Privacy Policy

ImpactReady values your privacy and the protection of your personal data. This privacy policy sets out what information we collect from you, how we collect it, how we use it, how we obtain your consent and how long we keep it, and , if necessary, who we share it with.

By using this website www.impactready.co and purchasing a Service Package to use the ImpactReady Software, you are accepting the terms of this Privacy Policy.

General Information

ImpactReady is owned and operated by Sector 3 Solutions Ltd, a limited company registered in Northern Ireland under company number NI632560. Sector 3 Solutions Ltd address is Unit Hf6, Howard Building, Twin Spires Centre, Belfast, Antrim, Northern Ireland, BT13 2JF.

The personal data of Customers that is collected and processed via the website www.impactready.co will be under the responsibility of Sector 3 Solutions Ltd.

Types of Information gathered

The information we collect from our Customers helps to personalize and improve the Customer/Users experience on the website.

What data do we collect?

We collect the following personal data from you in relation to our ImpactReady Software:

• Name;

• Contact number;

• Email address;

• Company/Organisation name;

• Bank details;

• Your subscription history (service package details, start and end date, renewal date).

We collect this information from you directly upon you inquiring about the ImpactReady Software, requesting a demo of the ImpactReady Software or on signing up to a Service Package to use the ImpactReady Software.

We also receive a copy of some of this information from transaction confirmation from Go Cardless or Stripe when you purchase a Service Package.

We do not monitor your use of the Internet, but we do use cookies and similar technologies, including web analytics, to track user input on the ImpactReady Software and security reasons. This information is not stored alongside your personal data and will only be used on an anonymous, aggregated basis.

We may collect, use and share aggregated data and statistical data. This may be derived from personal data but is not considered personal data as this data does not directly or indirectly reveal any identity. The data may be used to calculate Social Return On Investment (SROI).

What do we use your data for?

We collect and use your personal data for the following purposes:



• Providing information on our Services and the ImpactReady Software;

• Providing and managing your Customer Account and Service Package;

• Providing support to the Customer and through onboarding sessions and our customer support help desk;

• To fulfil our legal and regulatory obligations;

• Communicating and managing our relationship with you. This may include responding to emails or calls from you.

Our processing of your personal data is in our legitimate interests and is necessary to provide the Service Package to you and to continually improve it and the content available through it.

Our use of your personal data is limited to that which is reasonably required in order to provide our Service to you and to make improvements to that service which benefit both us and you. We do not use your personal data for any reasons not stated in this Privacy Policy and never use it in an excessive manner that is disproportionate to our aims of providing and improving our service or in a way that is contrary to your interests.

In addition, when you purchase a Service Package from us, your personal data is necessary for the formation (and subsequent performance) of the contract between you and us.

What cookies do we use?

This website uses cookies. We use cookies to make our website easier to use, to deliver personalised content and to better tailor our products, services and offers to your interests and needs. We also use cookies to help speed up your future activities and your experience of our website.

Cookies are small text files that can be used by websites to make a user's experience more efficient. The law states that we can store cookies on your device if they are strictly necessary for the operation of this site. For all other types of cookies we need your permission.

We use the following cookies and related technologies for the following purposes:

Name of Cookie	Type of Cookie	Purpose	Duration
AspNetCore.Identity.Application	First party cookie (session)	Used to track user input when submitting forms within the ImpactReady Software.	Session
AspNetCore.Antiforgery.fOC0lwosiuY	First party cookie (session)	Used within the ImpactReady security framework to mitigate malicious cross-site forgery.	Session
AspNetCore.Antiforgery.fWYxhRAZ1Rs	First party cookie (session)	Used within the ImpactReady security framework to mitigate malicious cross-site forgery.	Session
Google Analytics - _ga, _gid, _utma, _utmb, _utmc, _utmz	Third party cookie (persistent)	These cookies are used to collect information about how visitors use our site. We use the information to compile reports and to help us improve the site. The cookies collect information in an anonymous form, including the number of visitors to the site, where visitors have come to the site from and the pages they visited.	years

Cookie consent and control

Before Cookies are placed on your computer or device, you will be shown a pop-up requesting your consent to set those Cookies. By giving your consent to the placing of Cookies you are enabling Us to provide the best possible experience and service to you. You may, if you wish, deny consent to the placing of Cookies unless those Cookies are strictly necessary; however certain features of our website may not function fully or as intended.

