Website enquiries and contact form

When you submit our contact form, we collect your name, organisation name and email address. We use this to respond to your enquiry. The lawful basis is legitimate interests.

Discovery call bookings

When you book a call through our website calendar, we collect your name, email address and your answer to our pre-call question. We use this to prepare for and conduct the call. The lawful basis is legitimate interests.

Get Featured applications

When you register your interest in being featured in the Impact Story Bank, we collect your name and email address. We use this to send you information about the process and next steps. The lawful basis is consent. You can withdraw your consent at any time by emailing info@leadwithimpact.org.uk.

Email marketing

If you opt in to receive emails from us, we will send you updates about LEAD with Impact, including news, features and periodic offers. The lawful basis is consent. You can unsubscribe at any time using the link in any email we send you.

Lead With Story Ltd provides impact measurement services to social enterprises, charities, CICs and their funders through the Social Value Dashboard platform.

In this context, Lead With Story Ltd acts as a data processor on behalf of our clients, who are the data controllers for their own beneficiary and programme data.

The categories of data we process on behalf of clients include:

• Beneficiary personal data including name, age range, gender, ethnicity and employment status

• Special category data including health conditions, mental health status, disability status, offending history and modern slavery survivor status where relevant to the programme

• Session attendance and outcome response data

• Social value and programme performance data

• Staff contact details for the organisations we work with

We process this data solely for the purposes agreed with each client, which include configuring and maintaining the Social Value Dashboard, recording and analysing outcome data, and producing evaluation reports and impact evidence on the client's behalf.

Our clients are responsible for obtaining the appropriate consent or establishing the appropriate lawful basis for the collection of their beneficiary data before sharing it with us for processing. We do not collect beneficiary data directly from beneficiaries.

All client and beneficiary data is governed by a Data Processing Agreement between Lead With Story Ltd and each client.

Website enquiry and marketing data is stored within Systeme.io, our website and email platform. Systeme.io is GDPR compliant and processes data within the European Economic Area.

Client and beneficiary data for the Social Value Dashboard is stored in Airtable. Access is restricted to named users only via role-based logins through our Softr interface. No open sharing links are used for sensitive data.

We may also use Google Sheets for certain data processing activities. Access to Google Sheets containing personal data is restricted to named authorised users only.

We take appropriate technical and organisational measures to protect your data against unauthorised access, loss or disclosure.

Website enquiry data: 2 years from last contact, unless you become a client.

Marketing and email list data: until you unsubscribe or request deletion.

Get Featured applicant data: 2 years from application or until your story is published, whichever is longer.

Client and beneficiary data processed through the Social Value Dashboard: 7 years from the end of the programme or funding relationship, in line with standard UK legal and accounting requirements. Special category data is reviewed at the end of this period and deleted unless there is a specific legal reason to retain it.

Staff contact data for client organisations: for the duration of the client relationship and 2 years thereafter.

Our website uses essential cookies required for the site to function. These are set by Systeme.io and cannot be disabled.

We intend to introduce Google Analytics in the future to help us understand how visitors use our site. When we do, we will update this policy and add a cookie consent banner. Google Analytics will only be activated with your consent.

We do not currently use any advertising or tracking cookies.

We use the following third party services which may process your personal data on our behalf. Each operates under their own privacy policy which we encourage you to review:

Systeme.io — website, forms and email marketing. Privacy policy: systeme.io/privacy-policy

Airtable — database platform for the Social Value Dashboard. Privacy policy: airtable.com/privacy

Softr — frontend interface used to control role-based access to the Social Value Dashboard. Processes login credentials for authorised users only. Privacy policy: https://www.softr.io/policy

Google Workspace and Google Sheets — used for certain data processing activities. Privacy policy: policies.google.com/privacy

All third party processors are contractually required to handle your data in accordance with UK GDPR.

Under UK GDPR you have the right to access the personal data we hold about you, request correction of inaccurate data, request deletion of your data, object to processing based on legitimate interests, withdraw consent at any time where processing is based on consent, and lodge a complaint with the Information Commissioner's Office at ico.org.uk or by calling 0303 123 1113.

To exercise any of these rights, contact us at info@leadwithimpact.org.uk. We will respond within one month.

In the event of a personal data breach that is likely to result in a risk to individuals, we will notify the ICO within 72 hours of becoming aware of it. Where the breach is likely to result in a high risk to individuals, we will also notify the affected individuals without undue delay.

We review this policy annually and whenever our data processing activities change significantly. The date at the top of this page shows when it was last updated.