Last updated: September 2026
IMPACT CIC Ltd (“IMPACT”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal information.
This Privacy Notice explains how we collect, use, store and protect personal information when you use our website, contact us, apply for PACT training or membership, attend our events, communicate with us, or otherwise engage with IMPACT.
This notice applies to personal information processed by IMPACT CIC Ltd as a data controller.
IMPACT CIC Ltd is a Community Interest Company responsible for the delivery and development of PACT (Paediatric Autism Communication Therapy) in the UK.
For the purposes of UK data protection law, IMPACT CIC Ltd is the data controller for the personal information described in this Privacy Notice.
Registered office:
First Floor
Flynn House
32 Woodford Road
Bramhall
Stockport
SK7 1PA
Contact email:
info@pacttraining.co.uk
If you have any questions about how we use your personal information, please contact us using the details above.
The information we collect depends on how you interact with us.
This may include:
Where relevant, we may hold information about:
When you use our website, we may collect certain technical information, such as:
The use of cookies is subject to our cookie settings and any separate cookie information provided on our website.
We use personal information for purposes including:
We use information to:
We may use information to:
Where we use information for evaluation, research or reporting, we will take appropriate steps to avoid identifying individuals where this is not necessary.
We use your contact details to send information necessary to administer your relationship with IMPACT, such as:
Where we send direct marketing communications, we will provide appropriate opportunities to opt out.
PACT members may choose to be included in the PACT Professional Directory.
Directory inclusion is optional and is separate from agreeing to this Privacy Notice.
If you choose to be included, information such as your name, professional role, location, professional biography, PACT experience, specialisms and professional contact details may be displayed publicly on the PACT website.
You can request changes to or removal of your directory information at any time.
Because directory information is intended to be publicly accessible, you should only provide information that you are comfortable making public.
Under UK data protection law, we must have a lawful basis for processing personal information.
Depending on the circumstances, we may rely on the following lawful bases.
We may process your information where it is necessary to provide a service or fulfil an agreement with you.
For example, this may include:
We may process personal information where this is necessary to comply with a legal or regulatory obligation.
For example, this may include maintaining appropriate financial and accounting records.
We may process personal information where this is necessary for our legitimate interests, provided that those interests are not overridden by your rights and interests.
This may include:
Where we rely on legitimate interests, we consider the potential impact on individuals and their rights.
In some circumstances, we may rely on your consent.
For example, this may apply where you:
Where we rely on consent, you can withdraw it at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before consent was withdrawn.
When you make a payment to IMPACT, payment information may be processed by our payment service providers.
For example, membership payments made through our website may be processed through Stripe.
We do not need to receive or store your full payment card details ourselves where these are processed securely by the relevant payment provider.
Payment providers may process information in accordance with their own privacy notices and terms.
For NHS or organisational invoices, we may collect information such as organisation name, invoice contact details and purchase order information where required to process the invoice.
We do not sell your personal information.
We may share personal information with trusted organisations and service providers where this is necessary to operate IMPACT and provide our services.
Depending on the circumstances, these may include:
We only share information where there is an appropriate reason and, where required, appropriate contractual and data protection arrangements are in place.
We use a number of third-party services to operate our website, membership, training and communications.
These may include services such as:
The services we use may change over time. Where a provider processes personal information on our behalf, we will take appropriate steps to ensure that the processing is carried out in accordance with applicable data protection requirements.
Some of the service providers we use may process personal information outside the UK.
Where personal information is transferred outside the UK, we will take appropriate steps to ensure that the transfer is lawful and that appropriate safeguards are in place in accordance with applicable data protection law.
The safeguards used may include UK adequacy regulations, appropriate contractual safeguards or other lawful transfer mechanisms.
We keep personal information only for as long as we reasonably need it for the purposes for which it was collected, including to meet legal, accounting, regulatory or reporting requirements.
Different types of information may need to be retained for different periods.
For example:
When information is no longer required, we will securely delete it or anonymise it where appropriate.
