Ensuring your Privacy
Inspiring Women Changemakers is a brand of Anj Handa Associates. We are committed to protecting your privacy, and we take our responsibilities regarding the security of user information seriously. This page was last updated on 2 November 2026.
1. Who we are
Inspiring Women Changemakers (IWC) is a trading name of Anj Handa, a sole trader registered as Anj Handa Associates, based in Leeds, UK. For the personal data described in this notice, Anj Handa is the data controller.
ICO registration number: 00019975033
Contact for all data protection matters: anj@inspiringwomenchangemakers.co.uk. Postal address on request.
This notice explains what personal data we collect, why, how we use it, who we share it with, how long we keep it and what your rights are. It applies to our website, newsletter, free resources, membership, events and consultancy work.
Part 3 explains a different role. When we help a client with trustee recruitment, we usually act as the client’s data processor, and the client is the controller. In that case, the client’s own privacy notice governs how candidate data is used.
2. What personal data we collect and why
We collect only what we need. The table sets out each activity, the data involved and our lawful basis under UK GDPR Article 6.
| Activity | Data we collect | Lawful basis |
| Website enquiries and contact forms | Name, email address, organisation, the content of your message | Legitimate interests (responding to you), or steps you ask us to take before a contract |
| Newsletter and mailing list | Name, email address, sign-up date and source, whether you open or click emails | Consent. You can withdraw it at any time using the unsubscribe link |
| Free resources and downloads, including the Inclusive Trustee Recruitment Pack | Name, email address, organisation, the resource you downloaded, your marketing choices | Consent for follow-up emails. Delivery of the file itself relies on legitimate interests |
| Membership of the IWC community | Name, email address, organisation, any profile information you give us, payment details processed by our payment provider, PayPal. | Contract, or legitimate interests where there is no contract |
| Clients and consultancy work | Contact details, organisation and role, contract and project records, invoices, notes of meetings and communications | Contract, and legitimate interests in running and improving our work |
| Invoicing, tax and accounts | Name, organisation, billing details, payment records | Legal obligation (HMRC and accounting requirements) |
| Payments | Name, email address, payment confirmation and amount. We do not see or store your full card details: PayPal and Stripe handle them | Contract, and legal obligation for our accounting records |
| Events, webinars and workshops | Name, email address, organisation, access needs you tell us about, attendance and any recording you appear in | Contract or legitimate interests. Consent for recordings and for any access or dietary information |
| Website analytics and cookies | Device and browser information, pages visited, approximate location | Consent for non-essential cookies. See our Cookies Policy |
| Social media | Public posts, comments and messages you send us | Legitimate interests |
Special category data
We do not ask for special category data (for example health, disability, religion, ethnicity or sexual orientation) in our own activities, except where you choose to tell us about access needs so we can make an event or meeting accessible to you. If you tell us, we use it only for that purpose, on the basis of your explicit consent, and delete it when it is no longer needed.
Children
Our services are for adults. We do not knowingly collect personal data from anyone under 18.
Automated decisions
We do not make decisions about you using solely automated processing or profiling that has legal or similarly significant effects.
3. Where your data comes from
Mostly from you, when you contact us, sign up, download a resource, join, book or work with us. We also receive some data from the tools we use, such as analytics and email delivery statistics, and from publicly available professional information when we research organisations we may work with.
4. Who we share your data with
We do not sell your personal data. We do not lease it or share it for others’ marketing. We share it only where needed, with:
- Service providers acting on our instructions (data processors), listed below
- Professional advisers such as our accountant, insurer and legal adviser, under duties of confidentiality
- Regulators, courts or law enforcement where the law requires it
- Clients, where you take part in their recruitment or consultation process and the arrangement is explained to you by that client
| Provider | What it does for us | Where data may be processed |
| Krystal | Hosts our website | United Kingdom (London) |
| WP Consent | Records your cookie choices on our website | Our website host, United Kingdom |
| Google (Google Analytics and YouTube) | Website statistics, and videos embedded on our pages. Both only run if you agree to cookies | United States and other countries, with safeguards |
| PayPal | Takes payments made through our website | Various, with safeguards |
| Stripe | Takes payments made outside our website | Various, with safeguards |
| Substack | Hosts the Power and Practice newsletter. It is a separate service, not part of our website. If you subscribe there, Substack collects your data under its own privacy notice | United States, with safeguards |
| Fasthosts | Day-to-day communications and secure storage | Various, with safeguards |
If you are unsure whether a provider is current, ask us and we will confirm.
