← BackOuterBlue

Legal & Privacy

Effective date: 24 July 2026Last updated: 24 July 2026
PART A: OVERVIEW

1. About this page

This Legal & Privacy page applies to:

  • the website at outer.blue and any related pages operated by OuterBlue Ltd
  • any account, portal or investor data room made available through that website
  • investment, commercial, scientific and corporate materials made available through the website or data room; and
  • personal information collected through the website, data room or related communications

This page contains:

  • the terms governing use of our public website
  • additional terms governing access to our investor data room
  • important information concerning investment materials
  • our privacy notice; and
  • information about cookies and similar technologies

Please read this page carefully before using the website or accessing the investor data room. The privacy provisions explain how we use personal information. They do not form a request for consent except where we expressly ask for consent. The website and data-room terms are contractual terms. By accessing or using the investor data room after accepting those terms, you agree to be bound by them.

2. About OuterBlue

The website and investor data room are operated by OuterBlue Ltd, referred to in this page as “OuterBlue”, “we”, “us” or “our”. OuterBlue Ltd is a private limited company registered in England and Wales under company number 17327773.

Registered office: 71–75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ

Contact email: charles@outer.blue References to “you” or “your” mean the person accessing or using the website or data room and, where that person is acting for an organisation, that organisation. References to the “Website” include outer.blue and its public pages.

References to the “Data Room” include any restricted-access area, investor portal or document repository made available by or on behalf of OuterBlue. References to “Investment Materials” include any pitch deck, financial information, forecasts, business plans, technical material, market analysis, legal information, corporate records, due-diligence documents and other information made available in connection with a possible investment in OuterBlue.

PART B: WEBSITE TERMS

3. Acceptance of these terms

By accessing or using the Website, you confirm that you accept these Website Terms and will comply with them. If you do not agree to these Website Terms, you must not use the Website. If you access the Website for an organisation, you confirm that you are authorised to do so on its behalf.

Additional terms apply if you access the Data Room. If there is any conflict between these Website Terms and the Investor Data Room Terms in Part C, the Investor Data Room Terms will take priority in relation to the Data Room and Investment Materials.

4. Information provided through the Website

The public Website provides general information about OuterBlue and its activities.

Unless expressly stated otherwise, information on the public Website:

  • is provided for general information only
  • is not intended to amount to advice
  • is not an offer, invitation or recommendation to acquire any investment
  • must not be treated as a substitute for professional advice; and
  • may be incomplete, summarised or subject to change

You should obtain appropriate professional advice before taking or refraining from any action based on information provided through the Website.

5. Availability and changes

We may change, suspend, restrict or withdraw any part of the Website without notice.

We do not guarantee that:

  • the Website will always be available
  • access will be uninterrupted
  • the Website will be free from errors, vulnerabilities or harmful code; or
  • any content will remain available or unchanged

We may update the Website and its content from time to time. Information may become out of date and we are not obliged to update it unless required by law. You are responsible for ensuring that anyone who accesses the Website through your internet connection is aware of these terms and complies with them.

6. Permitted use

You may use the public Website for lawful informational and business purposes.

You must not:

  • use the Website unlawfully, fraudulently or maliciously
  • attempt to gain unauthorised access to the Website, Data Room, servers, databases or connected systems
  • interfere with the operation, integrity or security of the Website
  • introduce viruses, malware, malicious code or harmful material
  • carry out automated scraping, crawling, extraction or harvesting without our written permission
  • use bots or automated systems to access restricted content
  • impersonate another person or misrepresent your identity or authority
  • remove or alter any copyright, confidentiality, attribution or proprietary notice
  • use Website content in a misleading or defamatory context
  • reproduce or commercially exploit Website content except as expressly permitted; or
  • assist another person to do any of the above

We may report suspected unlawful activity to the relevant authorities and cooperate with lawful investigations.

7. Intellectual property

OuterBlue and its licensors own or control all intellectual-property rights in the Website and its content, including:

  • text
  • graphics
  • photographs
  • illustrations
  • diagrams
  • models
  • software
  • databases
  • branding
  • trademarks
  • designs; and
  • the selection and arrangement of material

Those rights are protected by copyright, trademark, database-right and other intellectual-property laws. You may view the public Website and make a reasonable number of copies for your own internal, non-commercial evaluation of OuterBlue. You must not reproduce, modify, publish, distribute, sell, license, create derivative works from or commercially exploit Website content without our prior written permission.

No right, title or interest in OuterBlue’s intellectual property is transferred to you. “OuterBlue”, the OuterBlue name, its logos and associated branding must not be used without our prior written permission.

8. Linking to the Website

You may link to the public home page of the Website in a lawful and fair manner that does not damage or take advantage of our reputation.

You must not:

  • suggest an association, approval or endorsement that does not exist
  • frame the Website within another website
  • link directly to restricted or confidential content
  • circumvent any login or access control; or
  • link from a website containing unlawful, misleading or materially harmful content

We may withdraw linking permission at any time.

