Impact Development Training Ltd, including its subsidiaries and branches (“Impact”) respects the privacy of every individual who visits our website, contacts us, and works with us. We are committed to safeguarding your privacy and have written the following privacy notice to explain what information we collect and what we do with it.
This policy may change from time to time, so please check it periodically. It was last updated on 12 October 2022.
Who are we?
Impact Development Training Ltd is the parent company of a number of subsidiaries. Please find the full list below. Impact Development Training Ltd is registered at the same address as Impact (UK) Ltd, which is our company headquarters.
The websites within the scope of this policy are:
Our companies:
Registered name: Impact (UK) Ltd
Registered address: Cragwood House, Windermere, Cumbria, LA23 1LQ
Company number: 8880486
Registered name: Impact International ASPAC Region Co., Ltd.
Registered address: 10th Floor, Alma Link Building, No. 25 Soi Chidlom, Ploenchit Road, Lumpini, Pathumwan, Bangkok 10330, Thailand
Company number: 105550108975
Registered name: Impact Development Training Limited
Registered address: Progue Pty Ltd, Suite 407, 12 Century Cct, Norwest NSW, Australia
Company number: 086228284
Registered name: IMPACT INTERNATIONAL CO., LTD.
Registered address: Room 1005, No. 28, Xuanhua Road, Changning District, Shanghai, China
Company number: 310000400591149
Registered name: Impact APAC (Hong Kong) Limited
Registered address: FLAT/RM E 18/F Rich View Terrace, 26 Square Street, Sheung Wan, Hong Kong
Company number: 1322224
Registered name: Impact Italia S.r.l.
Registered address: Via Merulana, 248, 00185 Roma, Italia
Company number: 10971441000
Registered name: Impact (Japan) Limited
Registered address: 1-6-12, Yoyogi, Shibuya-ku, Tokyo
Company number: 0110-01-033899
Registered name: Impact Development Training Limited
Registered address: 186 Ladies Mile, Ellerslie, Auckland, New Zealand
Company number: 926325
Registered name: Impact Polska sp. Z.o.o.
Registered address: Ul. Batalionu Miotla 20, 01-366 Warszawa, Poland
Company number: 0000122553
Registered name: Impact Singapore PTE LTD
Registered address: 1 North Bridge Road, # 19-09 High Street Centre, Singapore 179094
Company number: 200711616D
Registered name: Impact Learning & Development Inc.
Registered address: 13900 Marquesas Way #4404 Marina Del Rey, CA 90292, USA
Company number: 043655794
If you have questions about how we process personal data or would like to exercise your data subject rights, please email us at [email protected].
Who is the data controller and processor?
For the purposes of the personal data covered in this privacy notice, Impact could be a 'Data Controller' or a 'Data Processor'.
How do we obtain your personal information?
We have listed the ways we are likely to collect your personal information according to the relationship you have with us. We may obtain your personal information in a variety of ways, including:
Clients, suppliers, and other business contacts:
- From data you supply whilst working together during commissioned services or during new business activities and the act of commissioning new work.
- From inbound enquiries to [email protected] and other email inboxes such as individual email accounts of Impact employees.
- From inbound phone calls where we see the incoming phone number, and you pass us information verbally.
- From networking activities and events, for example, exchanging business cards or connecting on LinkedIn.
- From recommendations or references about you from others.
- From you signing up to our mailing list, webinars or other events via our website or Facebook page.
- From contact and conversations with our suppliers.
Recruitment candidates:
- From data collected from you when you apply to us for employment either online or by post or via an agency and during any subsequent interactions as part of the recruitment process.
Website visitors:
- From visits to our websites and when resources are accessed on our websites and other platforms and technologies made available by us. We may automatically collect technical data and usage data. We may collect this data via cookies, including, where available, your IP address, operating system, and browser type, for system administration.
- From website data capture forms, for example, event applications and booking forms or pdf downloads.
Participants in our solutions:
- From you being a participant in one of our contracted solutions. Data is initially collected from your associated organisation. Data may also be collected from you before, during, or after a solution related to providing the contracted solution or collecting evaluation data about the solution.
Any information you give us should be accurate, and if you are supplying anyone else’s data, you must ensure that you have the authority and legal basis to do so.
What personal information is processed?
