Privacy Policy

Last updated: 21 October 2026

Initiative for Flourishing ("IF", "we", "us" or "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains what personal information we collect, why we collect it, how we use it, how we protect it and the rights you have in relation to your personal information.

1. Who we are

Initiative for Flourishing (IF) is responsible for the personal information collected through this website.

Website: if-leadership.org

Email: info@if-leadership.org

Data Controller: Andy Wolfe

Address: 21 Calstock Road, Nottingham, NG5 4FH

Where IF operates through a registered company, charity, CIC or another legal entity, that legal entity should be identified as the Data Controller and this policy updated accordingly.

2. Information we collect

Depending on how you interact with us, we may collect:

• First name

• Last name

• Email address

• Telephone or contact number

• Organisation or company

• Preferred method of contact

• Information contained in an enquiry or message you send to us

• Information supplied when you express an interest in IF programmes, events, partnerships or activities

• Other information that you voluntarily provide to us

• Technical information relating to your use of our website, where applicable

We aim to collect only information that is reasonably necessary for the purpose for which it is being collected.

3. How we collect your information

We may collect personal information when you:

• complete a contact or enquiry form on our website;

• contact us by email or telephone;

• communicate with us through our social media channels or other communication channels;

• express an interest in IF programmes, events, partnerships or activities; or

• use our website.

We may also receive personal information from other sources where this is lawful and appropriate.

4. How we use your information

We may use your personal information to:

• respond to enquiries and requests;

• communicate with you about IF and its activities;

• provide information you have requested;

• discuss potential programmes, partnerships or opportunities;

• organise meetings, events and activities;

• manage our relationships with individuals and organisations;

• improve our website, communications and services;

• maintain appropriate administrative and business records;

• maintain the security of our website and systems; and

• comply with legal and regulatory obligations.

We will not use your personal information for purposes that are incompatible with the purpose for which it was collected unless permitted or required by law.

5. Our lawful basis for using your information

UK data protection law requires us to have a lawful basis for processing personal information. Depending on the circumstances, we may rely on the following lawful bases:

Legitimate interests — We may process information where this is necessary for our legitimate interests, such as responding to enquiries, managing relationships, developing IF's activities and communicating appropriately with people who have expressed an interest in IF. We will only rely on this basis where our legitimate interests are not overridden by your rights and interests.

Steps at your request — Where you contact us and ask us to provide information or take steps before entering into an arrangement, we may process your information where this is necessary to respond to your request.

Legal obligation — We may process personal information where this is necessary to comply with a legal or regulatory obligation.

Consent — Where we specifically ask for your consent to use your personal information for a particular purpose, we will make this clear at the time we collect the information. Where we rely on consent, you may withdraw your consent at any time.

6. UK GDPR and data protection

IF handles personal information in accordance with applicable UK data protection law, including the UK GDPR and the Data Protection Act 2018, as amended from time to time.

We apply the core data protection principles of lawfulness, fairness and transparency; purpose limitation; data minimisation; accuracy; storage limitation; security; and accountability.

We will only collect and use personal information for clear and legitimate purposes and will seek to ensure that the information we hold is relevant, accurate and not kept for longer than reasonably necessary.

We will provide clear privacy information about how personal information is used and will respect the rights available to individuals under applicable data protection law.

Where we use another organisation to process personal information on our behalf, we will take appropriate steps to ensure that the arrangement and handling of personal information meet applicable data protection requirements.

If we become aware of a personal data breach, we will assess and respond to it in accordance with applicable data protection requirements, including any requirement to notify the Information Commissioner's Office or affected individuals.

Nothing in this section limits any rights you have under applicable data protection law.

7. Enquiries and communications

When you submit an enquiry through the IF website, the information you provide will be used to respond to your enquiry and, where appropriate, manage the resulting communication or relationship.

We may retain information relating to enquiries for appropriate administrative and record-keeping purposes.

Submitting an enquiry does not automatically mean that you have agreed to receive marketing communications from us.

8. Sharing your information

We may share personal information with trusted service providers who help us operate our website, communications and organisation.

These may include providers of:

• website hosting and technical services;

• email and communication services;

• website analytics;

• website security services; and

• other technology or professional services necessary to operate IF.

Where third parties process personal information on our behalf, we will take appropriate steps to ensure that your information is handled securely and in accordance with applicable data protection requirements.

We may also disclose personal information where required by law or where necessary to protect our rights, users or organisation.

9. International transfers

Some of the service providers we use may process personal information outside the UK.

Where personal information is transferred outside the UK, we will take appropriate steps to ensure that the transfer is lawful and that appropriate safeguards are in place in accordance with applicable UK data protection law.

10. How long we keep your information

We will retain personal information only for as long as reasonably necessary for the purposes for which it was collected. For example, information relating to an enquiry may be retained for as long as necessary to respond to the enquiry and manage any resulting relationship, together with a reasonable period afterwards for administrative and record-keeping purposes.

We may retain information for longer where required by law or where necessary to establish, exercise or defend legal claims.

We periodically review the information we hold and securely delete or anonymise information that is no longer required.

11. Keeping your information secure

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

However, no transmission of information over the internet or electronic storage system can be guaranteed to be completely secure.

12. Cookies and similar technologies

Our website may use cookies and similar technologies.

Some cookies may be necessary for the website to operate properly. Other cookies may be used for purposes such as analytics, preferences or embedded content. Where consent is required for non-essential cookies or similar technologies, we will ask for your consent before using them.

You can manage your cookie preferences through the cookie controls provided on the website.

13. Direct marketing

If we send direct marketing by email, text message or other electronic communication, we will do so in accordance with applicable data protection and electronic communications laws.

Where consent is required, we will ask for it separately and clearly.

You may opt out of marketing communications or withdraw your consent at any time.

Submitting an enquiry to IF does not, by itself, constitute consent to receive marketing communications.

14. Your data protection rights

Depending on the circumstances, you have rights under UK data protection law, including the right to:

• request access to the personal information we hold about you;

• request correction of inaccurate or incomplete information;

• request deletion of your information in certain circumstances;

• request restriction of processing in certain circumstances;

• object to certain types of processing;

• request transfer of your information in certain circumstances; and

• withdraw consent where we rely on consent as our lawful basis.

These rights are subject to certain legal exceptions and limitations. To exercise your rights, please contact: info@if-leadership.org

15. How to complain

If you have concerns about how we use your personal information, please contact us first so that we can try to resolve your concerns. You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO).

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our activities, technology, legal requirements or the way we process personal information.

The latest version will be made available on this website, with the date of the latest update shown at the beginning of the policy. We will review this Privacy Policy regularly and update it where necessary.