9. Third-party websites and material

The Website may contain links to third-party websites or refer to third-party information. Those links and references are provided for convenience only. We do not control third-party websites and do not endorse or accept responsibility for their content, security, availability, privacy practices or services. Your use of a third-party service may be subject to separate terms and privacy policies.

PART C: INVESTOR DATA ROOM TERMS

10. Application of the Data Room Terms

These Investor Data Room Terms apply whenever you:

  • receive an invitation to the Data Room
  • create or use a Data Room account
  • follow a Data Room access link
  • view, receive or download Investment Materials; or
  • otherwise access confidential information through the Data Room

Access is offered on the condition that you accept these terms. By accessing the Data Room or continuing to use it after being notified of an updated version, you enter into a legally binding agreement with OuterBlue.

If you are acting for a fund, company, partnership, family office or other organisation, you confirm that:

  • you are authorised to accept these terms for that organisation
  • the organisation will comply with these terms; and
  • you remain personally responsible for complying with obligations applying to individual users, including account-security and confidentiality obligations

11. Purpose and permitted use

The Data Room and Investment Materials are made available solely to allow an authorised recipient to evaluate a possible investment in, financing of or other transaction involving OuterBlue. You may use the Data Room and Investment Materials only for that purpose.

Access does not:

  • give you any right to invest
  • reserve any allocation
  • oblige OuterBlue to continue discussions
  • oblige OuterBlue to provide further information
  • create an advisory, fiduciary, agency or partnership relationship
  • constitute an offer capable of acceptance; or
  • oblige OuterBlue to enter into any transaction

OuterBlue may decline, suspend or terminate access or discussions at any time and is not required to give a reason.

12. Personal and restricted access

Data Room access is personal to the individual to whom it is granted.

You must not:

  • share your password, magic link, authentication code or other access credential
  • allow another person to use your account
  • forward an access invitation
  • create an account using another person’s identity
  • access the Data Room through a shared or generic account unless we have expressly permitted it
  • bypass access controls, download controls or security restrictions; or
  • attempt to identify or access documents not made available to you

If colleagues or advisers require access, you must ask us to provide separate access or obtain our prior written permission.

You must promptly notify us if:

  • you believe an access credential has been lost, disclosed or compromised
  • you become aware of unauthorised access
  • your email address or organisation changes
  • you no longer require access; or
  • you cease to be authorised to act for the organisation you represented when access was granted

We may require identity, organisation or investor-status information before granting or continuing access.

13. Minimal access and activity records

We may record and review limited activity associated with the Data Room, including:

  • the email address associated with an account
  • the date and time access is requested
  • account access status
  • login dates and times
  • documents opened
  • documents downloaded, where downloading is enabled; and
  • authentication or security events necessary to operate and protect the service

We use this information to:

  • administer access
  • protect confidential information
  • detect and investigate misuse
  • maintain security
  • demonstrate access to these terms
  • manage investment discussions; and
  • confirm whether requested materials have been accessed

The OuterBlue application does not intentionally retain persistent IP addresses, device fingerprints, geolocation, session-replay data, dwell time, click paths or investor engagement scores. Further information about this processing appears in the Privacy Notice in Part E.

14. Confidentiality

The Data Room and Investment Materials are confidential unless we expressly identify particular information as public.

You must:

  • keep the Investment Materials strictly confidential
  • protect them using at least the same degree of care you use for your own confidential information of similar importance and in any event reasonable care
  • use them solely to evaluate a possible transaction involving OuterBlue
  • disclose them only to your directors, partners, employees and professional advisers who genuinely need the information for that purpose
  • ensure that every permitted recipient is informed of its confidential nature and is bound by confidentiality obligations no less protective than these terms
  • remain responsible for any breach by a person to whom you disclose the information
  • prevent unauthorised copying, access, disclosure or use; and
  • notify us promptly of any actual or suspected unauthorised disclosure

You must not disclose Investment Materials to:

  • another potential investor
  • a portfolio company
  • a competitor of OuterBlue
  • the media
  • a public forum
  • a social-media platform
  • a data broker
  • an artificial-intelligence model or service that may retain or train on submitted material; or
  • any other person without our prior written permission

You must not use Investment Materials to compete with OuterBlue, circumvent OuterBlue, solicit its personnel or counterparties using confidential information or obtain an unfair commercial or technical advantage.

