Legal Information

By accessing the Website you agree to the General Terms on behalf of yourself as a user and, as the case may be, on behalf of the organisation that you represent.


In these Terms and Conditions, “we” or “us” refers to “Investors in People” (trading name for Investors in People Community Interest Company, company registration 10420361), operating under the owned and registered trademark by the same name “Investors in People” (UK00002326735). Our “Sites” or “Digital Services” are defined in our privacy policy “You” refers to the user of a “Digital Service” and “Sites” provided by “Investors in People” as defined in the Privacy Policy. “You” might be an individual interested in Investors in People, a licensed delivery partner or a licensed practitioner acting on behalf of a licensed delivery partner. “Your Users” and “End Users” refers to any authorised third parties “You” are providing information, data or access to via the “Sites”. These “Third Parties” might include practitioners, clients or contractors. It is advised that you download these terms, print them, and keep them safe for review.


You may browse the Site without registering but in doing so you accept and agree that certain areas of the Site (for example, if you wish to download or access diagnostic tools posted on the Site from time to time) will not be available to you unless you register with the Site. You will be asked if you wish to register each time you try to access any part of the Site that requires registration. To register to the Site you will be asked to provide certain information about yourself; this is more particularly set out below.


We, in our sole discretion, will have the right to refuse to allow you to register to the Site. We will have the right to carry out checks that we, in our sole discretion, deem appropriate to confirm your suitability for registration of the Site. We reserve the right to suspend any user’s access without reason, suspend the service, and block any IP addresses, in the interests of protecting the data held within the system and the provision of services to other users.


When you register with the Site you will create an account (“My Account”). This account is unique to you. The “My Account” section of the Site is where you can update, correct or delete your personal information as appropriate. If you are a licensed practitioner or delivery centre you will also be able to perform administrative functions via this “My Account” page. Should you wish to change your personal details, or wish us to cease marketing to you, you should go to “My Account” or contact


Any personal data, information about third parties or survey responses, you transmit to us by electronic mail or otherwise will be used by us in accordance with our Privacy Policy and you accept our Privacy Policy which is available for viewing here. By submitting information via the site you represent and warrant that permission to access and use this information has been gained via appropriate third parties.


YOU HERBY REPRESENT AND WARRANT: (i) you have the full power and authority to enter into and perform under these Terms, (ii) your use of the Site will not infringe the copyright, trademark, right of publicity or any other legal right of any third party, and (iii) you will comply with all applicable laws and regulations in using the Site and in engaging in all other activities arising from, relating to or connected with these Terms, and (iv) where applicable, you represent to have authority to accept these terms and conditions on behalf of the organisations for which you are employed.


In order for you to browse and/or use the Site your computer must comply with the minimum technical specifications (Two most recent versions of Internet Explorer, Chrome, Firefox and Safari). We do not accept any liability whatsoever, howsoever arising, for your inability to receive, access, play or otherwise use the Site or any content contained on the Site or available through the Site, or for any damage caused to your computer and/or associated systems, resulting from the incompatibility of your computer and/or its associated systems with the technical specifications posted on the Site.


The Site is subject to constant change. You will not be eligible for any compensation, as any user (Including but not limited to an “End User”, Licensed Delivery Partner or Practitioner) because you cannot use any part of the Site or because of a failure, suspension or withdrawal of all or part of the Site.


You agree to be fully responsible for (and fully indemnify us against) all claims, liability, damages, losses, costs and expenses (including legal fees) suffered by us and arising out of any breach of these Terms by you or any other liabilities arising out of your use of the Site, re-sale of services using the site, or the use by any other person accessing the Site using your computer or internet access account.


We have the right, but not the obligation, to monitor any activity associated with the Site. We may investigate any reported violation of these Terms or complaints and take any action that we deem appropriate (which may include, but is not limited to, issuing warnings, suspending, terminating or attaching conditions to your access and/or preventing your accessing the Site).



In order to access certain pages or functionality of the Site (including but not limited to using our diagnostic tools) you must first register with the Site using our online registration process. In doing so, you agree to (i) provide true, accurate, current and complete information about yourself as prompted by the Site’s registration process; and (ii) maintain and promptly update that information to keep it true, accurate, current and complete.


