Privacy

We collect the details you type into our forms so we can reply to you, plus privacy-preserving analytics that tell us which pages get read. We don't use advertising trackers, we don't sell or share your information, and we don't set any cookies on your browser. Ask us to delete your data and we will.

When you fill in our contact form, we receive your name, email address, and message, plus the optional company, service, and budget fields. We store that submission and email it to ourselves so we can respond. Where we publish a standalone form, it collects the fields shown on that form and nothing else.

Downloading our impact report asks for your name and email address first. We keep that alongside our other enquiries so we know who has read the evidence, and we may write to you when the next report is published. It does not add you to a mailing list.

We use this only to reply to you and to keep a record of the conversation. It is never sold, rented, or used for advertising.

Our mailing list is double opt-in: after you enter your address we email you a confirmation link, and you receive nothing until you click it. Every email includes a one-click unsubscribe link that works immediately and permanently.

So we can tell whether our emails are actually useful, we record whether a message was delivered, opened, and whether its links were clicked. If an address hard-bounces or someone marks a message as spam, we suppress it automatically and never mail it again.

We count page views ourselves rather than handing your browsing to a third-party analytics company. For each view we record the page path, the site that referred you (the domain only, never the full URL), an approximate country and city derived from your connection, and your device type, browser, and operating system. We never record query-string parameters.

To count returning visitors without identifying anyone, we combine your IP address, browser identifier, the current date, and a private key into a one-way hash. Your IP address itself is never stored, the hash cannot be reversed back into one, and because the date is part of it, the value changes every day — so it can't follow you from one day to the next.

We set no cookies on visitors' browsers and our analytics are cookieless. The only cookie this site issues is the sign-in session for our own staff area, which visitors never receive.

Some parts of the site remember small preferences in your own browser's local storage — your light or dark theme choice, which notices you've dismissed, and which polls you've already answered. That information stays on your device, is never sent to us, and clearing your browser data removes it.

We keep the list of companies that touch your data as short as we can. Today it is: Netlify (hosting and content delivery), Supabase (the database that stores submissions), Resend (sending and delivering our email), and Upstash (a short-lived record of request counts per IP address, used purely to block spam floods). Each of these processes data on our behalf under their own agreements — none of them receive your information for their own marketing.

If we've enabled anti-spam verification on our forms, that check is performed by Cloudflare Turnstile, which is designed to confirm you're human without profiling you.

Form submissions and email records are kept for as long as they remain useful for the relationship they belong to — typically the life of an enquiry or a client engagement — and we remove them when they no longer serve that purpose or when you ask. Analytics records are only useful in aggregate and are held for rolling reporting windows rather than tied to any individual. The abuse-prevention counters expire within minutes or hours by design.

You can ask us what we hold about you, ask for a copy, ask us to correct it, or ask us to delete it — email connected2impact@gmail.com and we'll action it. You don't need an account or a specific legal basis to ask, and we won't make it difficult. To stop receiving email updates, use the unsubscribe link at the bottom of any of them — no need to contact us at all.

Everything is served over HTTPS, our forms are protected against automated abuse, and the database holding submissions is reachable only by our own server — never directly from a browser. No system is perfect, so if you believe you've found a security problem with this site, please tell us at connected2impact@gmail.com and we'll look into it promptly.

ConnectED runs workshops with secondary school students, most of whom are under 18. That makes this section the most important one on the page, so it says exactly what we do.

We do not collect personal information from students through this website. No student is asked to fill in a form here. Everything on this site is addressed to schools, teachers, parents, funders and volunteers.

Evaluation data is reported by teachers, not students. Our impact measurement asks teachers to rate the capabilities they observe in a class. We receive those ratings in aggregate. We do not hold assessment records against named students.

Photographs. Media consent at school level is part of what a school agrees to before a workshop. Where a photograph shows an identifiable student, we publish it only where that consent covers it. Where consent is unclear, we use frames that do not identify anyone — wide shots, over the shoulder, or hands and materials rather than faces.

Volunteers. Names, photographs and social handles appear on our volunteer wall only for volunteers who have agreed to be listed, and any volunteer can ask to be removed at any time.

If you are a parent, guardian, teacher or school leader and you want a photograph taken down, email us and we will remove it. We will not ask you to justify the request.

If we change what we collect or who processes it, we'll update this page and the date at the top. Material changes to how we use information you've already given us will be communicated directly where we can reach you.