14.1 Confidentiality exclusions

The confidentiality obligations do not apply to information that you can demonstrate:

  • was lawfully known to you without restriction before disclosure by OuterBlue
  • becomes publicly available other than through a breach of these terms
  • is received lawfully from a third party that is not under a confidentiality obligation
  • is developed independently without use of the Investment Materials; or
  • must be disclosed under applicable law, regulation or a binding order

Where disclosure is legally required, you must, to the extent permitted by law:

  • notify us promptly before disclosure
  • disclose only the minimum information legally required; and
  • reasonably assist us in seeking protective treatment

14.2 Duration

Your confidentiality obligations continue:

  • for five years after your Data Room access ends in relation to confidential information generally; and
  • for as long as the information remains a trade secret in relation to trade secrets, proprietary scientific methods, source code, unpublished technical information and other information protected as a trade secret by law

A separate written confidentiality or non-disclosure agreement may apply. Where a signed agreement imposes stricter confidentiality obligations, the stricter obligations will prevail.

15. Copying and downloading

You may make only those copies reasonably necessary for your internal evaluation of the potential transaction.

You must not:

  • distribute Investment Materials outside the permitted recipient group
  • publish or quote them publicly
  • upload them to an unrestricted shared drive
  • place them in an externally accessible database
  • conduct text or data mining
  • use them to train or improve an artificial-intelligence system
  • reverse engineer any model, software, methodology or technical system
  • remove confidentiality markings; or
  • reproduce them in another fundraising, commercial or technical document

Downloading may be restricted or disabled at our discretion. Permission to download a document does not make it public or remove its confidential status.

16. Return, deletion and continued protection

At our request or when your access ends, you must:

  • stop using the Investment Materials
  • permanently delete or securely destroy copies in your possession or control; and
  • if requested, confirm completion in writing

You may retain:

  • one archival copy where required by law or binding professional rules; and
  • copies held automatically in secure backup systems that cannot reasonably be isolated for deletion

Any retained copy remains confidential and must not be used for any other purpose.

17. Accuracy and completeness of Investment Materials

The Investment Materials are provided to assist preliminary evaluation.

They may:

  • contain estimates, assumptions and preliminary information
  • be incomplete
  • omit information that you may consider material
  • be based on information from third parties
  • change without notice
  • contain errors
  • be superseded; or
  • reflect circumstances only as at a particular date

Except where expressly agreed in a definitive written transaction document, neither OuterBlue nor its founders, directors, employees, shareholders, advisers or representatives gives any representation or warranty, express or implied, concerning:

  • the accuracy, completeness or currency of the Investment Materials
  • the reasonableness or achievement of forecasts or assumptions
  • the commercial viability of any product, market or strategy
  • the ownership, validity or enforceability of intellectual property
  • the availability of tax relief
  • future financing
  • regulatory approvals
  • technical performance; or
  • the outcome of any proposed transaction

Nothing in these terms excludes liability for fraud or fraudulent misrepresentation.

You are responsible for:

  • conducting your own legal, financial, tax, technical, scientific, commercial and regulatory due diligence
  • assessing all risks
  • asking for any information you consider necessary
  • reaching your own independent conclusions; and
  • obtaining advice from suitably qualified professionals

18. Forward-looking statements

Investment Materials may contain forward-looking statements, forecasts, targets, projections, anticipated milestones and statements concerning future events.

These statements may relate to matters including:

  • scientific and technical development
  • model performance
  • product development
  • market size
  • commercial adoption
  • partnerships
  • customer demand
  • revenue
  • costs
  • hiring
  • financing
  • regulation; and
  • future company value

Forward-looking statements are based on assumptions, expectations and information available when they are prepared. Actual outcomes may differ materially due to known and unknown risks, including scientific uncertainty, development delays, model limitations, data availability, competition, market conditions, customer behaviour, regulation, financing availability and operational execution. No forward-looking statement is a promise, guarantee or representation that the relevant outcome will occur.

We are not obliged to update a forward-looking statement merely because circumstances or expectations change.

19. Third-party information

Investment Materials may include information sourced from customers, prospective customers, universities, researchers, advisers, public bodies, commercial databases and other third parties. Third-party information may be subject to separate rights, limitations and disclaimers.

Its inclusion does not mean that:

  • the third party has verified all Investment Materials
  • the third party endorses OuterBlue
  • the third party has committed to a commercial relationship
  • any expression of interest will result in a contract; or
  • OuterBlue independently verified every item of third-party information

You must not contact a customer, prospective customer, research collaborator, employee, adviser, supplier or other person identified in the Data Room concerning OuterBlue without our prior written permission.

20. Intellectual property in the Data Room

All rights in the Data Room and Investment Materials remain with OuterBlue or the relevant rights holder. Access grants you a limited, revocable, non-exclusive, non-transferable licence to view and, where enabled, download the Investment Materials solely for the permitted evaluation purpose.

You do not acquire:

  • ownership of any intellectual property
  • a licence to commercialise any technology
  • a right to use OuterBlue’s methods, data, models, software, branding or confidential information
  • a right to file or support any intellectual-property application based on the Investment Materials; or
  • any implied licence

You must not apply to register or challenge any intellectual-property right based on information obtained through the Data Room.

21. Security and availability

We take reasonable measures intended to protect the Data Room, but no internet service or electronic storage system can be guaranteed completely secure.