Upon registering you will be required to provide us with a valid email address, postal address and contact telephone numbers and a password. You will be asked to provide this email address and password once for each time you subsequently visit areas on the Site requiring registration. In addition, but in accordance with these Terms and our Privacy Policy, we shall use the email address you provide us with to contact you with information about the Site, your registration and your use of the Site and its contents.


You will also receive an account upon completing the Site’s registration process. You are responsible for maintaining the confidentiality of your email address, your password and your account and are fully responsible for all activities that occur under your email address, password or account. You agree to (i) immediately notify us of any unauthorised use of your email address, password or account or any other breach of security; and (ii) ensure that you exit from your account at the end of each session. We will not be liable to you or any third party for any loss or damage arising from your failure to comply with this provision.


We shall maintain and control ownership of all IP numbers and addresses that may be assigned to you by us and we reserve, in our sole discretion, the right to change or remove any and all such IP numbers and addresses.


If you were granted access to privileged information, as a licensed Delivery Partner or Practitioner, as part of your site registration by Investors in People or a licensed authority (a Delivery Centre) you will not access your account if your status changes. For example, if you cease to be an employee of an organisation holding a License to deliver Investors in People, or if you cease to be a licensed Practitioner. If we believe an individual is willfully attempting unauthorised access to privileged information only available to appointed licensees, Investors in People reserves the right to press for prosecution under criminal law, and access would constitute “hacking”.



You may not use any automatic device, program, algorithm or methodology, or any similar or equivalent manual process, to access, acquire, copy or monitor any portion of the Site or its content, or in any way reproduce or circumvent the navigational structure or presentation of the Site or its content, to obtain or attempt to obtain any materials, documents or information through any means not purposely made available through the Site.


You may not attempt to gain unauthorised access to any portion or feature of the Site, or any other systems or networks connected to the Site, or to any of the services offered on or through the Site, by hacking, password “mining” or any other illegitimate means. You may not probe, scan or test the vulnerability of the Site or any network connected to the Site, nor breach the security or authentication measures on the Site or any network connected to the Site.


You may not reverse look-up, trace or seek to trace any information on any other user of or visitor to the Site, or any other customer of ours, including any account not owned by you, to its source, or exploit the Site or any service or information made available or offered by or through the Site, in any way where the purpose is to reveal any information, including but not limited to personal identification or information, other than your own information, as provided for by the Site.


You agree not to use any device, system, software or routine to interfere or attempt to interfere with the proper working of the Site or any transaction being conducted on the Site, or with any other person’s use of the Site.


You shall not use the Site for any illegal or immoral purposes, and you will use it in compliance with all applicable laws and regulations. You agree not to use the Site in a way that may cause the Site to be interrupted, damaged, rendered less efficient or such that the effectiveness or functionality of the Site is in any way impaired.


Notwithstanding any other provisions of these Terms, you shall not (i) impersonate any person or entity or misrepresent your affiliation with a person or entity; (ii) forge headers or otherwise manipulate identifiers in order to disguise the origin of any Site user; (iii) make available, introduce into or direct to the Site any material that contains software viruses or any other computer code, files or programs designed to interrupt, destroy or limit the functionality of any computer software or hardware or telecommunications equipment; (iv) interfere with or disrupt the Site or servers or networks connected to the Site, or disobey any requirements, procedures, policies or regulations of networks connected to the Site; (v) violate any applicable local, state, national or international law, rules or regulations; (vi) “deep link” to any portion of the Site; (vii) use any robot, spider, other automatic device, or manual process to monitor or copy our web pages or the content contained thereon or for any other unauthorized purpose without our prior express written permission; (viii) take any action that imposes an unreasonable or disproportionately large load on our infrastructure; (ix) display any of the Site in a frame (or any of our content via in-line links); (x) engage in any activity that interferes with any third party’s ability to use or enjoy the Site; and/or (xi) assist any third party in engaging in any activity prohibited by these Terms.



The Investors in People website and all content contained on the Sites (“The Sites referring to all materials hosted on and and associated sub-domains and similar domains) is owned exclusively by “Investors in People Community Interest Company” T/A Investors in People. By submitting content users consent to this condition and relinquish any claim, right to, or ownership of over materials submitted. Unless otherwise excluded, all features and content, provided free and open access or on a paid for basis, on or relating to the website, cannot be replicated or used outside of the Sites.


