How We Protect Your Data

Trust Impact Privacy Notice

Introduction

Trust Impact Ltd are the ‘controllers’ of the information (‘personal data’) that we collect about you, our ‘data subjects’, which means we are responsible for how your data is processed. The word ‘process’ covers the things that can be done with personal data, including collection, storage, use and destruction of data.

This privacy notice explains why and how we process your personal data, and explains the rights you have, including amongst others, the right to access your data, and to object to the way it is processed. Please see the section on ‘Your rights as a data subject’ for more details on your rights and how to exercise them.

Our contact details are:

Website: www.trustimpact.com
Email: info@trustimpact.com
Tel. No: 07800 962506

If you have any queries about this notice or anything related to data protection, you can contact our Data Protection Lead at the details above.

Personal data

‘Personal data’ is any information that relates to a living, identifiable person. This will usually include your name, address, contact details, and other information we collect as part of our relationship with you, whether you are an employee, an Associate, a client or other work contacts.

That information can also include ‘special categories’ of data, which is the official term for information about a person’s race or ethnic origin, religious, political or other beliefs, physical or mental health, trade union membership, genetic or biometric data, sex life or sexual orientation.

The use of this type of data, and of information about criminal convictions and offences, is subject to strict legal controls.

We are committed to protecting your privacy and all of your personal data. We only process data if we need to for a specific purpose, as explained below. Most often, we collect your personal data directly from you, through our contact with you.

Your data and how and why we process it

Our data processing is so we can manage and support our relationship with you, comply with legal obligations, improve our services and achieve our legitimate business aims. The information below gives more details about our purposes for processing data, and the legal basis for each type of processing.

Clients, potential clients and other business contacts

We process your name, contact details, and other information produced through our interactions, to enable us to manage our working relationship with you, on the basis of our business’s Legitimate Interests to be able to provide our services to those who need them, in the most effective way.

Purpose Alignment Tool – When you use our free ‘Purpose Alignment Tool’ © we will collect and process your name, email address, work related information and any information you provide within the tool including in your responses to the emails asking you to describe your organisation’s purpose, as well as any follow up interactions we may have with you.

We process this information on the basis of both our business’s, and your organisation’s, Legitimate Interests to provide your organisation with the results from the use of the tool. We also keep track of industry trends using the results from the use of the tool, on the basis of our business’s Legitimate Interests to be able to provide our services. Any anonymised output from our analysis does not contain ‘personal data’.

Slider tool – when you use our slider tool we will collect and process your name, email address, work related information and any information you provide within the tool.

We process this information on the basis of both our business’s, and your organisation’s, Legitimate Interests to provide your organisation with the results from the use of the tool.

You have the right to object to any of our processing and we will assess any objection sensitively.

Employees

We process your name, contact details, work-related history and performance information, and other information produced through our interactions, which is necessary for the purposes of your employment contract. If you prefer not to provide some basic information about your contact details, or work-related information, please be aware that we may not be able to continue to employ you under the terms of your contract.

Where we require information about your health status, this is on the basis of managing your employment in line with employment law when/if you are absent or your work is otherwise affected by your health status.

Where we ask you for information about your race, religion, health/disability or sexuality for the purposes of monitoring, maintaining and improving equality of opportunity and treatment, this is optional for you to provide, and we process the data based on the legal basis of it being necessary for a task in the (substantial) public interest.

Associates

We process your name, contact details, work-related history and performance information, and other information produced through our interactions, which is necessary for the purposes of your associate contract, and on the basis of our business’s Legitimate Interests to be able to provide our services to those who need them, in the most effective and efficient way, by engaging Associates either directly or through Ltd companies.

If you prefer not to provide some basic information about your contact details, or work-related information, please be aware that we may not be able to continue to employ you under the terms of your Associate contract.

For Associates we engage directly, where we require information about your health status, this is on the basis of managing your employment in line with employment law when/if you are absent or your work is otherwise affected by your health status.

Client work

We also carry out a large amount of processing of personal data on behalf of our clients, in order to provide our services to them. In these cases, the client is the ‘Data Controller’ and has identified the legal basis for the data being processed, and we carry out the processing on their behalf with our expertise.

Why we share your data

We share the data we process with other organisations, only when we have a lawful basis to do so, or when we are engaging a supplier who will act as a ‘Data Processor’ on our behalf. ‘Processors’ are businesses who handle, or could potentially handle, personal data as part of providing a service to us, and include our IT system providers, our email providers, our website hosts, and our Associates.

Other organisations we share data with include the HMRC and banks for processing tax and payments, and we will co-operate with police and other authorities if we are asked to, in order to investigate or prevent crime, including fraud, and other unwanted behaviours such as incompetence in public roles.

How we store your data

It is our policy to store data electronically, not in hard copy. Electronic data, including emails, is stored securely on servers based in the UK.

How long we keep your data

Some of our retention periods are based on legal requirements, and others are based on the practical reasons we need to keep the data for a certain period of time.

Once we reach the retention period, we will securely delete the relevant data, unless we are legally required to keep it longer, or there are legal reasons why we should keep it longer.

Your rights as a data subject

As a data subject, you have the following rights in relation to your personal data:

To be informed about how and why your data is handled;
To gain access to your personal data;
To have errors or inaccuracies in your data changed;
To have your personal data erased, in limited circumstances (sometimes known as the ‘right to be forgotten’);
To object to the processing of your personal data for marketing purposes or when the processing is based on the public interest or other legitimate interests;
To restrict the processing of your personal data, in limited circumstances;
To obtain a copy of some of your data in a commonly used electronic form, in limited circumstances;
Rights around how you are affected by any profiling or automated decisions.

If you wish to exercise any of these rights, please contact us.

For more information about these rights, please see the ICO’s website https://ico.org.uk/ or contact our Data Protection Lead using the details above.

Withdrawing consent

If we are relying on your consent to process your data, you may withdraw your consent at any time by contacting us.

How to complain

If you have any concerns about our use of your personal data, you can complain to us and/or the ICO using the details below:

Trust Impact
Trust Impact
St Andrew’s Park
Queen’s Lane
Bromfield Industrial Estate
Mold
CH7 1XB
Email: info@trustimpact.com

Information Commissioners Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk

Cookies

Our website uses cookies, some of which are essential for the operation of the website and some which are non-essential and help us by analysing the most visited pages on our website, for example.

You can choose to reject non-essential Cookies by using our Cookie Settings on our website, and you can set your own browser to reject all Cookies but please be aware this will affect the operation of our website on your devices.

This Privacy Notice was last updated on 20th March 2024.