Privacy Policy

This privacy policy sets out how Impactology Limited ('we', 'us' and 'our') collects, uses and protects any personal information you provide when you use this website or otherwise communicate with us. Impactology Limited (company number 11277753), of 4 Cornfield Terrace, Eastbourne, East Sussex, BN21 4NN, is the data controller responsible for your Personal Data.

We are committed to protecting your privacy and handling your Personal Data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We may update this policy from time to time by publishing a revised version on this page. Please check back periodically.

Personal Data we collect

We may collect and process the following Personal Data about you:

• Identity Data: First name, last name, and professional titles;
• Contact Data: Contact information, including your telephone number and email address;
• Assessment Data: Specific responses, raw scores, metrics, and profiles generated when you complete the Readiness Signal framework; and
• Technical & Usage Data: IP address, browser interaction patterns, and questionnaire completion metrics collected via tracking cookies or platform webhooks.

Lawful basis for processing

We will only process your Personal Data where we have a lawful basis to do so. Depending on the purpose, we rely on one or more of the following:

• Contract: where processing is necessary to deliver a service you have requested;
• Legitimate interests: where we have a legitimate business interest in processing your data and that interest is not overridden by your rights — for example, to understand how our services are used and to improve them; and
• Consent: where you have given us your explicit consent to contact you for marketing purposes. You may withdraw consent at any time (see 'Your Rights' below).

How we use your Personal Data

We use the Personal Data we collect for the following purposes:

• To respond to your enquiries and communicate with you;
• To improve our website and services;
• To Generate and Deliver Your Readiness Signal Report: We process your Assessment Data to calculate your metrics and generate a highly personalised diagnostic report sent directly to your provided email address (Lawful Basis: Contract);
• To Provide Ecosystem Partner Matchmaking: Where you have given us your explicit consent to do so, we use your score parameters to identify and introduce vetted third-party partners capable of helping you carry out your road-mapping exercises (Lawful Basis: Consent); and
• To Recommend Contextual Services: Where you have consented or we have a legitimate interest, to send you information about our services, the book The View from the Wrong Mountain, and related content or services closely aligned with your assessment scores that we think may be of interest to you (Lawful Basis: Consent / Legitimate Interests).

Macro Statistical Analysis: We convert your raw survey answers into fully de-identified, aggregated datasets. This data is entirely anonymous, cannot be used to identify individual participants under any circumstances, and is used exclusively for our own internal statistical research to construct macro industry trends and benchmarking data.

We may store your Personal Data on our client database in line with your stated preferences. In the event of a reorganisation or sale of all or part of our business, your Personal Data may be transferred to the relevant third party, who will be required to use it in accordance with this policy.

We will not sell, rent or share your Personal Data with third parties for their own marketing purposes.

Data retention

We will retain your Personal Data only for as long as is necessary for the purposes set out in this policy, or as required by law. Where you have consented to receive marketing communications, we will retain your details until you withdraw that consent or ask us to delete your information.

If you choose to opt out of marketing communications via our automated email unsubscribe link, your contact details will be retained in our systems with marketing consent revoked, solely to ensure we honour your preference and do not contact you again.

Security

We take appropriate technical and organisational measures to protect your Personal Data against unauthorised access, accidental loss, disclosure or destruction. Where we use third-party service providers to process data on our behalf, we require them to maintain equivalent standards of security.

Links to other websites

Our website may contain links to third-party websites. We have no control over those sites and are not responsible for their content or privacy practices. We encourage you to review the privacy policy of any site you visit via a link from ours.

Your rights

Under the UK GDPR you have the following rights in relation to your Personal Data:

• Right of access: to request a copy of the Personal Data we hold about you;
• Right to rectification: to ask us to correct inaccurate or incomplete data;
• Right to erasure: to ask us to delete your Personal Data in certain circumstances;
• Right to restriction: to ask us to restrict the processing of your data in certain circumstances;
• Right to data portability: to receive your Personal Data in a structured, commonly used format in certain circumstances;
• Right to object: to object to processing based on legitimate interests or for direct marketing purposes; and
• Right to withdraw consent: where processing is based on consent, to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, or if you have any questions about how we handle your Personal Data, please contact us:

• By post: Impactology Limited, 4 Cornfield Terrace, Eastbourne, East Sussex, BN21 4NN
• By email: impact@impactology.co.uk

We will respond to your request within one month. We will not charge a fee for handling your request unless it is manifestly unfounded or excessive, in which case we may charge a reasonable fee or decline to act on it.

If you are not satisfied with how we have handled your Personal Data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection matters, at ico.org.uk or by calling 0303 123 1113.