Privacy
Policy.

We collect only information that is relevant to our work and relationship with you. Depending on how you engage with us, this may include:

• Identity and contact details, such as your name and email address.
• Technical information such as IP address, device, browser, approximate location and how you use our website.
• Photographs, video, stories or testimonials where you have given informed permission.

We use personal information to process and acknowledge donations; administer projects and events; manage volunteer, recruitment and partnership relationships; respond to enquiries; meet safeguarding responsibilities; improve our work; and keep accurate financial and operational records.

With your consent, we may send updates about our impact, campaigns and ways to support our work. You can unsubscribe at any time by using the link in an email or contacting us.

We process information when it is necessary to perform an agreement with you, comply with a legal duty, protect someone's vital interests, or pursue our legitimate charitable interests in a way that does not override your rights. We rely on consent where the law requires it, including for certain communications and use of sensitive stories or images.

We do not sell or rent personal information. We may share limited information with trusted organisations that help us deliver our work, including banks, technology providers, professional advisers, programme partners and public authorities.

Our website may use essential cookies to operate securely and optional cookies to understand performance or remember choices. We will request consent before using non-essential cookies where required. You can change your browser settings or cookie choices, although some website functions may then be limited.

We keep information only for as long as needed for the purpose collected, including legal, accounting, donor-reporting and safeguarding requirements. Retention periods vary by record type; when information is no longer required, we securely delete or anonymise it.

We use proportionate administrative and technical safeguards, restrict access to people who need it, and review our practices regularly. No online system is completely secure, but we act promptly to investigate and manage suspected incidents.

Protecting children and vulnerable people is central to our work. We collect their information only when necessary, with appropriate consent or another lawful basis, and in accordance with our safeguarding procedures. We do not knowingly use a child's information for direct marketing.

We may update this policy when our work, technology or legal obligations change. We will post the revised version here and highlight material changes where appropriate.

Questions or complaints can be sent to the Data Protection Lead at privacy@impactaction.org. You may also write to Impact Action at its registered office.