This Site and the underlying computer code used by us to design, operate and maintain the Site and all content and material contained within or available on the Site provided by us is protected by rights of copyright, trademarks, service marks, patents, database rights, domain name rights, trade secrets and/or other proprietary intellectual property rights and laws throughout the world. Unless expressly authorised by us, you agree not to sell, license, rent, modify, distribute, copy, reproduce, transmit, publicly display, publicly perform, publish, adapt, edit or create derivative works from materials or content provided by us and made available on the Site.


Submitted and hosted “Site content” includes without limitation information and other materials, survey questions, survey responses, processes, user experience journeys, raw code, assessment questions, benchmark information, trademarks, logos, designs, illustrations, icons, graphics, photography, text, data and systems architecture, as well as the selection, assembly and arrangement of the content on the site (collectively, “Site Content”),


The Sites, in whole and in part, and all Site Content are protected by copyright, trademark, service mark, trade name and other proprietary rights, and all such rights are reserved. No Registered User, IIP Customer, Licensee, Practitioner or Anonymous User may access or use the Sites, or any portion thereof, for any purpose other than to view the Site Content and make use of the Services provided on the Sites in accordance with other licenses and agreements. Users should be aware that breach of these terms may be found to constitute material breach of Practitioner Agreements or other Licenses to deliver Investors in People services also held with Investors in People or our appointed licensees.


Users are prohibited from:

Reproducing, publishing, using third-party systems, sending, disseminating or disclosing the Site Content, or any part thereof, to any third party, unless explicitly granted in writing by Investors in People.

Removing any proprietary notices, labels, trademarks or service marks on the Site or any part thereof.


Notwithstanding the above, you may use the content and materials on the Site in the course of your normal, personal, non-commercial use of the Site.


Copyright Complaints. We respect the intellectual property of others and we have used our reasonable endeavours to obtain the consent of the copyright owners of all content and material contained within or available on the Site for such content to be placed upon the Site and made available to Site users. If you believe that we have used your copyrighted work without such consent, please contact us so that we may remedy this at



We reserve the right, without prejudice to any other rights and remedies available to us under these Terms or generally at law, to suspend or terminate your registration and/or use of the Site immediately upon being made aware of any breach or potential breach by you of these Terms. We further reserve the right at any time to suspend, modify or discontinue, temporarily or permanently, any portion of the Site with or without prior notice. You agree that we will not be liable to you or to any third party for any suspension, modification or discontinuance.





We do not warrant or represent that: (i) the Site will meet your requirements, (ii) access to the Site will be uninterrupted, timely, secure, or error-free, (iii) the results that may be obtained from the use of the Site will be accurate or reliable, (iv) the quality of any products, services, information, or other material purchased or obtained by you through the Site will meet your expectations, or that (v) any errors in any data or software will be corrected.


You expressly understand and agree that we shall not be liable for, and to the fullest extent permissible by applicable national and international law we hereby exclude or limit our liability in respect of, any direct, indirect, incidental, special, consequential or exemplary damages, including but not limited to, damages for loss of profits, goodwill, use, data or other intangible losses (even if we have been advised of the possibility of such damages), resulting from: (i) the use or the inability to use the Site; (ii) unauthorised access to or alteration of your transmissions or data; (iii) statements or conduct of any third party on the Site; or (iv) any other matter relating to the Site.


We are not responsible for the availability of any external sites or resources, and do not endorse and are not responsible or liable, directly or indirectly, for the privacy practices or the content (including misrepresentative or defamatory content) of any third party websites, including (without limitation) any advertising, products or other materials or services on or available from such websites or resources, nor for any damage, loss or offence caused or alleged to be caused by, or in connection with, the use of or reliance on any such content, goods or services available on such external sites or resources.



We may amend these Terms from time to time, and place the new version on the Site. When we do so, we will place a notice advising that the Terms have been changed. Your use of the Site from the date that the amended terms are placed on the Site onwards will be governed by those new terms. By actively accepting the new terms you represent that you have reviewed, understood and passed on the changes to any “End Users” that are currently engaged with or using “site content” with your devolved authority.