5. Transfers outside the UK
Some providers process data outside the UK, particularly in the United States and the EU. Where they do, we rely on a UK adequacy decision (including the UK Extension to the EU-US Data Privacy Framework where the provider is certified) or the UK International Data Transfer Agreement or Addendum, so that your data receives equivalent protection. We can give you more detail on request.
6. How long we keep your data
| Data | How long we keep it |
| Website enquiries | [12 months] after the conversation ends, unless it becomes a client relationship |
| Mailing list and download records | Until you unsubscribe or ask us to delete it. We review inactive contacts every [24 months] and remove those who have not engaged |
| Client and project records | [6 years] after the contract ends, then deleted |
| Invoices and accounting records | [6 years] after the end of the tax year, as HMRC and accounting rules require |
| Access needs you tell us about | Deleted within [30 days] after the event or meeting |
| Recordings of sessions | [Delete the date or period you choose], and only where you were told and agreed |
| Cookies | As set out in our Cookies Policy |
7. Your rights
Under UK data protection law you have the right to:
- Be informed about how we use your data (this notice)
- Access a copy of the personal data we hold about you. We carry out reasonable and proportionate searches to find it
- Have inaccurate data corrected
- Have your data erased in certain circumstances (the right to be forgotten)
- Restrict how we use your data in certain circumstances
- Receive your data in a portable format where we process it by automated means on the basis of consent or contract
- Object to processing based on legitimate interests, and to direct marketing at any time
- Withdraw consent at any time. This does not affect processing already carried out
To use any of these rights, email anj@inspiringwomenchangemakers.co.uk. You do not need to use any set wording. We may ask you to confirm your identity. We respond within one month. If your request is complex or you have made several, we may extend this by up to two further months, and we will tell you why within the first month. We do not charge a fee unless a request is clearly unfounded or excessive.
The right to erasure and some other rights are not absolute. We will explain if we cannot comply fully, for example where we must keep accounting records by law.
8. Cookies and similar technologies
Essential cookies keep the website working and do not need your consent. We use other cookies, such as those for analytics and for embedded YouTube videos, only where you agree through our cookie banner. You can change your choice at any time. Our Cookies Policy lists every cookie we use, what it does and how long it lasts.
9. Security
We protect personal data with measures suited to a small independent practice, including secure and encrypted storage, strong and unique passwords with multi-factor authentication where available, restricted access to the data I hold, encrypted devices, a secure website certificate (SSL) and prompt installation of security updates. We choose service providers who offer appropriate security and sign suitable terms with them.
10. Personal data breaches
If a breach is likely to risk your rights and freedoms, we report it to the Information Commissioner’s Office within 72 hours of becoming aware of it. If the risk to you is high, we also tell you without undue delay, explaining what happened, what data is involved, the likely effects and what we are doing about it. We keep a record of all breaches, including those we do not need to report.
11. Links to other websites
Our website may link to other sites. We do not control them and are not responsible for their privacy practices. Please read their notices.
12. Changes to this notice
We will post any changes here and update the date at the top. If a change is significant, for example a new purpose for your data, we will tell you directly. Using our website does not mean you consent to anything in this notice. Where we need your consent, we ask for it separately and clearly.
Other Websites
This website may contain links to enable you to visit other websites of interest. However, once you have used these links to leave our site you should note that we do not have any control over any other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting other sites and such sites are not governed by this Privacy Statement. You should exercise caution and read the Privacy Statement applicable to the website in question.
Security
We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online.
Your Consent
By using this website you consent to the collection and use of this information by us for the purposes described above. If we decide to change our Privacy Policy, we will post the changes on this page so that you are always aware of what information we collect, how we use it and in what circumstances we disclose it.