We have listed the types of personal information we may process according to the relationship you have with us. We may process different types of information about you, which may include:
Clients, suppliers, and other business contacts:
- Name
- Email address
- Phone number
- Job title
- Manager’s name
- Business name and address
Recruitment candidates:
- Name
- Home address
- Email address
- Phone number
- Employment history
- Education and qualifications
- Other information that you provide
Website visitors:
When you first visit our website, you are asked to set your cookie preferences. If you reject all cookies, you can visit the website without any information being collected. For full details about the cookies we use and how to change your cookie preferences, see our cookie declaration here: https://www.impactinternational.com/cookie-declaration
If you choose to allow us to use cookies, Impact or our partners may collect the following information:
- Technical data, including your IP address, browser type and version, and operating system.
- Information about how you use the website.
- Information about how you have responded to our marketing activity, including marketing emails and advertising.
- Any information you supply to us through forms on the website, which may include:
- Name
- Email address
- Phone number
- Job title
- Business name and address
- Country
We partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve and market our products/services. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. Additionally, we use this information for site optimization, fraud/security purposes, and advertising. For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement.
Participants in our solutions:
- Name
- Email address
- Phone number
- Job title
- Manager’s name
- Business name and address
- Emergency contact information
- Responses and results of assessment tools, including both Impact assessment tools and third-party assessment tools, such as MBTI assessments.
We may also collect the following special category data if you are a participant in one of our solutions:
- Dietary requirements
- Medical information, including medication, injuries, and conditions
- Any other special needs that we may need to be aware of for the purpose of providing our services to you
How is your personal information used, and what is our legal basis?
The list below shows how your personal information may be used (the purpose) and, in each case, what the legal basis is. Where legitimate interest is the legal basis, we identify what our legitimate interests are.
Category: Clients, suppliers
Purpose:
- Communicating with you as a client or supplier about new or currently commissioned projects.
- Performing financial tasks, such as raising and sending invoices.
- Communicating with you whilst we provide services to you as a client.
- Communicating with you with regards to an event you have applied to attend or have attended (e.g. sending you logistical information about the event or sending you related follow-up content).
Legal basis for processing: Contractual fulfilment
Category: Clients, prospective clients, business contacts
Purpose:
- Responding to enquiries about our services that you have sent to us.
- Registering you and managing our relationship.
- Contacting you to ascertain interest in our services.
- Sending you e-newsletters and other relevant content regarding our services via email if you have signed up for our mailing list.
- Communicating with you on LinkedIn, for example, sharing relevant content or inviting you to industry events.
- Communicating with you regarding any previously agreed marketing activity, such as the production of a case study or video or entering an industry award.
- Enabling you to participate in surveys.
- Communicating with you with regard to an enquiry you submitted through the website.
- Sending you marketing communications and proposals for working together.
- Growing our business and informing our marketing strategy.
- Conducting research and product development to improve our services for the benefit of our clients and others.
- Keeping our records updated.
- For good governance, accounting, and managing and auditing our business operations.
Category: Website visitors
Purpose:
- Ensuring the security and functionality of our website.
- Keeping our website updated and relevant to develop our business and to inform our marketing strategy.
Category: Recruitment candidates
Purpose:
- Responding to recruitment enquiries and progressing the recruitment process, storing your details for future reference if new positions become available.
- Providing employment.
Category: Participants
Purpose:
- Providing the service contracted by your organisation.
- Communicating with you whilst we provide services to you as a participant.
Legal basis for processing: Contractual fulfilment
Category: Participants – assessment tool data
Purpose:
- Providing the service contracted by your organisation by employing assessment tools.
Legal basis for processing: In general, the legal basis is contractual fulfilment. In some cases, we may rely on consent.
Category: Participants – special category data
Purpose:
- Ensuring your health and safety during a solution we are providing you.
Legal basis for processing: Legal obligation (The Management of Health and Safety at Work Regulations 1999, Regulation 3).
Who is your information shared with?
Your personal data will not be sold or disclosed to anyone outside of Impact or Impact’s group of companies or appointed suppliers without obtaining your prior consent - unless we are required to do so by law.
Your personal data is only shared within Impact or Impact’s group of companies if the receiving parties need to process that data in order to fulfil one of the purposes listed above.