You are responsible for:

  • using secure devices and networks
  • keeping software and browsers reasonably updated
  • preventing unauthorised access to your device
  • signing out when using a shared device; and
  • maintaining appropriate security for downloaded materials

We may suspend access to protect security, investigate an incident, perform maintenance or comply with law. We are not responsible for loss arising from your failure to protect your account, device or downloaded copies.

22. Suspension and termination

We may suspend, restrict or terminate access immediately if:

  • you breach or may have breached these terms
  • we suspect unauthorised use
  • your access is no longer required
  • we cannot verify your identity, authority or eligibility
  • continued access could create legal or regulatory risk
  • investment discussions end
  • we discontinue the Data Room; or
  • we otherwise consider suspension reasonably necessary to protect OuterBlue or another person

Termination does not affect provisions intended to continue, including confidentiality, intellectual property, liability, deletion and governing-law provisions.

23. Responsibility for breach

You are responsible for losses, liabilities, costs and expenses reasonably and directly incurred by OuterBlue as a result of:

  • your material breach of these terms
  • unauthorised disclosure caused by your failure to protect access credentials
  • misuse of the Investment Materials; or
  • breach by a person to whom you disclosed Investment Materials

This provision does not make you responsible for losses caused by OuterBlue’s own negligence, fraud or breach of law.

PART D: IMPORTANT INVESTMENT NOTICE

24. Restricted audience

The Investment Materials are not intended for the general public.

In the United Kingdom, they are directed only at persons to whom they may lawfully be communicated, including, where applicable:

  • investment professionals falling within Article 19 of the Financial Services and Markets Act 2000 (Financial Promotion) Order 2005
  • high-net-worth companies, unincorporated associations, trusts and other persons falling within Article 49 of that Order
  • certified high-net-worth individuals falling within Article 48 of that Order who have completed any statement required by law
  • certified sophisticated investors falling within Article 50 of that Order
  • self-certified sophisticated investors falling within Article 50A of that Order who have completed any statement required by law; and
  • any other person to whom the Investment Materials may lawfully be communicated

The precise exemption and conditions relied upon may differ between recipients. If you do not fall within a category to which the Investment Materials may lawfully be communicated, you must not access, view, distribute, act on or rely on them. OuterBlue may require you to complete a separate investor-status declaration. Acceptance of these terms does not replace any declaration required by law.

By accessing the Investment Materials, you represent that:

  • you are an intended recipient
  • the Investment Materials may lawfully be communicated to you
  • you have provided accurate investor-status information
  • you will notify us if your status changes; and
  • you will not distribute the Investment Materials to a person to whom they may not lawfully be communicated

A false declaration does not make an unlawful communication lawful and may result in immediate termination of access.

25. No public offer

Nothing on the Website or in the Data Room constitutes:

  • an offer to the public
  • a prospectus
  • an admission document
  • an offer capable of acceptance
  • investment advice
  • tax advice
  • legal advice
  • a personal recommendation; or
  • an invitation in any jurisdiction where making such an invitation would be unlawful

Any investment may be made only under definitive legal documents agreed and signed by the relevant parties. If there is any inconsistency between the Investment Materials and signed definitive investment documents, the definitive documents will prevail.

26. Regulatory status

OuterBlue is not authorised or regulated by the Financial Conduct Authority. Unless expressly stated otherwise, the Investment Materials have not been approved by a person authorised under the Financial Services and Markets Act 2000. The protections that may apply to investments arranged through an FCA-authorised firm may not apply.

No statement in these terms should be interpreted as confirming that a particular financial-promotion exemption applies to a particular recipient. That assessment depends on the recipient, the communication and the surrounding circumstances.

27. Investment risk

An investment in an early-stage private company involves significant risk.

In particular:

  • you may lose all of the money invested
  • the shares may be illiquid and difficult or impossible to sell
  • there may be no market for the shares
  • the company may require further financing
  • future financing may dilute existing shareholders
  • valuations are uncertain
  • scientific and technical development may fail or be delayed
  • revenue and commercial adoption may not develop as expected
  • tax treatment may change; and
  • any tax relief may depend on the company’s continuing qualification and the investor’s individual circumstances

You should invest only if you understand and can bear the risk of losing the entire investment. You should take independent legal, financial and tax advice.

28. SEIS, EIS and tax statements

Any reference to the Seed Enterprise Investment Scheme, Enterprise Investment Scheme or another tax relief is provided for general information only.

No representation or warranty is given that:

  • OuterBlue currently qualifies or will continue to qualify
  • HM Revenue & Customs will grant or maintain any relevant status
  • advance assurance, if obtained, guarantees relief
  • shares issued to a particular investor will qualify; or
  • a particular investor will be eligible for or retain relief

Tax treatment depends on applicable law and individual circumstances and may change.

