Privacy notice

TPXimpact and your privacy

TPXimpact is a public limited company. Our vision is to deliver impactful, sustainable, digital transformation to enrich how individuals and society experience the world. As part of delivering this we inevitably collect and process some personal data through our website and associated digital platforms such as social media.

As a company, we apply human-centred design processes to everything we do. This means putting people first, understanding their needs and respecting their rights. This includes respecting their rights to data protection, as protected in law.

We’ll always conduct our work with the privacy of individuals in mind. This means collecting as little personal data as possible, storing it securely and being clear about how we’ll use that data.

This page details the data TPXimpact may collect about you and how we use it. It also includes information relating to third parties we may use to store and process your data.

Covered in this policy is:

  • the information we collect through our website
  • the information we collect through our contact form
  • the information we collect through our marketing activities
  • potential and existing client data
  • the information we collect through our recruitment
  • your data and rights


Information we collect through our website

Why do we collect website data?

Collecting website data allows us to see how people are using our site. With this information, we can continually improve your experience.

What data do we collect on our website?

Using Google Analytics, Google Tag Manager and Hubspot, we collect the following information about users to our website:

  • IP address
  • timestamp of visit
  • country of visit
  • referrer
  • operating system
  • browser
  • pages visited during session

How long do we keep website data?

We store the data we collect indefinitely so we can see how the use of our website changes over time. Our focus for having this information is always on how we can improve the user experience.


Information we collect through our website contact form

We use the your details submitted through our contact form to communicate with you about services that might be relevant to you. We may also inform you of new offers, products and services which may be of interest to you. We’ll never sell your email address or other details without your permission, and all communications from us will contain a clear "unsubscribe" option.

Services we use to process data

Below is a list of third-party services we use to store and process your data across our website and products, a description of how we use them and links to the privacy policies of these parties. We’ve regularly reviewed these services and contracts to make sure these companies are fully compliant with GDPR.

  • WPEngine / Webflow are cloud hosting providers we use for our website
  • Hubspot collects information about your browsing session e.g. timestamp, pageview count, and only collects personally identifiable information if you fill out a form (Privacy policy)
  • Google Analytics collects and analyses website data across all of our sites (Privacy Policy)


Information we collect through marketing activities

If you sign up to one of our events or newsletters

TPXimpact operates email newsletters. These are used to update partners, clients and investors of important company news, events and updates about our products and services, as well as project highlights. The subscriber data is only used for the purposes of operating these services and subscribers have the ability to unsubscribe at any time.

If anybody has given their contact information in relation to one of our events, then this information may be used to contact them in relation to this event, future events or sales purposes.

Use of social media

We use several social media accounts to share our work. We occasionally use the analytics tools provided by these platforms to understand how we can use these services better. Our social media accounts include:


Potential and existing client data

We may collect the following information about our potential and existing clients:

  • name
  • company
  • email address
  • phone number
  • job title
  • company address
  • testimonials

Why do we collect this data?

We use the data we collect to help us create, nurture and manage our client relationships. Testimonials may be used on our website for promotional purposes.

We use the following services to store and process this data:


Information we collect through recruitment

We collect the following information about people who apply to work at TPXimpact, whether for a permanent position, apprenticeship, internship or contractual position.

  • full name
  • CV and supporting information
  • email address
  • covering letter
  • phone number
  • recruitment platform profile
  • notes from interviews
  • portfolio of work

We don’t collect any special category data or ask for any background checks as part of the application process. (As an employee, you may need to complete a DBS or background check as part of your project work.)

Why do we collect recruitment data?

Recruitment data is used to assess suitability for a role and communicate with candidates.

How long do we keep recruitment data?

Recruitment data is deleted when a candidate leaves the recruitment process, is offered a job, or their application is unsuccessful.

Where is the recruitment data processed and stored?

We use several platforms to help us find people to join our team. At the moment, these include:

If you want to exercise your rights on a particular service, please refer to its privacy policy for more information.

We store CVs on Google Drive. Only team members involved in the recruitment process have access to recruitment platform accounts, CVs and emails.

How do we keep your data safe?

All the forms we use, including those on third-party sites, make use of SSL encryption. We also make sure that your personal data is only accessible by appropriately trained staff.

Not all the personal data we hold is stored on our own servers. For example, our email marketing software runs on an AWS environment in the European Union.

If required to do so, we may have to share your personal information with the police, regulatory bodies or legal advisors. In any other circumstances, we’ll only share your data with third-parties if we have your explicit and informed consent.


Your data and your rights

When collecting and storing your personal data, TPXimpact will adhere to your rights as outlined by the GDPR to access, rectify and/or remove your data entirely. Upon request, we’ll respond within 30 days:

  • providing confirmation as to whether or not your personal data is being processed, by us and any third-party tools
  • send you your personal data in a structured and machine-readable format to you and/or another service that you have instructed us to transfer the data to
  • update and rectify any inaccurate personal data as requested
  • erase all your personal data from our systems and our third-party processing tools


To update your details and marketing preferences, email data.protection@tpximpact.com or write to us at TPXimpact Holdings PLC, 7 Savoy Court, London, WC2R 0EX.

To receive a copy of your personal information, please send an email to data.protection@tpximpact.co.uk. You will have to provide proof of identification.

What if our policies change?

We’ve appointed an internal Data Protection Lead. They’re responsible for keeping this policy up to date and for helping us make sure we follow these practices in our everyday work.

You will always be able to access this page via our website, and at the bottom of any TPXimpact forms you complete.

If you have any questions or want to exercise your rights as stated above, then please write to us at data.protection@tpximpact.com.