Privacy Policy

Privacy Policy: Hatch Blue

Last Updated: 11 February 2026

1. Introduction Hatch Blue Holding Ltd ("Hatch," "we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we look after your personal data when you visit our website, apply for our programs, or engage with our investment teams, and tells you about your privacy rights and how the law protects you.

2. Who We Are (Data Controller) For the purposes of the General Data Protection Regulation (GDPR), the primary Data Controller responsible for your personal data is:

Hatch Blue Holding Ltd 7/8 Liberty St, Cork, T12 T85H, Ireland.

We have related entities and subsidiaries; however, Hatch Blue Holding Ltd acts as the primary controller for data collected through our website and global programs.

3. The Data We Collect and How We Collect It We collect data through four primary channels:

Program & Deal Flow Applicants (via Cognito Forms): When you apply for our accelerators, investment programs, or submit a pitch, we collect Identity Data (names), Contact Data (email, phone), and Professional Data (pitch decks, business details).

Newsletter Subscribers (via Mailchimp forms): When you sign up for company updates and aquaculture news, we collect your Identity Data (name) and Contact Data (email address).

General Enquiries (via Typeform): When you contact us with general queries, we collect your Identity Data, Contact Data, and the content of your message.

Technical Data (via Cookies): We collect internet protocol (IP) addresses, browser type, and usage data through cookies on our website.

4. How We Use Your Data and Our Legal Basis Under the GDPR, we can only use your data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

Purpose/Activity

Type of Data

Legal Basis for Processing

To assess applications for programs & investment: Reviewing your suitability for our accelerators and conducting due diligence for potential investment ("deal flow").

Identity, Contact, Professional, Financial

Contractual Necessity: To take steps at your request prior to entering into a potential contract/agreement.

Legitimate Interests: To identify viable investment opportunities and build our portfolio.

To monitor company development (Deal Flow): Tracking the progress of companies (including rejected applicants) for potential future investment as they grow.

Identity, Contact, Professional

Legitimate Interests: It is in our legitimate business interest to monitor the aquaculture market and track the growth of startups for future opportunities.

To send Newsletters: Providing updates on Hatch Blue news, aquaculture insights, and blue economy investments.

Identity, Contact

Consent: We only send this if you have actively opted-in (e.g., via the newsletter form or ticking a "subscribe" box on an application).

To respond to General Enquiries: Answering questions regarding services, investment, and programs.

Identity, Contact

Legitimate Interests: It is necessary for our business to respond to enquiries you initiate to build our professional network.

To maintain Website Functionality & Analytics: Ensuring our forms work and understanding visitor behavior.

Technical, Usage

Legitimate Interests: For strictly necessary cookies (security, load balancing).

Consent: For targeting/marketing cookies.

5. Cookies and Tracking Technologies Our website uses cookies to distinguish you from other users. This helps us to provide you with a good experience and allows us to improve our site. Based on our latest scan, we use the following specific cookies:

Strictly Necessary Cookies: These are required for the operation of our website and forms. We use:

   ◦ AWSALBTGCORS (Typeform): Supports load balancing to ensure visitor pages route to the same server. Expires: 1 week.

   ◦ tf_respondent_cc (Typeform): Tracks users' consent preferences for data protection. Expires: 6 months.

   ◦ _cfuid (Hatch Blue): Used for session consistency and user experience optimization. Expires: Session.

Targeting Cookies: These record your visit to our website, the pages you have visited, and the links you have followed.

   ◦ attribution_user_id (Typeform): Tracks the ID of the user for attribution purposes to measure the effectiveness of advertising campaigns.

6. Data Sharing and Third Parties We do not sell your personal data. We share your personal data with the following parties for the purposes set out above:

Service Providers (Processors): We use trusted third-party processors to handle data on our behalf, specifically:

   ◦ Affinity CRM: We use Affinity (affinity.co) to securely store and manage our contact network and deal flow data.

   ◦ Cognito Forms: For processing program applications.

   ◦ Mailchimp: For managing newsletter subscriptions and distribution.

   ◦ Typeform: For collecting general enquiries and setting the cookies listed above.

External Partners: If you apply for a specific program, we may share your application data with our corporate or industry partners relevant to that specific program, as outlined on the application form.

Hatch Group Entities: We may share data within the Hatch Blue group of companies for internal administration and reporting.

7. International Data Transfers Many of our external third parties are based outside the European Economic Area (EEA), specifically in the United States. Whenever we transfer your personal data out of the EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

EU-U.S. Data Privacy Framework (DPF): Our primary processors, including Affinity CRM, Mailchimp, and Google, are certified under the DPF. This certification is recognized by the European Commission as providing adequate protection for personal data transferred from the EU to the US.

Standard Contractual Clauses (SCCs): Where a provider is not certified under the DPF, we use specific contracts approved by the European Commission which give personal data the same protection it has in Europe.

8. Data Retention We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for.

Deal Flow & Application Data: We retain details of applicants (including rejected applications) to monitor how your company develops over time. We hold this data because a company not ready for investment today may grow to a stage where it fits our investment thesis in the future. We retain this data until you request we remove it.

Marketing/Newsletter Data: Kept until you click "unsubscribe" or request removal.

Enquiry Data: Kept for the duration required to resolve your query and maintain a record of our business relationship.

9. Your Legal Rights You have rights under data protection laws in relation to your personal data, including the right to:

Request access to your personal data.

Request correction of your personal data.

Request erasure of your personal data.

Object to processing of your personal data (e.g., requesting we stop tracking your company's development).

Withdraw consent at any time (where we are relying on consent, such as for the Targeting Cookie).

To exercise any of these rights, or to be removed from our records, please contact us via our General Contact Form at https://www.hatch.blue/contact-us or click the "unsubscribe" link in any newsletter.

10. Contact Us If you have any questions about this privacy policy or our privacy practices, please contact us via our website contact form: https://www.hatch.blue/contact-us