Data Usage Statement

At Social Research Builders, we are committed to protecting the privacy and rights of all users of the Impacto platform. This Data Usage Statement outlines how we collect, store, process, and safeguard your data, including potentially sensitive information, in full compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Social Research Builders is registered and regulated by the Information Commissioners Office and implements the strictest data protection and privacy standards as outlined by our company policy (also available on request).

  1. Purpose of Data Collection

We collect and use data solely to:

  • Support charities and social enterprises in monitoring, evaluating, and reporting their project outcomes
  • Generate tailored impact reports and performance insights
  • Provide access to templates, tools and guidance materials
  • Improve our platform functionality and user experience
  • Fulfil contractual obligations and maintain compliance

We do not collect data for marketing resale, profiling, or automated decision-making that would affect individual rights.

  1. Types of Data Collected

Depending on how you use the platform, we may collect:

  1. a) Personal and organisational data:
  • Name, email address, phone number
  • Organisation name, type, size, and location
  • User login credentials (securely encrypted)
  1. b) Project data:
  • Project titles, descriptions, timelines, inputs, and costs
  • Selected outputs and outcomes
  • Uploaded documents (e.g. reports, templates, raw data)
  1. c) Sensitive data (special category): Some charities may input sensitive demographic data for reporting purposes, including:
  • Ethnicity
  • Gender identity
  • Sexual orientation
  • Disability status
  • Health and wellbeing indicators (aggregated)

This data is collected only with the user's explicit consent and is stored in anonymised or pseudonymised form where possible. Individual-level data should not be entered unless absolutely necessary.

  1. Legal Basis for Processing

We process your data under the following legal bases:

  • Consent – for users opting in to data sharing, support communications or submitting sensitive data
  • Contractual necessity – to provide services as part of a paid subscription
  • Legitimate interest – to improve our services and protect our platform from misuse
  1. Data Storage and Security
  • All data is stored on GDPR-compliant servers within the UK or EEA.
  • Access is restricted to authorised personnel only, with role-based controls.
  • We use encryption, secure protocols, and routine vulnerability checks.
  • Regular backups are maintained in secure environments.

We have a strict internal data handling policy and all staff are trained in data protection best practices.

  1. Data Sharing

We do not share personal or sensitive data with any third party unless:

  • Explicitly requested by the user
  • Required by law or regulation
  • Necessary to deliver specific support services (e.g. secure cloud providers bound by DPA-compliant contracts)
  1. Data Retention

We retain user data only for as long as it is required to:

  • Deliver the services you subscribe to
  • Meet legal or contractual obligations
  • Support your organisation's project reporting and learning

By default, account data is retained for 12 months following the end of a subscription period unless otherwise requested. Users may delete or export their data at any time.

  1. Your Rights

Under UK GDPR, users have the right to:

  • Access a copy of their data
  • Correct inaccurate information
  • Request data deletion (right to be forgotten)
  • Restrict or object to certain data uses
  • Data portability (in structured format)

To exercise these rights, contact: hello@socialresearchbuilders.com

  1. Breach Notification

In the unlikely event of a data breach affecting your information, we will notify affected users and the Information Commissioner's Office (ICO) within 72 hours, in accordance with UK GDPR requirements.

  1. Updates to this Statement

This Data Usage Statement will be reviewed and updated periodically. Users will be notified of material changes in advance.

Contact us: If you have any questions or concerns about how your data is handled, please contact our Data Protection Lead at:

Email: hello@socialresearchbuilders.com
Phone: 07591 358 315
Address: 39 Hawser Road, Tewkesbury, GL20 7FA

Last updated: 25/09/2025