In addition to the controls that we provide, you can choose to enable or disable Cookies in your internet browser. Most internet browsers also enable you to choose whether you wish to disable all Cookies or only third party Cookies. By default, most internet browsers accept Cookies but this can be changed.

How long we keep your personal data and why

We will only keep your personal information for as long as we need to. This period will depend on a number of reasons, but it is primarily for as long as you retain a Customer Account for the ImpactReady Software.

Sometimes we must also keep your information by law, to deal with a regulator or where required by our insurers. We delete your personal information at your request where possible and we won’t keep it for longer than we should or need to for the provision of a service and for communicating with you. We will keep your personal information during the period that you are a client of ours and then for as long as is necessary in connection with both our and your legal rights and obligations. This may mean that we keep some types of personal information for longer than others.

We also retain records of subscriptions and transactions for accounting purposes. Personal data contained within emails sent to us will be retained for as long as we reasonably require it. Questions relating to our content along with our answers to those questions may be retained unless you ask us not to in order to facilitate answering similar queries in the future, whether from you or from others. We also retain certain communications to aid in the conduct of potential future legal claims.

How and where do we store or transfer your personal data?

Our cloud based service is hosted and backed up on Amazon WS EU West and is located in Dublin, within the European Economic Area (the “EEA”). This means that your personal data will be fully protected under the EU GDPR and/or to equivalent standards by law.

Transfer and Sharing of personal data

We will only store or transfer personal data in or to countries that are deemed to provide an adequate level of protection for personal data. For further information about adequacy decisions and adequacy regulations, please refer to the Information Commissioner’s Office.

Personal data security is essential to us, and to protect personal data, we take the following measures:

· limiting access to your personal data to those employees, agents, contractors, and other third parties with a legitimate need to know and ensuring that they are subject to duties of confidentiality;

· procedures for dealing with data breaches (the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, your personal data) including notifying you and/or the Information Commissioner’s Office where we are legally required to do so.

Who do we share your personal data with

We share your personal data with selected third parties exclusively to provide services to you, only with the following parties for the following purposes:

• We contract with the following third party for hosting and data storage purposes of our website: Amazon web services, located in Dublin.

• In some limited circumstances, we may be legally required to share certain personal data, which might include yours, if we are involved in legal proceedings or complying with legal obligations, a court order, or the instructions of a government authority.

• If we decide to reorganise or sell all or most of our business, your personal information may be transferred to the buyer of the business, but we will never sell your personal information to third parties for them to market their products to you.

If any of your personal data is transferred to a third party, as described above, we will take steps to ensure that your personal data is handled safely, securely, and in accordance with your rights, our obligations, and the third party’s obligations under the law, as described above.

Email marketing

Our use of your personal data may include occasional email marketing about all of S3 Solutions Ltd’s services.

You have the option to opt out of any specific email marketing types by emailing the ImpactReady support team. Unsubscribing from all communications may result in the Customer missing out on important updates from our business. These updates may include crucial information about product status, pricing and contractual updates that could impact your experience with us.



Your rights and how to use them

You have the right to find out about how and why we use your personal information and to control its use. These include rights to access and correct your details, in some cases to ask us to limit or stop our use of them and even to delete them. Where we use your personal information based on your consent, you have the right to change your mind.

1. Right of access - You are entitled to have access to your personal information and specific information about its use by us (this is more commonly known as submitting a “data subject access request”). You should specify the type of information you would like to see to ensure that our disclosure is meeting your expectations.