We may alter these Terms at any time and your use of the whole/any part of the Site following such change shall be deemed to be your acceptance of such change. It is your responsibility to check regularly to determine whether the Terms have been changed. If you do not agree to any change to the Terms then you must immediately stop using the Site. We will take steps to update website users of changes to the terms and conditions, such as pushing notifications into the user account window, requiring active acceptance of these terms. We will take steps to record the user acceptance of these updated terms and conditions.


These Terms shall supersede any and all other conditions, understandings, commitments, agreements or representations (except fraudulent misrepresentations) relating to your purchase or previously agreed usage, whether oral or in writing, and contain the entire agreement between us and you relating to your purchase or agreed usage. We advise that you print off and keep safe a copy of these terms and conditions at the appoint of acceptance. You are further advised to read (and are responsible for reading) all information on this website fully.


If any provision(s) of these Terms are held to be invalid or unenforceable, it/they will be struck out and the other terms remain.


These Terms are subject to the laws of England and Wales, whose courts shall be the courts of exclusive jurisdiction. If you are operating outside of the UK, trademark protections are enforced internationally, so please contact for information about conditions of use specific to your region or territory.



in the interests of security and compatibility, the Investors in People website, systems and survey tool are tested and work with the two most recent versions of the following browsers. Make sure cookies and JavaScript are turned on for the browser. Technical support and assistance will not be provided to users on any other platforms:

Google Chrome

Mozilla Firefox

Apple Safari

Microsoft Internet Explorer


Our preferred cross-platform browser, available on Mac, Linux and Windows systems is the latest version of Mozilla Firefox. Other browsers might work with the tools available, but you might not be able to use all of the features. Documents and templates produced will work with the latest Microsoft Office suite and Libre Office (Open Source alternative) formats. Mozilla Firefox is a community supported browser and is available via the Mozilla Foundation


INVESTORS IN PEOPLE and our appointed DELIVERY PARTNERS reserve the right to refuse to support to individuals using any other systems or browsers.

Published 1st February 2017

Privacy Notice

Last updated: 25/10/2019

 1. About

1.1. This policy statement is all about our commitment to protect the privacy and security of your personal information. When working with us, you may give us access to a certain amount of personal data. So, the purpose of this statement, or ‘Privacy Notice’, is to explain how we collect, use and hold your personal data.

1.2. You may have heard the term GDPR. It stands for the General Data Protection Regulation, which came into force in May 2018. We are responsible for looking after personal data and information in accordance with that regulation and all the other data protection legislation that’s currently in force.

1.3. That legislation also means that we have to give you a lot of detail on what we do, and the definitions of our role, as far as GDPR is concerned. It’s a long read, and by its very nature contains a lot of legal phrases but feel free simply to talk to us ( if you have any questions or concerns.

2. Introduction

2.1. Investors in People Community Interest Company trading as Investors in People (we, our, us) collects, uses and is responsible for certain personal information about you. When we do so we are regulated under the General Data Protection Regulation which applies across the European Union (including in the United Kingdom).

2.2. We are committed to complying with the provisions of the Data Protection Legislation and ensuring that the personal data we hold is processed fairly and lawfully. This Privacy Notice has therefore been prepared to tell you about the way we collect information from you and what we do with that information.  This Privacy Notice explains the legal basis for this and the rights you have over the way your information is used.  

2.3. This Privacy Notice explains how we collect information from organisations or individuals who use our website and applications, who attend our events, who complete one of our assessment surveys or with whom we contract for the delivery of services. It also explains how this information is then used. Please read this Privacy Notice carefully and re-visit this page from time to time to review any changes that may have been made.

2.4. For the purposes of the Data Protection Legislation we are the data controller and we will process any personal information we collect about you in accordance with the Data Protection Legislation.

2.5. If you have any questions about this statement or your personal information that we may collect from you, please contact us at

3. What personal information is collected and how is it used?

3.1 Information collected by us:

We could collect personal information in a number of ways:

  • When you complete an online registration.
  • When your organisation signs up to one of our services.
  • When you register for one of our events.
  • By the use of cookies on our website.
  • When we ask you to provide us with feedback on our products and services.
  • When you make a purchase from our shop.


