Privacy Statement

This Privacy Statement explains how Social Research Builders Ltd ("we", "our", "us") collects, uses, and protects your personal data when you use the Impacto platform. We are committed to safeguarding the privacy of our users and handling data responsibly, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

  1. Who we are

Impacto is developed and operated by Social Research Builders Ltd, a UK-based research and consultancy organisation focused on supporting small and medium charities to understand and communicate their impact.

For all data protection matters, we can be contacted at:
Email: hello@socialresearchbuilders.com
Phone: 07591 358 315
Registered Office: 39 Hawser Road, Tewkesbury, GL20 7FA

  1. What data we collect

We collect and store the following types of personal and organisational data:

  • Name and contact details (email address, phone number)
  • Organisation information (name, size, focus area)
  • Login credentials (securely encrypted)
  • Project information submitted by users (inputs, activities, outcomes, outputs)
  • Survey or evaluation data (where applicable)

In some cases, we may also collect special category data, such as:

  • Equalities monitoring data (e.g. gender, ethnicity, disability)
  • Wellbeing or health-related data (aggregated)

This is only collected with your explicit consent and should be anonymised wherever possible.

  1. How we use your data

We use your data to:

  • Provide access to the Impacto platform and its features
  • Generate impact reports and data summaries
  • Offer tools and templates tailored to your project type
  • Deliver support and training services
  • Monitor usage and improve platform performance
  • Ensure compliance with our terms of service

We do not sell your data or use it for advertising or marketing purposes.

  1. How your data is stored

All data is stored securely using GDPR-compliant cloud services based in the UK or EEA. We use a range of technical and organisational safeguards to protect your information, including:

  • Encrypted transmission and storage
  • Role-based access control
  • Secure backups and audit logs

Only authorised personnel have access to your data, and only for the purposes outlined above.

  1. Lawful basis for processing

We rely on the following lawful bases to process your data:

  • Consent – when you opt in to communications or submit sensitive data
  • Contractual obligation – to deliver services you have subscribed to
  • Legitimate interests – to improve our tools and support your organisation’s reporting needs
  1. How long we keep your data

We retain your data for no longer than necessary. By default, project and account data are kept for 12 months after your subscription ends, unless you request otherwise.

You can request data deletion, export, or correction at any time.

  1. Sharing your data

We do not share your data with third parties unless:

  • You give explicit permission
  • It is necessary to deliver a service (e.g. secure cloud providers)
  • We are required to do so by law

Any third-party services we use are vetted for data protection compliance and bound by strict contracts.

  1. Your rights

Under the UK GDPR, you have the right to:

  • Access a copy of your personal data
  • Correct inaccurate or incomplete information
  • Request deletion of your data (right to be forgotten)
  • Object to certain types of processing
  • Restrict or withdraw consent
  • Request data portability

To exercise any of these rights, please contact us at hello@socialresearchbuilders.com.

  1. Complaints

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO): https://ico.org.uk/

  1. Updates to this statement

We may update this Privacy Statement from time to time. Users will be notified of any significant changes. The current version will always be available on our website.

Last updated: 25/09/2025