Last updated: 9 October 2026
Our Impact (ourimpact.co.uk) is operated by The Impact Lab Ltd. This policy explains what personal data we collect through this website and through the Our Impact evaluation platform, why we collect it, and what we do with it.
Enquiries. When you contact us through our enquiry form or by email, we collect your name, email address and the contents of your message.
Platform accounts. When your organisation uses the Our Impact platform, we collect the name, work email address, organisation and role of each user account, alongside the impact data your organisation submits.
Technical data. We keep minimal technical records (such as login sessions and security tokens) needed to operate the platform securely.
We use enquiry data to respond to your message (lawful basis: consent). We use account and impact data to provide, maintain and secure the service your organisation has contracted with us to deliver (lawful basis: contract). We use technical data to keep the platform secure (lawful basis: legitimate interests).
We use a strictly limited set of cookies that are essential for the platform to function, such as keeping you signed in and protecting forms. We do not use analytics or advertising cookies. See our Cookie Policy for details.
We do not sell personal data, and we do not use advertising or analytics trackers. Our hosting provider, Krystal Hosting Ltd, stores data on our behalf in UK data centres and acts as a sub-processor under our instructions. We do not share personal data with any other third party except where the law requires it or where a client has instructed us to do so in connection with the service.
Personal data processed through Our Impact is hosted in UK data centres. We keep personal data within the United Kingdom.
Enquiry correspondence is kept for up to 24 months so we can follow up on conversations. Platform data is retained for the duration of your organisation's agreement with us and is returned or securely deleted on termination, in line with that agreement.
Under UK data protection law you have the right to access, rectify, erase, restrict, object to and port your personal data. To exercise any of these rights, contact us at admin@ourimpact.co.uk. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.
We apply appropriate technical and organisational measures to protect personal data. See our Security & Compliance page for an overview.
We may update this policy from time to time. Any changes will be posted on this page.
Questions about this policy or your data? Contact us at admin@ourimpact.co.uk.
Terms of Service · Privacy Policy · Cookie Policy · Security