Privacy notice
Who is responsible
A school decides to use Impact Beyond and decides which students take part. For students' data the school is responsible (the controller) and Impact Beyond processes the data on the school's instructions, under an agreement with the school. The school's own privacy notice covers the survey.
For the accounts of school and tour operator staff, Impact Beyond is responsible for the account details it keeps.
What is kept
About students, from the school, or from a tour operator the school has allowed to send its passenger list:
- name, and an email address or mobile number to send survey links to
- if the school uses it, a parent or guardian's email address or mobile number, to ask for consent
- if the school records it, sex, and whether the student travelled or took part for comparison
- the student's survey answers, including anything they write in a text box
About staff: name, work email address, organisation and role, and when they last signed in.
About anyone using the site: the network address a request comes from, counted for at most a day to stop the service being flooded, then discarded.
What it is used for
To send each student their survey links and reminders, to produce the school's reports, and to show a tour operator how well its trips were delivered. Nothing is used for advertising, sold, or used to make decisions about an individual student.
Pseudonyms and groups
A student's answers are stored under a pseudonym, never beside their name or contact details, and no report is built from anything that identifies a student. Every figure in a report rests on ten or more students; a smaller group is not shown. That rule is applied by the database, so no page or export can show a smaller group.
What a tour operator sees
An operator sees how well its own trips were delivered. If a school chooses, the operator also sees outcome figures pooled across at least three schools. An operator never sees a student's name, contact details, answers or anything a student wrote, and cannot read back a passenger list it has sent.
How long it is kept
- Students' names and contact details are deleted thirty days after a trip's last survey closes, or when a school cancels the trip.
- After that, the answers remain part of the school's results under a pseudonym that nothing in the service can link back to a student.
- A school can delete a student's answers at any time, for example when a student or parent asks.
- Sign-in links work once, for twenty minutes, and are deleted within a day. A sign-in ends after fourteen days without use.
- Backups are kept for a limited period for recovery and then deleted.
Where it is held and who helps
All data for this service is stored in one region: United Kingdom. The application is hosted by Vercel and the database by Supabase, both running in that region, and survey links are sent by an email delivery provider. Each processes the data only to provide its service, under data protection terms with Impact Beyond.
Student pages load nothing from other websites and carry no advertising or analytics.
Keeping it safe
Every page, and the service's own connection to its database, is encrypted in transit. Each school and operator can reach only its own data, enforced by the database itself. Staff sign in with a single-use email link, so there is no password to steal.
Your rights and questions
Students and parents can ask to see, correct or delete a student's data. Ask the school: it is responsible for that data, and Impact Beyond helps it respond.
For a staff account, ask your organisation's admin in the first instance.
Anyone can also complain to their data protection authority. In the United Kingdom that is the Information Commissioner's Office.