ImpactPlanner Ltd ("ImpactPlanner", "we", "us", or "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you visit our website at impactplanner.co.uk, register for an account, or use our platform and services (collectively, the "Services").
Please read this policy carefully. By accessing or using our Services, you confirm that you have read and understood how we handle your personal data. If you do not agree with this policy, you should not use our Services.
ImpactPlanner Ltd is the data controller responsible for your personal data.
| Company Name | ImpactPlanner Ltd |
| Website | impactplanner.co.uk |
| privacy@impactplanner.co.uk | |
| Registered Address | [Registered Office Address] |
| Company Number | [Companies House Number] |
If you have any questions about this policy or how we handle your data, please contact us at the details above.
We may collect the following categories of personal data:
We use your personal data for the following purposes, relying on the legal bases indicated:
| Purpose | Legal Basis |
|---|---|
| Creating and managing your account | Contract performance |
| Providing access to the platform and its features | Contract performance |
| Processing payments and managing subscriptions | Contract performance |
| Sending transactional emails (e.g. account confirmation, password reset) | Contract performance |
| Responding to support requests and enquiries | Contract performance / Legitimate interests |
| Improving and developing the platform | Legitimate interests |
| Monitoring platform security and preventing fraud | Legitimate interests / Legal obligation |
| Sending product updates and feature announcements | Legitimate interests (with opt-out) |
| Sending marketing communications | Consent |
| Complying with legal and regulatory obligations | Legal obligation |
| Conducting anonymised analytics and research | Legitimate interests |
Where we rely on legitimate interests, we have assessed that our interests are not overridden by your rights and freedoms. You may object to processing based on legitimate interests at any time (see Section 8).
Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing prior to withdrawal.
We retain your personal data only for as long as necessary for the purposes for which it was collected, or as required by law.
| Data Type | Retention Period |
|---|---|
| Account data | Duration of the account plus 2 years after closure |
| Platform content and uploads | Duration of the account plus 30 days after closure |
| Financial and billing records | 7 years (legal/tax obligation) |
| Support correspondence | 3 years from last interaction |
| Marketing consent records | Until consent is withdrawn plus 1 year |
| Cookie and analytics data | Up to 13 months (see Section 9) |
| Server and security logs | 90 days |
When data is no longer required, we securely delete or anonymise it in accordance with our data retention procedures.
We do not sell your personal data. We may share it with the following categories of recipients:
We use trusted third-party service providers to help us deliver the Services. These providers only process your data on our instructions and are contractually bound to keep it secure:
A full list of our sub-processors is available upon request.
If ImpactPlanner is involved in a merger, acquisition, or sale of all or part of its business, your data may be transferred to the acquiring entity. We will provide reasonable notice before this occurs.
We may disclose your data where required by law, court order, or a competent regulatory authority, or where necessary to protect the rights, property, or safety of ImpactPlanner, our users, or the public.
We may share your data with other third parties where you have given us your explicit consent to do so.
ImpactPlanner is based in the United Kingdom. Some of our service providers may process your data outside the UK or European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place, such as:
You may request details of the specific transfer mechanisms we use by contacting us at privacy@impactplanner.co.uk.
Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, you have the following rights in relation to your personal data:
| Right | What It Means |
|---|---|
| Right of access | You can request a copy of the personal data we hold about you |
| Right to rectification | You can ask us to correct inaccurate or incomplete data |
| Right to erasure | You can ask us to delete your data in certain circumstances |
| Right to restrict processing | You can ask us to pause processing of your data in certain circumstances |
| Right to data portability | You can request your data in a structured, machine-readable format |
| Right to object | You can object to processing based on legitimate interests or for direct marketing |
| Rights re: automated decisions | You can request human review of any automated decision that significantly affects you |
| Right to withdraw consent | Where we process data on the basis of consent, you may withdraw it at any time |
To exercise any of these rights, please contact us at privacy@impactplanner.co.uk. We will respond within one calendar month. We may need to verify your identity before processing your request.
If you are unhappy with how we have handled your data or your request, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
We use cookies and similar tracking technologies on our website and platform. Cookies are small text files stored on your device that help us recognise you and improve your experience.
| Category | Purpose | Examples |
|---|---|---|
| Strictly necessary | Essential for the website and platform to function. Cannot be disabled. | Session cookies, authentication tokens, security cookies |
| Performance & analytics | Help us understand how visitors use our site so we can improve it. | Google Analytics, Plausible |
| Functional | Remember your preferences and settings. | Language preference, theme selection |
| Marketing | Used to deliver relevant advertising and track campaign effectiveness. | Google Ads, LinkedIn Insight Tag |
You can control and manage cookies in several ways:
Strictly necessary cookies do not require your consent and cannot be disabled, as they are essential for the Services to function.
We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, loss, alteration, or disclosure. Our security measures include:
While we take all reasonable steps to protect your data, no method of transmission over the internet is completely secure. If you suspect any unauthorised access to your account, please contact us immediately at security@impactplanner.co.uk.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours and, where required, will notify you without undue delay.
Our Services are not directed at children under the age of 16. We do not knowingly collect personal data from anyone under 16. If you believe we have inadvertently collected data from a child, please contact us at privacy@impactplanner.co.uk and we will promptly delete it.
Our website and platform may contain links to third-party websites or integrations with third-party services. This Privacy Policy does not apply to those third-party sites. We encourage you to read their privacy policies before providing any personal data to them. We are not responsible for the privacy practices of any third-party websites.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will:
We encourage you to review this policy periodically. Your continued use of our Services after the effective date of any changes constitutes your acceptance of the updated policy.
If you have any questions, concerns, or requests relating to this Privacy Policy or how we handle your personal data, please contact us:
ImpactPlanner Ltd
Email: privacy@impactplanner.co.uk
Website: impactplanner.co.uk
Registered Address: [Registered Office Address]
This Privacy Policy is governed by the laws of England and Wales.