Privacy Policy 

Section 1 - Data Controller
Chris Laband

For any questions regarding your data, please contact: chris@impact-partner.org

Section 2 - What data we collect

I may collect, use, store, and transfer different kinds of personal data about you. The categories are:

• Identity Data: Name, job title, company name.
• Contact Data: Billing address, email address, telephone numbers.
• Service Data: Project specifications, communication history, materials you provide, and outcomes of the commissioned work.
• Financial Data: Payment details (if processed directly), invoice history, and billing records.
• Marketing & Feedback Data: Quotes, screenshots, or pictures (only collected with explicit consent).

Section 3 - Purposes and Lawful Basis for Processing (How we use your data)

I will only use your personal data when the law allows me to do so. For each way I process your data, I rely on a specific legal justification (Lawful Basis):

• To deliver and manage the commissioned service (e.g., project execution and essential client communication).
  • Data Used: Identity, Contact, Service.
  • Lawful Basis: Performance of a Contract (It is necessary to fulfil the agreement we have with you).
• To invoice and process payments for services rendered.
  • Data Used: Identity, Contact, Financial.
  • Lawful Basis: Performance of a Contract and Legal Obligation (for tax and accounting purposes).
• To manage and improve my service (e.g., administrative processes, fraud prevention, and system maintenance).
  • Data Used: Identity, Contact, Service.
  • Lawful Basis: Legitimate Interests (My interest in running the business efficiently and ensuring service quality).
• To use testimonials, quotes, or case studies for marketing purposes.
  • Data Used: Identity, Marketing & Feedback.
  • Lawful Basis: Consent (You give explicit, separate permission for this use, and you have the right to withdraw this consent at any time).
• To meet any legal or regulatory requirements (e.g., HMRC/tax reporting and compliance).
  • Data Used: Identity, Contact, Financial.
  • Lawful Basis: Legal Obligation (Mandatory compliance with relevant laws).

Section 4 - Sharing your data

I may have to share your personal data with the parties set out below for the purposes outlined in Section 3:

• Service Providers: Third parties who provide IT and system administration services (e.g., cloud storage, accounting software, email providers).
• Professional Advisers: Accountants, lawyers, bankers, auditors, and insurers.
• Regulators and other authorities based in the UK/EU who require reporting of processing activities in certain circumstances.

I ensure all third parties respect the security of your personal data and treat it according to the law. I do not allow my third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with my instructions.

Section 5 - Data security

I have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way. I limit access to your personal data to those who have a business need to know.

Section 6 - Data retention

I will only retain your personal data for as long as necessary to fulfil the purposes I collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

Typically, I retain records relating to client projects for 7 years after the end of the contract, to comply with legal obligations regarding tax and accounting.

Section 7 - Your rights

Under data protection law, you have rights including:

• The Right to Access: Request a copy of the personal data I hold about you.
• The Right to Rectification: Request correction of any incomplete or inaccurate data.
• The Right to Erasure ('Right to be Forgotten'): Ask me to delete or remove personal data where there is no good reason for me to continue processing it.
• The Right to Restrict Processing: Ask me to suspend the processing of your personal data.
• The Right to Data Portability: Request the transfer of your data to you or a third party in a structured, commonly used format.
• The Right to Object: Object to processing where I am relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object.

If you wish to exercise any of these rights, please contact me using the email provided in Section 1.

Section 8 - Complaints

You have the right to make a complaint at any time to the relevant supervisory authority. In the UK, this is the Information Commissioner’s Office (ICO).

ICO Contact Details: https://www.ico.org.uk/concerns/