing carried out on the basis of legitimate interests
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. Note that the right to erasure does not apply where PFX has grounds to retain data under the fraud and legal claims exception described above.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your personal data has been handled unlawfully.

Automated Decision-Making
PFX does not use automated decision-making or profiling in relation to your personal data. All significant decisions affecting you as a user involve human review.

Online Activities Only
This Privacy Policy applies solely to information collected through pfx.exchange. Where you have entered into a separate agreement with PFX — such as a Regional Manager Agreement, Investor Agreement, or NCNDA — the data handling provisions of that agreement also apply to information processed in that context.

Consent
By using the Site, you accept this Privacy Policy and our Terms of Use.