Privacy and cookies

Who we are

Impact HE Ltd is a higher education consultancy, registered in England and Wales (company number 17246496), with its registered office at 39 Avenue Road, Ashby de la Zouch LE65 2FA. We are the data controller for the personal information described here. We are registered with the Information Commissioner’s Office under registration number ZC234155.

If you have any questions about this notice or your information, email duncan@impacthe.com.

What we collect

When you contact us through the website or by email, we collect your name, email address, organisation and whatever you choose to tell us in your message.

If you or your organisation work with us, we also hold business contact details, our correspondence with you, and the information needed to invoice and keep accounts.

When you visit the site, our hosting provider records technical information such as your IP address and browser type in server logs, which are used to keep the site secure. If you accept statistics cookies, our host also collects visitor statistics for us, such as how many people visit and which pages they view (see Cookies below). We do not knowingly collect sensitive information, and we ask you not to send it.

How we use it, and why we are allowed to

• To reply to your enquiry. Our lawful basis is our legitimate interest in responding to people who contact us.
• To deliver, manage and invoice work you have asked us to do. Our lawful basis is the performance of a contract, and our legal obligation to keep accounting records.
• To keep in touch about work we have discussed with you. Our lawful basis is legitimate interests, and you can ask us to stop at any time.
• To understand how the website is used, through visitor statistics, so we can improve it. We do this only if you accept statistics cookies, and our lawful basis is your consent.

We will only send you newsletters or marketing emails if you have agreed to receive them. We never sell your information.

Who we share it with

We use a small number of service providers who process information on our behalf and under contract: our website host and email provider (GoDaddy), which also provides our visitor statistics, and our accounting software.

Where a project involves a partner organisation, we share only what that project needs, and only once you know who they are. We may also disclose information where the law requires it.

International transfers

Some of our service providers store information outside the UK. Where they do, we rely on UK adequacy regulations or on the UK’s approved contract terms to protect it.

How long we keep it

We keep enquiries that do not lead to work for 24 months, then delete them. We keep client and accounting records for six years from the end of the financial year they relate to, as UK law requires.

Your rights

You have the right to ask for a copy of the information we hold about you, and to ask us to correct it, delete it, restrict how we use it, or transfer it to you or someone else. You can also object to our using it on the basis of legitimate interests. To do any of these, email us. We will respond within one month.

If you are unhappy with how we have handled your information, please tell us first. You can also complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

Cookies

Cookies are small files that a website stores in your browser. This site uses two kinds of cookie: those it needs to work, and statistics cookies set by our host, GoDaddy, which count visits and page views so we can see how the site is used. We set the statistics cookies only if you accept them in the cookie banner. We do not use advertising or social media cookies.

• wordpress_test_cookie: checks that your browser accepts cookies when someone visits the sign-in page. Essential. Expires when you close the browser.
• wordpress_logged_in_… and wordpress_sec_…: keep the site administrator signed in. Set only for people who sign in to manage the site. Essential. Expire after 2 to 14 days.
• ih_consent: remembers whether you accepted or rejected statistics cookies, so we do not ask on every page. Essential. Expires after six months.
• _tccl_visitor: a random identifier that lets GoDaddy’s statistics count returning visitors. Statistics, set only if you accept. Expires after one year.
• _tccl_visit: groups the pages you view into a single visit. Statistics, set only if you accept. Expires after 30 minutes.
• _scc_session: counts the pages viewed in the current visit. Statistics, set only if you accept. Expires after 20 minutes.

The statistics cookies do not identify you by name, and we use the figures only in total, to see how the site is used. We do not use them for advertising.

You can change your choice at any time with Cookie settings, which is also at the bottom of every page. You can block or delete cookies in your browser settings too. The site works the same either way.

Changes to this notice

We may update this notice from time to time. The date at the top shows when it last changed.