3.2. Information collected from other sources:

We also obtain personal information from other sources as follows:

  • When your organisation provides your contact details to one of our Practitioners or Delivery Partners for the purposes of engaging our services or completing a survey. For further information on Delivery Partners please see section 3.
  • When you use third party websites or allow us indirectly to access your information via third party websites, if you gave prior permission to that third party.

3.3. How we, the Practitioners or Delivery Partners may use the personal information:

  • To contact you to provide any further information you or your organisation has requested.
  • To deliver products and services as per the contract with your organisation (e.g. carry out an Investors in People assessment or raising invoices).
  • To contact you to complete a survey.
  • To let you know about related products and services that may be of benefit to you or your organisation (provided you have not opted out from receiving this type of communication from us).
  • To measure and analyse behaviour when you are using our platforms or website in order to monitor, maintain and improve our services or features of those platforms.
  • To personalise or customise the user experience of people using our platforms and services.
  • To prevent or address service, security, support or technical issues.
  • To create anonymised and aggregated data for benchmarking, public relations and marketing purposes.

3.4. Reasons why collection and use of your personal information is consistent with the current data privacy directives:

The use of your information for the purposes set out above should be considered lawful because one or more of the following processes applies:

  • Where you have provided information to us for the purposes of receiving information about us, we rely on legitimate interests as the lawful basis on which we collect and use your personal data. Our legitimate interest is to provide details of our services to you. 
  • It is necessary for us to hold and use your information so that we can carry out our obligations under a contract entered into with you or your organisation or to take steps you ask us to prior to entering into a contract. We also rely on this being in our interest in delivering on our obligations to you, at your request, or that of your organisation. Our services to you may be delivered via a third party.
  • It is necessary to comply with our legal obligations.g. for the purposes of fraud prevention or through the court of law.

3.5 Undertaking an Investors in People survey:

If your organisation has contracted with us to be assessed against any of the Investors in People standards, your organisation will inform you of why they are undertaking the survey and how this will be used to inform business improvement.

In order for you to complete one of our surveys, we collect from your employer:

  • Your name and email addresses so that you can be invited to participate in the survey.
  • Other details which may include your role, department or site where you work.

As a participant, you may be asked to submit the following information when completing the survey:

  • Views about your organisation, your age, managerial level, gender, length of service.

The information provided by your organisation is the minimum needed for us to provide the contractual services which your organisation has asked us to provide.  They do this because it is in their legitimate interests as your employer to do so with the aim of improving the business for the benefit of all concerned.  This does not affect your individual rights and freedoms as you may object to this processing at any time, and:

  • Choose not to respond to the survey.
  • Object to the processing of your personal data by (a) contacting your organisation or (b) by contacting us directly at


3.5.1. How is the information collected in a Survey used?

Responses you provide as part of a survey remain anonymous and confidential to Investors in People. We retain ownership on all survey submissions, and we are the Data Controller. Submitted data is stored against the email record only for the purposes of debugging and occasionally correcting or deleting user data which has been submitted incorrectly. All data is aggregated and anonymised to remove any Personal Identifiable Information (PII) before being shared with your organisation, third parties such as Practitioners, delivery partners and other administrators. For the protection of small groups where data trends could be interpreted and linked back to individual submissions, aggregated group data is not shown until there are at least seven responses in the group in question.  Submissions via an “open account” are not linked to any PII and so can be considered anonymous.

  • Your rights regarding personal information collected for a Survey:

You have the right to:

  • Ask what personal information we are holding about you.
  • Have rectified any mistakes in your personal data.
  • Request that your personal data be removed from our systems (we will do this by anonymisation removing personal details and replacing with a random unique identifier).
  • Restrict the way in which your personal information is dealt with and used.
  • Request that your personal information is provided to you in a format that is secure and suitable for re-use.

Should you want to act upon any of these rights you may communicate your request through your organisation or directly via

4. Do we share personal data with other organisations?

All data collected is for the sole purpose of providing our services or further information. In certain geographical locations we may also allow third party delivery partners to deliver services to your organisation using our brand and methodologies.   These partners are listed in Appendix 1, and we call them our Delivery Partners. 