29. Overseas recipients

If you access the Data Room from outside the United Kingdom, you are responsible for ensuring that:

  • access is lawful in your jurisdiction
  • the Investment Materials may lawfully be communicated to you
  • you comply with local securities, financial-promotion and investment laws; and
  • you do not distribute the Investment Materials in a manner that breaches local law

The Investment Materials are not directed into any jurisdiction where their communication would be unlawful.

PART E: PRIVACY NOTICE

30. Who is responsible for your information?

OuterBlue Ltd is the controller of the personal information described in this Privacy Notice. This means that OuterBlue decides why and how that information is used.

Controller: OuterBlue Ltd

Company number: 17327773

Registered office: 71–75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ

Privacy contact: privacy@outer.blue

31. Scope of this Privacy Notice

This Privacy Notice applies to personal information relating to:

  • Website visitors
  • Data Room users
  • current and prospective investors
  • representatives of investment funds, family offices and other organisations
  • advisers and introducers
  • commercial and research contacts
  • people who communicate with OuterBlue; and
  • other people whose information is processed in connection with our Website, fundraising or corporate activities

It does not apply to personal information processed solely by another organisation acting as an independent controller.

32. Information we collect

32.1 Information you provide

We may collect:

  • your name
  • email address
  • telephone number
  • job title
  • employer or organisation
  • professional role
  • location or jurisdiction
  • investor type or classification
  • information included in an investor-status declaration
  • investment interests
  • communications and correspondence
  • meeting notes
  • questions, feedback and due-diligence requests
  • information provided in connection with a proposed investment
  • acceptance of legal terms; and
  • any other information you choose to provide

At present, a Data Room account may require only an email address. The other categories apply only where they are relevant and provided or generated during an investment or business relationship.

32.2 Information collected automatically

When you visit the Website or use the Data Room, the OuterBlue application may collect:

  • access dates and times
  • login history
  • authentication events
  • pages and documents opened
  • downloads, where enabled
  • error records
  • security events; and
  • the session identifier necessary to keep you signed in

The OuterBlue application does not intentionally retain persistent IP addresses, device fingerprints, precise or approximate geolocation, session-replay data, dwell time, click paths, advertising identifiers or cross-site tracking data. Our hosting, email and security providers may process limited technical information where necessary to deliver and secure their services, subject to their own legal obligations and contractual controls.

32.3 Information received from other sources

We may receive personal information from:

  • an investor, adviser or colleague who introduces you
  • your employer or organisation
  • professional advisers
  • service providers supporting the Data Room
  • event organisers
  • universities, research bodies and commercial partners
  • publicly available professional profiles
  • company websites
  • Companies House and other public registers; and
  • lawful commercial or professional databases

Where we receive information about you from another source, we will provide privacy information as required by law.

32.4 Information we do not seek

We do not ordinarily seek:

  • health information
  • biometric information
  • information about race, ethnicity, religion, political opinions, trade-union membership or sexual orientation
  • criminal-conviction information; or
  • other sensitive or special-category information

Please do not provide such information unless it is genuinely necessary and we have agreed in advance that it should be provided securely. The Website and Data Room are not intended for children and access is limited to people aged 18 or over.

33. How and why we use personal information

We use personal information only where we have a lawful basis.

33.1 Providing and administering Data Room access

We use account, identity, contact and authentication information to:

  • create and administer accounts
  • authenticate users
  • provide requested access
  • record acceptance of terms
  • respond to access requests
  • manage permissions; and
  • provide technical support

Lawful bases: performance of the Data Room agreement, taking steps at your request before entering into that agreement and our legitimate interests in administering a secure investor process.

33.2 Protecting confidential information and maintaining security

We use login records, document-access records and necessary authentication or security events to:

  • protect confidential information
  • prevent credential sharing
  • detect unauthorised access
  • investigate suspected misuse
  • protect our systems
  • enforce these terms; and
  • maintain evidence of activity where reasonably necessary

Lawful basis: our legitimate interests in protecting our business, intellectual property, confidential information, systems and users.

33.3 Managing investor relationships and fundraising

We use contact, professional, correspondence and Data Room activity information to:

  • understand investor interest
  • prioritise and manage follow-up
  • arrange meetings
  • respond to questions
  • manage due diligence
  • assess potential investment relationships
  • record discussions and decisions; and
  • prepare for and complete a possible investment

Lawful bases: our legitimate interests in raising finance and managing professional relationships, taking steps at your request in contemplation of a possible transaction, performance of any agreement and compliance with legal obligations.

33.4 Assessing access and regulatory eligibility

We may use identity, professional and investor-status information to:

  • determine whether Investment Materials may lawfully be communicated
  • obtain and retain investor declarations
  • apply access restrictions
  • comply with financial-promotion requirements
  • prevent unlawful distribution; and
  • establish or defend our legal position

Lawful bases: compliance with legal obligations and our legitimate interests in conducting fundraising lawfully and maintaining appropriate records.

