Privacy Notice

PRIVACY NOTICE

We are committed to being transparent about how we collect and use that data and to meeting our data protection obligations.

What personal information do we collect about you?

We collect information about you when you subscribe to our newsletters. We also collect information when you register to attend an event or join a group organised by or involving Impetus. Website usage information is collected using cookies.

We may also process information about you from external sources and combine it with information you have provided in order to determine your ability to, and potential interest in, supporting Impetus and our portfolio partners through donations, pro bono work, and other forms of support. This will be done only where such information is available in the public domain or where you have given permission for a third party to share the information with charities like Impetus. (More detail regarding this processing is given below, under the heading ‘Philanthropy Research’).

Special Categories of Data

Special Category data are defined in Article 9 of UK GDPR as personal data revealing: racial or ethnic origin; political opinions; religious or philosophical beliefs; trade union membership; genetic data; biometric data for the purpose of uniquely identifying a natural person; data concerning health; and data concerning a natural person’s sex life or sexual orientation.

We will process these data only where necessary for the purposes outlined elsewhere in this Notice and only under the following circumstances:

  • You have directly provided the information to Impetus and given explicit consent (for example, to assess requirements in relation to a disability, for event management purposes)
  • The data has been sourced from information that we believe you have clearly made public (for example, details of patrons/trustees on charity websites)

Criminal Offence Data

Article 10 of the UK GDPR covers processing in relation to criminal convictions and offences or related security measures. Additionally, section 11(2) of the DPA 2018 specifically confirms that this includes personal data relating to the alleged commission of offences or proceedings for an offence committed or alleged to have been committed, including sentencing. This is collectively referred to as ‘Criminal Offence data’.

We may process Criminal Offence data in the course of due diligence performed in accordance with our Ethical Fundraising Policy and philanthropy research (see below). We rely on Condition 12 in Part 2 of Schedule 1 of the DPA 2018 in order to process such data, further details of which are outlined in an appropriate policy document.

How will we use the information about you?

We hold information about you to provide you updates on our research reports, policy briefings, projects, publications, and forthcoming events. If you register to attend an event or join a group organised by or involving Impetus, we may pass your personal information to venues, partners, funders, and speakers involved with that event or group. We will not share your information for marketing purposes with other companies or organisations.

Newsletters

We would like to send you newsletters about our policy work, events, and general news. If you have consented to receive these, you may change your preferences or opt out at a later date. You have a right at any time to stop us from contacting you for such purposes.

Access to your information and correction

You have the right to request a copy of the information that we hold about you. If you would like a copy of some or all of your personal information, please contact us using the contact information provided below. You can ask us to correct or remove information you think is inaccurate.

Data processed under legitimate interest

We collect, store and process personal data in regard to our events, fundraising, research, and influencing and communications strategy. This includes processing data to:

  • collect details for and contact relevant stakeholders
  • conduct qualitative research
  • conduct surveys
  • fundraise (see ‘Philanthropy Research’ below)
  • inform people about our work.
  • issue press releases
  • organise and promote events
  • request feedback.

We have a legitimate interest in processing data in this way as it is integral to our work and mission. It allows us to secure financial support, conduct effective research and build an audience of relevant stakeholders.

Philanthropy Research

We perform philanthropy research (sometimes referred to as prospect research or fundraising research) in order to understand more about your potential affinity, propensity, and capacity to support Impetus’ mission, including through philanthropic donations and pro bono support. This involves using data from the public domain and sometimes matching this with data supplied by you.

Due diligence

We also perform due diligence on potential and actual donors and partners, in accordance with our Ethical Fundraising Policy, which is informed by guidance provided by the Charity Commission on the acceptance and refusal of donations. We have a legal obligation to process personal data for this purpose and a legitimate interest in doing so.

We may use trusted external consultants from time to time to perform the above work and the help ensure we are working in the most efficient and effective way possible. Whenever this is the case, we will ensure that there are appropriate safeguards in place.

We use a variety of sources to perform philanthropy research and due diligence, including those listed below:

Automated decision making

We may use modelling tools that will automatically process your data to assess the likelihood of you being able to support Impetus through philanthropy or pro bono work. However, we believe this does not produce a legal effect concerning you or similarly significant affect upon you in terms of article 22 paragraph 1 of UK GDPR.

If you would prefer for us not to use your data for automated decision making, please contact us using the contact details below.

Data retention

We store all personal data safely and securely, and retain information for only as long as is deemed necessary for the purpose.

Where personal data is shared with third parties (e.g. project funders or partners) this will be made clear to individuals.

Data storage and security

We hold personal data on our own servers. Personal data is also held by Salesforce on our behalf. Our Salesforce servers are located in the UK.

Where personal data is collected directly from individuals for case studies, surveys and research, consent for processing is sought.

Your rights

You have a number of rights. You can:

  • access and obtain a copy of your data on request;
  • require us to change incorrect or incomplete data;
  • require us to delete or stop processing your data, for example where the data is no longer necessary for the purposes of processing;
  • object to the processing of your data where we are relying on our legitimate interests as the legal ground for processing; and
  • ask us to stop processing data for a period if data is inaccurate or there is a dispute about whether or not your interests override our legitimate grounds for processing data.

If you believe that we have not complied with your data protection rights, you can complain to the Information Commissioner who can be contacted at Make a complaint | ICO. We would, of course, appreciate the opportunity to discuss your complaint with you first.

How to contact us

Please contact us if you have any questions about our privacy policy or the information we hold about you:

  • by email at cecilie.gianneri@impetus.org.uk
  • or write to the Director of Finance and Operations, Impetus, 1st Floor, Golden Cross House, 8 Duncannon St, London, WC2N 4JF.

Cookies

Cookies are text files placed on your computer to collect standard internet log information and visitor behaviour information. This information is used to track visitor use of the website, compile statistical reports on website activity, and make the website easier to use.

We use Google Analytics to analyse the use of our website.

You can set your browser not to accept cookies and you can remove cookies from your browser.

Other websites

Our website contains links to other websites. This privacy notice applies only to this website so when you link to other websites you should read their privacy notice. This privacy notice does not apply to any portfolio partners that Impetus supports, who will have their own policies and notices around collecting data.

Changes to our privacy policy

We keep our privacy notice under regular review and we will place any updates on our website.

Updated: 5th March 2025