Ensuring your Privacy

Inspiring Women Changemakers is a brand of Anj Handa Associates. We are committed to protecting your privacy, and we take our responsibilities regarding the security of user information seriously. This page was last updated on 2 November 2026.

1. Who we are

Inspiring Women Changemakers (IWC) is a trading name of Anj Handa, a sole trader registered as Anj Handa Associates, based in Leeds, UK. For the personal data described in this notice, Anj Handa is the data controller.

ICO registration number: 00019975033

Contact for all data protection matters: anj@inspiringwomenchangemakers.co.uk. Postal address on request.

This notice explains what personal data we collect, why, how we use it, who we share it with, how long we keep it and what your rights are. It applies to our website, newsletter, free resources, membership, events and consultancy work.

Part 3 explains a different role. When we help a client with trustee recruitment, we usually act as the client’s data processor, and the client is the controller. In that case, the client’s own privacy notice governs how candidate data is used.

2. What personal data we collect and why

We collect only what we need. The table sets out each activity, the data involved and our lawful basis under UK GDPR Article 6.

ActivityData we collectLawful basis
Website enquiries and contact formsName, email address, organisation, the content of your messageLegitimate interests (responding to you), or steps you ask us to take before a contract
Newsletter and mailing listName, email address, sign-up date and source, whether you open or click emailsConsent. You can withdraw it at any time using the unsubscribe link
Free resources and downloads, including the Inclusive Trustee Recruitment PackName, email address, organisation, the resource you downloaded, your marketing choicesConsent for follow-up emails. Delivery of the file itself relies on legitimate interests
Membership of the IWC communityName, email address, organisation, any profile information you give us, payment details processed by our payment provider, PayPal.Contract, or legitimate interests where there is no contract
Clients and consultancy workContact details, organisation and role, contract and project records, invoices, notes of meetings and communicationsContract, and legitimate interests in running and improving our work
Invoicing, tax and accountsName, organisation, billing details, payment recordsLegal obligation (HMRC and accounting requirements)
PaymentsName, email address, payment confirmation and amount. We do not see or store your full card details: PayPal and Stripe handle themContract, and legal obligation for our accounting records
Events, webinars and workshopsName, email address, organisation, access needs you tell us about, attendance and any recording you appear inContract or legitimate interests. Consent for recordings and for any access or dietary information
Website analytics and cookiesDevice and browser information, pages visited, approximate locationConsent for non-essential cookies. See our Cookies Policy
Social mediaPublic posts, comments and messages you send usLegitimate interests

Special category data

We do not ask for special category data (for example health, disability, religion, ethnicity or sexual orientation) in our own activities, except where you choose to tell us about access needs so we can make an event or meeting accessible to you. If you tell us, we use it only for that purpose, on the basis of your explicit consent, and delete it when it is no longer needed.

Children

Our services are for adults. We do not knowingly collect personal data from anyone under 18.

Automated decisions

We do not make decisions about you using solely automated processing or profiling that has legal or similarly significant effects.

3. Where your data comes from

Mostly from you, when you contact us, sign up, download a resource, join, book or work with us. We also receive some data from the tools we use, such as analytics and email delivery statistics, and from publicly available professional information when we research organisations we may work with.

4. Who we share your data with

We do not sell your personal data. We do not lease it or share it for others’ marketing. We share it only where needed, with:

  • Service providers acting on our instructions (data processors), listed below
  • Professional advisers such as our accountant, insurer and legal adviser, under duties of confidentiality
  • Regulators, courts or law enforcement where the law requires it
  • Clients, where you take part in their recruitment or consultation process and the arrangement is explained to you by that client
ProviderWhat it does for usWhere data may be processed
KrystalHosts our websiteUnited Kingdom (London)
WP ConsentRecords your cookie choices on our websiteOur website host, United Kingdom
Google (Google Analytics and YouTube)Website statistics, and videos embedded on our pages. Both only run if you agree to cookiesUnited States and other countries, with safeguards
PayPalTakes payments made through our websiteVarious, with safeguards
StripeTakes payments made outside our websiteVarious, with safeguards
SubstackHosts the Power and Practice newsletter. It is a separate service, not part of our website. If you subscribe there, Substack collects your data under its own privacy noticeUnited States, with safeguards
FasthostsDay-to-day communications and secure storageVarious, with safeguards

If you are unsure whether a provider is current, ask us and we will confirm.