33.5 Communicating with you

We use contact and correspondence information to:

  • respond to enquiries
  • send account and security notices
  • provide requested materials
  • update you about relevant Data Room changes
  • continue an existing professional conversation; and
  • send other business or fundraising communications where permitted by law

Lawful bases: performance of an agreement, our legitimate interests in communicating with professional contacts and consent where consent is required. You may object to direct marketing at any time by contacting us or using any unsubscribe mechanism provided. Account, security, legal and transaction-related messages are not marketing and may still be sent where necessary.

33.6 Operating and improving the Website

We may use technical and usage information to:

  • operate the Website
  • diagnose errors
  • understand aggregate usage
  • improve performance and usability; and
  • develop our systems

Lawful bases: our legitimate interests in operating and improving the Website and consent where required for non-essential cookies or tracking technologies.

33.7 Corporate administration and legal compliance

We may use personal information to:

  • maintain corporate and accounting records
  • obtain professional advice
  • conduct audits
  • respond to legal claims
  • comply with court orders
  • respond to regulators and public authorities
  • prevent or investigate fraud
  • support a financing, restructuring, acquisition or sale; and
  • comply with applicable law

Lawful bases: compliance with legal obligations and our legitimate interests in administering and protecting OuterBlue.

34. Our legitimate interests

Where we rely on legitimate interests, those interests may include:

  • operating a secure Website and Data Room
  • protecting confidential information and intellectual property
  • managing access
  • preventing misuse, fraud and cyber incidents
  • raising capital
  • managing current and prospective investor relationships
  • maintaining accurate records
  • improving our systems
  • protecting legal rights; and
  • operating and developing OuterBlue

We consider whether our use is necessary and balance our interests against the rights and interests of the affected person. You may object to processing based on legitimate interests. Further information appears in section 42.

35. Data Room activity information and automated decision-making

We may review limited account activity, including login, document-open and download records, to administer access, confirm that requested materials have been received and manage relevant follow-up. We do not create investor engagement scores, use dwell-time monitoring or infer investor interest from browsing duration. We do not use this information to make a decision based solely on automated processing that produces legal or similarly significant effects.

Material decisions about access or an investment relationship involve human judgement.

36. When information must be provided

You may choose whether to provide most personal information.

However, we may be unable to provide or continue Data Room access unless you provide:

  • a valid email address
  • information required to authenticate access
  • acceptance of the Data Room Terms
  • information reasonably required to confirm your authority; and
  • any investor-status information required for lawful access

If you do not provide information necessary to authenticate and secure access, we may be unable to continue providing the Data Room.

37. Sharing personal information

We may share personal information with the following categories of recipient where reasonably necessary.

37.1 Technology providers

These may include providers of:

  • website hosting
  • cloud infrastructure
  • databases
  • authentication
  • email
  • security
  • file storage
  • Data Room software
  • technical support; and
  • analytics used in accordance with applicable law

Such providers generally act as processors and may use information only under our instructions, subject to their own legal obligations.

37.2 Professional advisers

We may share information with:

  • solicitors
  • accountants
  • tax advisers
  • corporate-finance advisers
  • insurance advisers
  • consultants; and
  • other professional advisers

An adviser may act as our processor or as an independent controller depending on the circumstances.

37.3 Investors and transaction participants

Where reasonably necessary in connection with a proposed transaction, we may share information with:

  • existing or prospective lead investors
  • co-investors
  • investment committees
  • nominee providers
  • due-diligence providers
  • banks
  • payment providers; and
  • other transaction participants

We will not ordinarily disclose one prospective investor’s detailed activity to another prospective investor without a legitimate reason.

37.4 Authorities and legal recipients

We may share information with:

  • courts
  • regulators
  • law-enforcement bodies
  • tax authorities
  • government departments; and
  • another person where disclosure is required or permitted by law

37.5 Corporate transactions

Information may be disclosed to potential buyers, investors, lenders, professional advisers and counterparties in connection with:

  • an investment
  • merger
  • acquisition
  • reorganisation
  • financing
  • sale of assets
  • insolvency process; or
  • other corporate transaction

Recipients will be expected to protect confidential information appropriately. We do not sell personal information to data brokers or advertisers.

38. International transfers

Some service providers or recipients may be located outside the United Kingdom or may make personal information accessible from another country.

Where UK data-protection law restricts an international transfer, we will use an appropriate transfer mechanism. This may include:

  • transfer to a country covered by UK adequacy regulations
  • the UK International Data Transfer Agreement
  • the UK Addendum to approved standard contractual clauses
  • another approved safeguard; or
  • a permitted legal exception

Where required, we will take additional steps to assess and protect the information. You may contact us for further information about the safeguards relevant to your personal information.

