1. Who We Are
The Impact Portal is operated by Michelle Murphy, based in Switzerland. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains what information we collect, how we use it, when we share it, and what rights you have.
For any privacy-related questions, please contact us at hello@theimpactportal.com.
2. Information We Collect
2.1 Information You Provide to Us
We collect information you provide directly, including:
- Name and email address when you join our community mailing list or register for a workshop
- Payment details when you purchase a workshop — collected and processed securely by Stripe; we do not store your card details
- Any messages you send us directly via email
2.2 Information Collected Automatically
We do not use Google Analytics or any third-party tracking or analytics tools on this website. Our hosting provider (Vercel) may log standard server data such as IP addresses and page requests for security and performance purposes; this data is not used for marketing and is not shared with us in identifiable form.
Our third-party service providers (MailerLite and Stripe) may use cookies or similar technologies as described in their own privacy policies, linked in Section 5 below.
3. How We Use Your Information
We use the information we collect to:
- Deliver workshops and services you have enrolled in (lawful basis: contract)
- Process your payment (lawful basis: contract)
- Send you community updates, workshop announcements, and resources you have opted into (lawful basis: consent)
- Respond to your enquiries (lawful basis: legitimate interests)
- Comply with our legal and accounting obligations (lawful basis: legal obligation)
4. Email Communications
We use MailerLite to manage our mailing list. When you subscribe, you will receive a confirmation email (double opt-in) before being added to our list. You can unsubscribe at any time using the link at the bottom of any email, or by contacting us directly.
We will never share your email address with third parties for marketing purposes.
5. Sharing Your Information
We do not sell your personal data. We share your information only with the following service providers, and only to the extent necessary for them to perform their services:
- MailerLite (email marketing) — Privacy Policy
- Stripe (payment processing) — Privacy Policy
- Vercel (website hosting) — Privacy Policy
- Video conferencing platform used to deliver live workshops (participants will be notified of the platform prior to each session)
We may also disclose your information if required to do so by law or in response to a valid legal request.
6. Data Retention
- Mailing list subscribers: your data is retained for as long as you remain subscribed. You can unsubscribe and request deletion at any time.
- Payment records: retained for 10 years in accordance with Swiss accounting law.
- Workshop participation records: retained for 3 years after the date of the workshop.
- Email enquiries: retained for 2 years unless there is an ongoing relationship.
7. Your Privacy Rights
Depending on your location, you may have the following rights regarding your personal data. To exercise any of these rights, please email us at hello@theimpactportal.com. We will respond within 30 days.
- Access: request a copy of the personal data we hold about you
- Rectification: request correction of inaccurate data
- Erasure: request deletion of your personal data, subject to legal retention obligations
- Restriction: request that we limit how we use your data
- Portability: receive your data in a structured, machine-readable format
- Objection: object to processing based on legitimate interests
- Withdraw consent: withdraw your consent at any time where processing is consent-based
If you are located in the EU or UK and believe we have not handled your data in accordance with applicable law, you have the right to lodge a complaint with your local data protection authority.
8. Data Security
This website is served over HTTPS. We use reputable, industry-standard service providers (MailerLite, Stripe, Vercel) that maintain their own security programmes. While we take reasonable precautions to protect your information, no internet transmission is completely secure. We encourage you not to share sensitive personal information beyond what is necessary.
9. International Data Transfers
Our service providers (MailerLite and Stripe) are based in the United States and may process your data on servers located outside Switzerland and the EU. These providers participate in standard data protection frameworks and use Standard Contractual Clauses or equivalent safeguards to ensure your data is protected in accordance with applicable law.
10. Children's Privacy
Our Services are intended for individuals aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy on this page with a revised "Last updated" date. We encourage you to review this policy periodically.
12. Contact Us
For any questions about this Privacy Policy or how we handle your data, please contact:
The Impact Portal
hello@theimpactportal.com