We (or our Delivery Partners) may also engage the services and may share your information with a third party in the following areas:

  • Contracted Practitioners to deliver our services (for example advisory or assessment services).
  • Third parties to provide services in relation to CRM hosting, administering the Investors in People survey platform, website or to prevent or address service, security, support or technical issues.

For the following services we transfer you to a third party and their privacy notice will apply to you:

  • Third-parties who manage registrations, booking and payments for events.
  • The collection, processing and management of payments for purchases in our on-line shop.

We select our third-party service providers with care. We provide these third parties with the information that is necessary to enable them to provide the services for which they are engaged.  We will take steps to ensure that they comply with their obligations under GDPR and Data Protection Legislation.

For clients/individuals within the European Economic Area (EEA) we do not share your personal data outside of the EEA.  Where clients/individuals are located outside the EEA we ensure that the information is protected by entering into a Data Sharing Agreement which contains model EU clauses. 

We may also disclose your personal information if we are required to do so under any legal obligation and may use external data for the purposes of fraud prevention and credit risk reduction, or where doing so would not infringe your rights, but is necessary and in the public interest.

Other than this, we will not share your information with other organisations without your consent.

5. Cookie Policy

When you visit our website, we may collect using electronic means such as cookies, technical information. This information may include information about your visits to the website, including the IP address of your computer and which browser was used to view the website, your operating system, resolution of screen, location, language settings in browsers, the site you came from, keywords searched (if arriving from a search engine), the number of page views, information entered, and advertisements seen. This data is used to measure and improve the effectiveness of our website and platform’s website or enhance the experience for other users. While most of the time this information is depersonalised, if this information relates to an identifiable individual, we will treat this information as personal information.

For further details on how we may collect and use information when you visit and/or interact with us on the website please visit our Website Privacy Policy.

6. How long do we keep your information for?

We will only hold your personal information for as long as it is necessary for the relevant activity, including to fulfil our legal obligations. 

  • Surveys:

We invest in people: Shortly after the survey closes it has to be archived in order to reveal full results data. Once a survey has been archived, personal names and email addresses are anonymised using asterisks and the email body is wiped. This process occurs weekly and is irreversible.

We invest in wellbeing: Shortly after the survey is closed, personal names and email addresses are deleted from the database, this process occurs regularly and is irreversible.

  • Client and individual records on CRM:

We maintain a CRM database record of our client organisations, key employee contact details and details of projects and services your organisation has enquired about or requested – including a copy of the key documents related to services which have been performed (including documents provided to us by third parties in the provision of their services, namely the plans and reports). These records are kept indefinitely to help us manage the history and ongoing accreditation and support given to our clients, as well as to compile information for statistical analysis. The records may be made available to our Practitioners or Delivery Partners.

If you ask us to stop contacting you with marketing materials, we will keep a record of your contact details and limited information needed to ensure we comply with your request.

  • Data collected by Practitioners and Delivery Partners:

As stated above, we engage a number of contracted Practitioners and Delivery Partners to deliver certain services which enable us to implement our accreditation scheme.   Any personal information they collect and share with us will be dealt with by us in accordance with this Privacy Notice.

7. How do we store and protect your personal information?

We have appropriate security measures in place to prevent personal information from being accidentally lost or used or accessed in an unauthorised way. We limit access to your personal information to those who have a genuine business need to know it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality.

 We have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so. 

8. We will never sell your information to anyone

We do not sell any of your information and we carry out all processing in strict compliance with European privacy laws.

9. How to complain

We hope that we can resolve any query or concern you raise about our use of your information.

The General Data Protection Regulation also gives you right to lodge a complaint with a supervisory authority, in particular in the European Union (or European Economic Area) state where you work, normally live or where any alleged infringement of data protection laws occurred. The supervisory authority in the UK is the Information Commissioner who may be contacted at or telephone: 0303 123 1113.

 10. Changes to this Privacy Notice

If we make any changes to this privacy notice these changes will be detailed on our website to ensure that you are fully aware of what information is collected, how it is used and under what circumstances it will be disclosed. If we make any significant changes we may advertise this on the website or, contact you directly with the information.