39. Security

We use reasonable organisational and technical measures designed to protect personal information against:

  • unauthorised access
  • accidental loss
  • unlawful disclosure
  • alteration
  • destruction; and
  • misuse

Measures may include:

  • access controls
  • authentication
  • encrypted transmission
  • restricted administrative access
  • logging
  • backups
  • supplier controls; and
  • incident-response procedures

No system is completely secure. You should notify us promptly if you suspect that your account or personal information has been compromised.

40. Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this notice, including legal, regulatory, security and record-keeping purposes.

Our normal retention approach is:

40.1 Account and Data Room information

Email addresses, account details and ordinary Data Room activity records are generally retained while the relevant fundraising process remains active and are normally deleted or anonymised within six months after that fundraising process closes. Information may be retained longer where there is an ongoing investment or business relationship, a security incident, suspected misuse, a legal dispute, a legal obligation or another clearly justified need.

40.2 Security records

The OuterBlue application does not intentionally retain persistent IP addresses, device fingerprints or geolocation records.

Limited authentication and security-event records are generally retained on the same basis as ordinary Data Room activity. Relevant records may be retained longer where they relate to:

  • a security incident
  • suspected misuse
  • a legal dispute
  • enforcement of confidentiality obligations; or
  • another continuing risk

40.3 Terms, declarations and transaction records

Records showing:

  • acceptance of legal terms
  • confidentiality obligations
  • investor-status declarations
  • material due-diligence communications; and
  • transaction decisions
  • may generally be retained for up to six years after the relevant relationship, communication or transaction ends

Information may be retained longer where reasonably necessary to comply with law, respond to a continuing claim or preserve evidence.

40.4 Investor and business contacts

Information about an inactive prospective investor or other business contact will generally be deleted or anonymised within six months after the relevant fundraising process closes, unless:

  • there is an ongoing relationship
  • the person has asked to receive future communications
  • retention remains reasonably relevant to a future financing
  • a legal obligation applies; or
  • a longer period is otherwise justified

40.5 Marketing objections

Where you object to direct marketing, we may retain a minimal suppression record for as long as reasonably necessary to ensure that your preference is respected.

40.6 Anonymised information

We may retain genuinely anonymised or aggregated information indefinitely where it can no longer identify an individual. Retention periods may be adjusted where technical, legal or operational circumstances reasonably require.

41. Your data-protection rights

Depending on the circumstances, you may have the right to:

  • be informed about how your personal information is used
  • request access to your personal information
  • request correction of inaccurate or incomplete information
  • request deletion of your information
  • request restriction of processing
  • object to processing based on legitimate interests
  • object to direct marketing at any time
  • receive certain information in a portable format
  • withdraw consent where processing is based on consent; and
  • complain to a data-protection authority

These rights are not absolute. An exemption or competing legal obligation may apply.

For example, we may retain information where it is necessary to:

  • comply with law
  • establish, exercise or defend legal claims
  • maintain a marketing-suppression record
  • protect confidential information
  • investigate misuse; or
  • preserve necessary transaction records

Withdrawing consent does not affect processing carried out lawfully before withdrawal.

42. Exercising your rights

To exercise a data-protection right, contact:

  • Email: privacy@outer.blue
  • Please describe:
  • the right you wish to exercise
  • the information concerned; and
  • any information that may help us identify the relevant records

We may ask for reasonable proof of identity where necessary to protect personal information. We will respond within the period required by applicable law. You are not ordinarily required to pay a fee. A fee may be permitted or a request may be refused where a request is manifestly unfounded or excessive, subject to applicable law.

43. Complaints

Please contact us first if you have concerns about how we use personal information. You also have the right to complain to the Information Commissioner’s Office, the United Kingdom’s data-protection regulator. If you live or work outside the United Kingdom, you may also have the right to contact a local data-protection authority.

44. Changes to this Privacy Notice

We may update this Privacy Notice to reflect changes to:

  • our processing
  • the Website or Data Room
  • service providers
  • legal requirements; or
  • our business

The current version will be published on the Website with its effective date. We will take reasonable steps to notify affected users of a material change. We may require renewed acknowledgement or acceptance where appropriate.

PART F: COOKIES AND SIMILAR TECHNOLOGIES

45. What are cookies?

Cookies are small files stored on a device when a website is used.

We may also use related technologies such as:

  • local storage
  • session storage
  • authentication tokens
  • pixels
  • software development kits; and
  • server-side logs

Some of these technologies are necessary for the Website or Data Room to operate securely.

46. Strictly necessary technologies

We may use strictly necessary cookies or similar technologies to:

  • authenticate users
  • maintain a secure session
  • remember access status
  • prevent cross-site request forgery
  • distribute network traffic
  • detect abuse
  • maintain security; and
  • remember privacy or cookie choices

These technologies are necessary to provide the service or maintain its security. Where consent is not legally required for a strictly necessary technology, we rely on the applicable legal exception rather than consent. Blocking strictly necessary technologies may prevent the Website or Data Room from working correctly.