2. Rights in relation to inaccurate personal or incomplete data - You may challenge the accuracy or completeness of your personal information and have it corrected or add details to make it complete. You must inform us of changes to your personal information. Please notify us of any changes as soon as they occur, including changes to your contact details. Where available, please use any self-help tools to correct the personal information we use about you. When exercising this right, please be as specific as possible.

3. Right to object to our use of your personal information - You have the right to object to our use of your personal information. This general right applies where our use of your personal information is needed based on legitimate interests and there is something about your particular situation which makes you want to object to processing on this ground. We will then consider your request.

4. Right to object to direct marketing - You can change your mind about direct marketing at any time. This may mean changing your mind about our app, or receiving our emails, or all direct marketing. Click unsubscribe at the bottom of any email.

5. Right to restrict our use of your personal information - You are entitled to limit our use of your personal information for so long as we are considering any request you have made for us to correct or complete your personal information, or to consider an objection you have made to our use of it based on legitimate interests. You can also request us to limit our use permanently in some cases. The temporary restriction on our use will end when we have dealt with your request for correction or completion of your personal information or we have made a decision on further use following your objection. If we agree that we should stop that use of your personal information, or in limited other cases, the limitation will become permanent. The impact of the restriction is limited to personal information affected by the request/use.

6. Right to erasure - You are entitled to have your personal information deleted or destroyed, such as where your personal information is no longer needed for its intended use. We may not always be able to erase your personal information completely, such as were we still need it to comply with a legal obligation, or to deal with legal claims.

7. Right to withdrawal of consent - Where our processing of your personal information is based on your consent, you have the right to withdraw your consent at any time. If you withdraw your consent, this will only affect future use of that personal information.

8. Right to data portability - You are entitled to receive the personal information which you have provided to us and which is used by us in a commonly used format to help make it readily re-usable. This right only applies where we are using the personal information you have provided based on your consent or on our contract with you.

It is important that your personal data is kept accurate and up-to-date. If any of the personal data we hold about you changes, please keep us informed for as long as we have that data.

You can get in touch about your rights in relation to the data we hold by emailing: [email protected].

You have the right to make a complaint at any time to the Information Commissioners Officer.

How can you access your Personal Data?

If you want to know what personal data we have about you, you can ask us for details of that personal data and for a copy of it (where any such personal data is held). This is known as a “data subject access request”.

All data subject access requests should be made in writing and sent to the email address: [email protected] or our office address below, clearly marking it as a subject access request.

There is not normally any charge for a subject access request. If your request is ‘manifestly unfounded or excessive’ (for example, if you make repetitive requests) a fee may be charged to cover our administrative costs in responding.

We will respond to your subject access request within one month of receiving it. Normally, we aim to provide a complete response, including a copy of your personal data within that time. In some cases, however, particularly if your request is more complex, more time may be required up to a maximum of three months from the date we receive your request. You will be kept fully informed of our progress.

Third party links

Our website may contain links to other websites. Please note that we have no control over how your data is collected, stored, or used by other websites and we advise you to check the privacy policies of any such websites before providing any data to them.

We use the following payment processors:

• Go cardless: you can view their privacy policy here: Privacy Centre | GoCardless

• Stripe: you can view their privacy policy here: Privacy Policy (stripe.com)

How to contact us

To contact us about anything to do with your personal data and data protection, including to make a subject access request, please contact us at:

Email address: [email protected]

Telephone number: 02890 480 005

Postal Address: Unit Hf6, Howard Building, Twin Spires Centre, Belfast, Antrim, Northern Ireland, BT13 2JF.

Changes to this Privacy Policy

We may change this Privacy Policy including the Cookies we use, from time to time. This may be necessary, for example, if the law changes, or if we change our business in a way that affects personal data protection.

Any changes will be immediately posted on our website and you will be deemed to have accepted the terms of the Privacy Policy on your first use of our website following the alterations. We recommend that you check this page regularly to keep up-to-date.