Appendix 1

Our Delivery Partners

  • North: Improvement, Development Growth (IDG) Limited, t/a The Growth Company
  • Central: EMB Excellence Limited
  • Scotland: This is Remarkable Limited
  • Austria: Pendl Piswanger
  • Belgium: Amelior
  • Netherlands: Investors in People Nederland BV
  • Philippines: Inspiring Partners Inc
  • South Africa: Awakening Excellence Pty Ltd

Delivery of advice only:

  • Bermuda: Management Solutions
  • Bulgaria: International Human Resources
  • Greece: Hellenic Management Association
  • Turkey: Management Centre Turkey
  • UAE: International Performance Excellence

This policy regulates the practices of Investors in People Community Interest Company (“CIC”) management of personal information collected from our website.

The purpose of this policy is to outline the transparency and practices we apply under the General Data Protection Regulation (GDPR) and any subsequent UK legislation covering data protection.

Please be aware for the purposes of the Data Protection Legislation we are the data controller.

Collection and Use of Personal Information through our Website

CIC generally collects and uses personal information from or about its website users as follows:

  • Information provided by users. In many cases, IIPCIC collects personal information directly from users when they visit or use the website. For instance, IIPCIC may collect the following types of information:
    • Inquiries and Build-My-Benchmark. IIPCIC may collect users’ name, contact information, e-mail address and any other information provided when users make an inquiry or contact IIPCIC through the website, when users sign up to receive IIPCIC’s newsletter and when users partake in the Build-My-Benchmark. IIPCIC will only use this information to process and answer users’ request or to manage everyday business needs through IIPCIC or our Delivery Partners based on Users geographical location.
    • Personalisation of Website. When users visit the website, they may, from time to time, be invited to provide information such as user’s title to help IIPCIC personalise or customise the users experience when using the website.
    • Registration to events. When users register for an IIPCIC event, they will provide contact details, email, company name, job title, address and payment details. IIPCIC does not retain this information as it is processed through a 3rd party (Eventbrite).
    • Shop. When users makes a purchase for the IIPCIC shop, they will provide contact details, email, company name, job title, address and payment details. IIPCIC does not retain this information as it is processed through a 3rd party. (Shopify).
    • Personal Information from other Sources. IIPCIC may obtain from third parties additional personal information about a website user if such user gave permission to those third parties to share its information.

Technical information.

When users visit the website, IIPCIC may collect, using electronic means such as cookies, technical information. This information may include information about visits to the website, including the IP address of the users’ computer and which browser was used to view the website, the users’ operating system, resolution of screen, location, language settings in browsers, the site the user came from, keywords searched (if arriving from a search engine), the number of page views, information entered, advertisements seen, etc. This data is used to measure and improve the effectiveness of the website or enhance the experience for users. While most of the time this information is depersonalised, if this information relates to an identifiable individual, IIPCIC will treat this information as personal information. IIPCIC may also, without limitations, collect and use the following type of information when users visit and/or interact with IIPCIC on the website:

    • Google Analytics: IIPCIC uses Google Analytics which allows it to see information on user website activities including, but not limited to, page views, source and time spent on our website. This information is depersonalized and is displayed as numbers, meaning that it cannot be tracked back to individuals. Users may opt-out of IIPCIC’s use of Google Analytics by visiting the Google Analytics opt-out page.
    • HubSpot: IIPCIC uses HubSpot which allows it to see information on user website activities including, but not limited to, page views, source and time spent on our website. However, this information is not depersonalised and users may not opt-out of IIPCIC’s use of HubSpot.
    • Google AdWords: IIPCIC uses Google AdWords Remarketing to advertise IIPCIC across the Internet and to advertise on third party websites (including Google) to previous visitors to the website. AdWords remarketing will display ads to users based on what parts of the IIPCIC website they have viewed by placing a cookie on the users’ web browser. It could mean that IIPCIC advertises to previous visitors who haven’t completed a task on the site or this could be in the form of an advertisement on the Google search results page, or a site in the Google Display Network. This cookie does not in any way identify the user or give access to the users’ computer or mobile device. The cookie is only used to indicate to other websites that the user has visited a particular page on the website, so that they may show the user ads relating to that page. If users do not wish to participate in Google AdWords Remarketing, they can opt out by visiting Google’s Ads Preferences Manager
    • ClickDimentions We use a Customer Relationship Management service called “Click Dimensions”. This system sets cookies in your browser to enable us to understand user behaviour, improve our service and provide users with more relevant information. For more information about Click Dimensions please visit their website.
    • AdRoll – NextRoll, Inc. (“NextRoll”) and our advertising partners use cookies and similar technologies on this site and use personal data (e.g., your IP address). If you consent, the cookies, device identifiers, or other information can be stored or accessed on your device for the purposes described below. You can click “Allow All” or “Decline All” or click Settings above to customise your consent.
  • Choice with Cookies. Users can block the use of cookies by activating the settings in their browser. The “Help” feature on most browsers will tell users how to prevent their browser from accepting new cookies, how to have the browser notify the users when they receive a new cookie, or how to disable cookies altogether. Additionally, users can disable or delete similar data used by browser add-ons, by changing the add-on’s settings or visiting the website of its manufacturer.
  • Privacy Policies of other Websites. This Policy only addresses the use and disclosure of information by IIPCIC. Other websites that may be accessible through the website have their own privacy policies and data collection, use and disclosure practices.