Retention of your personal information
Our data retention policy is to hold data for three years after the end of the last interaction between us; this includes attendance of one of our programmes or after a software licence expires. In some cases, we may be legally required to retain the data for a longer or shorter length of time.
In the case of assessment tool data, this is held for 18 months.
Your rights
As a data subject whose personal information we hold, you have certain rights. If you wish to exercise any of these rights, please email [email protected]. Your rights are as follows:
- The right to be informed
As a data controller, we are obliged to provide clear and transparent information about our data processing activities. This is provided by this privacy policy and any related communications we may send you.
- The right of access
You may request a copy of the personal data we hold about you free of charge. Once we have verified your identity and, if relevant, the authority of any third-party requestor, we will provide access to the personal data we hold about you as well as the following information:
- The purposes of the processing.
- The categories of personal data concerned.
- The recipients to whom the personal data has been disclosed.
- The retention period or envisioned retention period for that personal data.
- When personal data has been collected from a third party, the source of the personal data.
If there are exceptional circumstances that mean we can refuse to provide the information, we will explain them. If requests are frivolous or vexatious, we reserve the right to refuse them. If answering requests is likely to require additional time or occasions unreasonable expense (which you may have to meet), we will inform you.
- The right to rectification
When you believe we hold inaccurate or incomplete personal information about you, you may exercise your right to correct or complete this data. This may be used with the right to restrict processing to make sure that incorrect/incomplete information is not processed until it is corrected.
- The right to erasure (the ‘right to be forgotten')
Where no overriding legal basis or legitimate reason continues to exist for processing personal data, you may request that we delete the personal data. This includes personal data that may have been unlawfully processed. We will take all reasonable steps to ensure erasure.
- The right to restrict processing
You may ask us to stop processing your personal data. We will still hold the data but will not process it any further. This right is an alternative to the right to erasure. If one of the following conditions applies, you may exercise the right to restrict processing:
- The accuracy of personal data is contested.
- Processing of personal data is unlawful.
- We no longer need personal data for processing but the personal data is required for part of a legal process.
- The right to object has been exercised and processing is restricted pending a decision on the status of the processing.
- The right to data portability
You may request your set of personal data be transferred to another controller or processor provided in a commonly used and machine-readable format. This right is only available if the original processing was on the basis of consent, the processing is by automated means, and if the processing is based on the fulfilment of a contractual obligation.
- The right to object
You have the right to object to our processing of your data where:
- Processing is based on legitimate interest;
- Processing is for the purpose of direct marketing;
- Processing is for the purposes of scientific or historic research; or
- Processing involves automated decision-making and profiling.
Where we are a processor in respect of your personal data, we will inform the relevant controller of your request and assist and co-operate with the controller for them to fulfil the request.
How we protect your information
We take a range of organisational and technical measures to protect your information.
We maintain strict physical, electronic and administrative safeguards to protect your personal data from unauthorised or inappropriate access. Where appropriate, we use industry-standard encryption techniques. Regular security reviews are held by Impact to ensure that our systems and processes remain safe and secure for the protection of your personal data.
Logging personal data online / Cookies
For more information about cookies, please see our cookie declaration here: https://www.impactinternational.com/cookie-declaration.
Third-party service providers
From time to time, we may employ or engage third parties to help us deliver part of our services, to deliver activities that are related to our services, or to help us analyse how our services are being used and accessed. Where our requirements are such that we need to disclose personal data to these third-party service providers so that they can carry out their tasks in accordance with their agreement, we will make sure that we comply with the provisions of the GDPR as regards data security.
Unsubscribing from newsletters
To unsubscribe from our mailing list or specific aspects of the mailing list, please use the unsubscribe link at the bottom of one of our emails. Alternatively, you can unsubscribe from this page: https://impactinternational.us14.list-manage.com/unsubscribe?u=3cd57124e25b7523d93b20ca4&id=f3713b87d1&t=b&e=4c29306015&c=fe43d641a9.
Changes to this privacy statement
We may update this privacy statement from time to time to reflect changes in law or changes in our data protection regime. Any changes will usually be effective immediately that an updated version of this privacy statement is issued.
Contact us
If you have questions about how we process personal data, or would like to exercise your data subject rights, please email us at [email protected].