47. Non-essential technologies

We do not currently use optional analytics, advertising, behavioural profiling, heatmaps, session replay or cross-site tracking. If a non-essential cookie or similar technology is introduced, we will update this notice and provide an appropriate choice before activating it where consent is required by law.

48. Data Room activity records

Records of logins, document views and downloads may be generated through server-side systems rather than cookies. These records are described in the Privacy Notice even where no information is stored on your device.

49. Current cookie schedule

The production Data Room currently uses the following technology:

  • Cookie or technology Provider Purpose Category Duration
  • outerblue_session OuterBlue Ltd Authenticates the user and maintains secure Data Room access Strictly necessary 7 days
  • The session cookie is secure, HTTP-only and limited to maintaining authenticated access. It is not used for advertising, analytics or cross-site tracking

Our infrastructure providers may also use essential security or load-balancing technologies where necessary to deliver and protect the service.

50. Browser controls

Most browsers allow users to delete or block cookies. Browser settings may not control every similar technology and blocking strictly necessary technologies may prevent login or other functions from working.

PART G: LIABILITY AND GENERAL TERMS

51. Liability

Nothing in these terms excludes or limits liability for:

  • death or personal injury caused by negligence
  • fraud or fraudulent misrepresentation
  • breach of obligations that cannot lawfully be excluded; or
  • any other liability that applicable law does not permit us to exclude

Subject to the above, OuterBlue will not be liable for:

  • indirect or consequential loss
  • loss of profit
  • loss of revenue
  • loss of business
  • loss of opportunity
  • loss of anticipated savings
  • loss of goodwill
  • loss caused by reliance on preliminary Investment Materials
  • loss resulting from a decision not to proceed with a transaction
  • loss caused by third-party content or systems
  • loss caused by unauthorised account use arising from your failure to protect credentials; or
  • loss caused by events outside our reasonable control

To the fullest extent permitted by law, our aggregate liability arising out of or in connection with the Website, Data Room, Investment Materials or these terms will not exceed the greater of:

  • £100; and
  • the amount, if any, paid by you directly to OuterBlue for Data Room access during the 12 months before the event giving rise to liability

The Website and Data Room are intended for business and investment-evaluation purposes. If mandatory consumer rights apply to you, nothing in these terms affects those rights. Nothing in this section limits rights or remedies available under applicable data-protection law where they cannot lawfully be limited.

52. Other agreements

A separate written agreement may apply between you and OuterBlue, including:

  • a non-disclosure agreement
  • term sheet
  • subscription agreement
  • shareholders’ agreement
  • advisory agreement; or
  • other transaction document

Where there is a conflict:

  • a signed definitive transaction document takes priority for the transaction it governs
  • a signed confidentiality agreement takes priority where it imposes stricter confidentiality protection; and
  • these terms otherwise continue to apply

53. Changes to the terms

We may update these terms where reasonably necessary to reflect legal, security, technical or business changes. The current version will be displayed with an effective date. We will notify Data Room users of material changes and may require renewed acceptance.

Changes will not retrospectively remove accrued rights or liabilities.

54. Assignment

You may not assign, transfer or subcontract your rights or obligations under these terms without our prior written permission.

We may assign or transfer our rights and obligations to:

  • an affiliate
  • a successor
  • a purchaser of our business or assets; or
  • another entity as part of a financing, restructuring or corporate transaction

We will take reasonable steps to ensure that such a transfer does not materially reduce applicable data-protection rights.

55. No waiver

If we do not enforce a provision immediately, that does not waive our right to enforce it later. A waiver is effective only if given in writing and applies only to the circumstances for which it is given.

56. Severability

If any provision is found unlawful, invalid or unenforceable, it will be treated as modified to the minimum extent necessary to make it lawful and enforceable. If modification is not possible, the relevant provision will be treated as deleted. The remaining provisions will continue in effect.

57. Entire agreement

These terms and any agreement expressly incorporated into them constitute the entire agreement concerning access to the Website and Data Room. You acknowledge that you have not relied on a statement not set out in these terms or an applicable signed agreement. Nothing in this section limits liability for fraud or fraudulent misrepresentation.

58. Third-party rights

Unless expressly stated otherwise, a person who is not a party to these terms has no right to enforce them under the Contracts (Rights of Third Parties) Act 1999.

59. Governing law and jurisdiction

These terms and any non-contractual obligation arising from them are governed by the law of England and Wales. The courts of England and Wales have exclusive jurisdiction, except that a person with mandatory consumer rights may be entitled to bring proceedings in another court under applicable law.

60. Contact

Questions concerning these terms, the Website, the Data Room or this Privacy Notice should be sent to:

  • OuterBlue Ltd
  • 71–75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ
  • General and investment enquiries: charles@outer.blue
  • Privacy enquiries: privacy@outer.blue
© OUTERBLUE LTD 2026CONFIDENTIAL
PREDICTIVE INTELLIGENCE FOR THE LIVING OCEAN
LEGAL & PRIVACYCONTACT ↗