Sharing of Personal Information

IIPCIC will not sell, rent or trade personal information to any third party. However, IIPCIC may share personal information when authorised and/or required by law or as follows:

  • Service providers (Delivery Partners). IIPCIC may grant access to personal information to third party service providers (Delivery Partners) in connection with the delivery of our website data, IIPCIC will ensure that the third party maintains reasonable data management practices for maintaining the confidentiality and security of personal information and preventing unauthorised access.
  • As permitted or required by law. IIPCIC may disclose personal information as required by applicable law or by proper legal or governmental authority. IIPCIC may also disclose information to its accountants, auditors, agents and lawyers in connection with the enforcement or protection of its legal rights. IIPCIC may also release certain personal information if we are under any legal obligation to do so.

Security of Personal Information

  • IIPCIC will store and process the personal information in a manner consistent with industry security standards. IIPCIC has implemented technical, organisational and administrative systems, policies, and procedures to help ensure the security, integrity and confidentiality of personal information and to mitigate the risk of unauthorised access to or use of personal information, including (i) appropriate administrative, technical and physical safeguards and other security measures designed to ensure the security and confidentiality of the personal information it manages; (ii) a security design intended to prevent any compromise of its own information systems, computer networks or data files by unauthorised users, viruses or malicious computer programs; (iii) appropriate internal practices including, but not limited to, encryption of data in transit; using appropriate firewall and antivirus software; maintaining these countermeasures, operating systems and other applications with up-to-date virus definitions and security patches so as to avoid any adverse impact to the personal information that it manages; appropriate logging and alerts to monitor access controls and to assure data integrity and confidentiality; permitting only authorised users access to systems and applications; and (iv) all persons with authorised access to personal information must have a genuine business need-to-know prior to access (“Security Program”).

Training and Supervision

IIPCIC maintains adequate training programs to ensure that its employees and any others acting on its behalf are aware of and adhere to its Security Program. IIPCIC shall exercise necessary and appropriate supervision over its relevant employees to maintain appropriate confidentiality and security of the personal information it manages.

How to Contact Us

Any questions or complaints regarding this Policy or IIPCIC handling of personal information can be addressed by sending an email

Change of Privacy Policy

IIPCIC will review and update its policies and procedures as required to keep current with rules and regulations, new technologies, standards and customer concerns. This Policy may therefore change from time to time.

This Policy was last updated on May 8th 2018.

IIPCIC takes its responsibilities with regard to the management of personal data and meeting the requirements of the General Data Protection Regulation (GDPR) very seriously. This document provides the framework through which we meet those requirements – See here 

Subject Access Request form:

Under the General Data Protection Regulation (GDPR) Article 15, individuals are able to request to see what personal data companies hold and are processing about them. To request your data, please complete the following form – Download Document

Data Breach Process:

In the event of a data breach this shows how we will respond and within what timescales – Download PDF


See our latest FAQs on how we process and keep your data secure – See here

Recommended organisations

Equality Issues – ACAS

Trading Standards – Citizens Advice

Health & Safety – HSE


Ready to make work better? Complete the form below and one of our team will be in touch to discuss your accreditation enquiry.