[IMPACT should insert or confirm its specific retention periods or retention criteria before publishing this notice.]
Depending on the circumstances and the lawful basis we rely on, you may have rights under UK data protection law including:
You can ask for a copy of the personal information we hold about you.
You can ask us to correct information that is inaccurate or incomplete.
In certain circumstances, you can ask us to delete your personal information.
This right is not absolute. We may need to retain certain information where we have a legal or legitimate reason to do so.
In certain circumstances, you can ask us to restrict how we use your personal information.
You may have the right to object to certain processing, including processing based on legitimate interests and, in particular circumstances, direct marketing.
Where applicable, you may have the right to receive certain personal information you have provided to us in a structured, commonly used and machine-readable format or ask us to transfer it to another organisation.
Where we rely on your consent, you can withdraw that consent at any time.
For example, you can ask us to remove your profile from the PACT Professional Directory if you no longer wish to be listed.
Withdrawing consent does not affect processing that took place before the withdrawal.
If you wish to exercise any of your data protection rights, please contact us at:
info@pacttraining.co.uk
Please provide enough information for us to identify you and understand your request.
We may need to verify your identity before responding to a request.
We will normally respond to a valid request without undue delay and within the timeframe required by applicable data protection law.
We may contact professionals about PACT courses, events, membership, webinars and other relevant IMPACT activities where we have a lawful basis to do so.
Where consent is required, we will ask for it.
You can unsubscribe from marketing communications at any time by using the unsubscribe option provided in the communication or by contacting us.
Please note that opting out of marketing communications will not stop essential administrative or service-related communications, such as information about an existing membership, course booking or event registration.
We may invite delegates, members and other professionals to provide feedback about PACT training, membership, events or other activities.
Participation in optional feedback activities will be explained at the time.
Where we wish to use an individual's identifiable comments, photograph, video, professional profile or testimonial publicly for promotional purposes, we will seek any consent that is required.
We may use anonymised or aggregated feedback for evaluation, reporting, service development and social-impact purposes where individuals cannot reasonably be identified.
PACT operates in a professional field involving children and families.
IMPACT may receive information relating to children or family members in the course of training, professional discussions, evaluation or other activities.
Where such information is provided to us, professionals must ensure that they have an appropriate lawful basis and are authorised to share the information with IMPACT.
We ask professionals not to provide identifiable information about children or families unless it is genuinely necessary for the purpose and appropriate safeguards are in place.
Where information relating to children or families is received, we will handle it in accordance with applicable data protection requirements.
We take reasonable technical and organisational measures to protect personal information against:
Access to personal information is limited to people and service providers who need it for legitimate purposes.
However, no online system or method of transmitting information can be guaranteed to be completely secure.
Our website may use cookies and similar technologies to make the website function, understand how visitors use it and, where applicable, support website functionality or communications.
Where required, we will ask for consent before placing non-essential cookies on your device.
Further information about cookies and how you can manage your preferences will be provided through our website's cookie settings or cookie information.
We do not currently make decisions about individuals based solely on automated processing, including profiling, that produce legal or similarly significant effects.
If this changes, we will update this Privacy Notice and provide the information required by applicable data protection law.
We may update this Privacy Notice from time to time to reflect:
The latest version will be published on our website.
We recommend checking this page periodically for the latest version.
If you have concerns about how we have used your personal information, please contact us first so that we can investigate and try to resolve your concern.
IMPACT CIC Ltd
First Floor
Flynn House
32 Woodford Road
Bramhall
Stockport
SK7 1PA
Email: info@pacttraining.co.uk
You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO).
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113
You can find information about making a complaint on the ICO website.
If you have any questions about this Privacy Notice or how IMPACT CIC uses your personal information, please contact:
IMPACT CIC Ltd
First Floor
Flynn House
32 Woodford Road
Bramhall
Stockport
SK7 1PA
Email: info@pacttraining.co.uk
Privacy Notice version: 1.0
Effective from: September 2026
Last reviewed: September 2026