5. Transfers outside the UK

Some providers process data outside the UK, particularly in the United States and the EU. Where they do, we rely on a UK adequacy decision (including the UK Extension to the EU-US Data Privacy Framework where the provider is certified) or the UK International Data Transfer Agreement or Addendum, so that your data receives equivalent protection. We can give you more detail on request.

6. How long we keep your data

DataHow long we keep it
Website enquiries[12 months] after the conversation ends, unless it becomes a client relationship
Mailing list and download recordsUntil you unsubscribe or ask us to delete it. We review inactive contacts every [24 months] and remove those who have not engaged
Client and project records[6 years] after the contract ends, then deleted
Invoices and accounting records[6 years] after the end of the tax year, as HMRC and accounting rules require
Access needs you tell us aboutDeleted within [30 days] after the event or meeting
Recordings of sessions[Delete the date or period you choose], and only where you were told and agreed
CookiesAs set out in our Cookies Policy

7. Your rights

Under UK data protection law you have the right to:

  • Be informed about how we use your data (this notice)
  • Access a copy of the personal data we hold about you. We carry out reasonable and proportionate searches to find it
  • Have inaccurate data corrected
  • Have your data erased in certain circumstances (the right to be forgotten)
  • Restrict how we use your data in certain circumstances
  • Receive your data in a portable format where we process it by automated means on the basis of consent or contract
  • Object to processing based on legitimate interests, and to direct marketing at any time
  • Withdraw consent at any time. This does not affect processing already carried out

To use any of these rights, email anj@inspiringwomenchangemakers.co.uk. You do not need to use any set wording. We may ask you to confirm your identity. We respond within one month. If your request is complex or you have made several, we may extend this by up to two further months, and we will tell you why within the first month. We do not charge a fee unless a request is clearly unfounded or excessive.

The right to erasure and some other rights are not absolute. We will explain if we cannot comply fully, for example where we must keep accounting records by law.

8. Cookies and similar technologies

Essential cookies keep the website working and do not need your consent. We use other cookies, such as those for analytics and for embedded YouTube videos, only where you agree through our cookie banner. You can change your choice at any time. Our Cookies Policy lists every cookie we use, what it does and how long it lasts.

9. Security

We protect personal data with measures suited to a small independent practice, including secure and encrypted storage, strong and unique passwords with multi-factor authentication where available, restricted access to the data I hold, encrypted devices, a secure website certificate (SSL) and prompt installation of security updates. We choose service providers who offer appropriate security and sign suitable terms with them.

10. Personal data breaches

If a breach is likely to risk your rights and freedoms, we report it to the Information Commissioner’s Office within 72 hours of becoming aware of it. If the risk to you is high, we also tell you without undue delay, explaining what happened, what data is involved, the likely effects and what we are doing about it. We keep a record of all breaches, including those we do not need to report.

11. Links to other websites

Our website may link to other sites. We do not control them and are not responsible for their privacy practices. Please read their notices.

12. Changes to this notice

We will post any changes here and update the date at the top. If a change is significant, for example a new purpose for your data, we will tell you directly. Using our website does not mean you consent to anything in this notice. Where we need your consent, we ask for it separately and clearly.

Other Websites

This website may contain links to enable you to visit other websites of interest. However, once you have used these links to leave our site you should note that we do not have any control over any other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting other sites and such sites are not governed by this Privacy Statement. You should exercise caution and read the Privacy Statement applicable to the website in question.

Security

We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online.

Your Consent

By using this website you consent to the collection and use of this information by us for the purposes described above. If we decide to change our Privacy Policy, we will post the changes on this page so that you are always aware of what information we collect, how we use it and in what circumstances we disclose it.