Privacy Notice

Signify Impact is a mostly static website with no accounts and no logins. We have built it to collect as little as possible about you, and to be explicit about the little we do.

Browsing the Site

We do not use advertising or tracking cookies to follow you across the web, we do not build profiles of visitors, and we do not sell or rent personal data. Where a cookie or consent choice appears, we default to the most privacy-preserving option. We also run no analytics of any kind — not even the cookieless, aggregate sort. We considered it in July 2026 and declined: if we ever change that decision, this paragraph changes first, before anything is enabled.

The configurator

The configurator — the plan builder at Build a plan — is live, and it collects nothing. There is no form, no email field and no account: you tick the engagements your approved plan calls for, and the credits, cost and delivery quarters are calculated entirely inside your own browser. Nothing is transmitted to us, and nothing is stored on our servers.

Your selection is carried in the fragment of the address-bar link — the part after the hash symbol — which is never sent to any web server, ours included. That is what lets you send the link to your chair and have them see exactly the plan you built, without either of you handing us anything. If you later choose to carry that plan into a call request, the message is composed by your own mail client, so you hold a copy from the moment you send it, and we receive only what you chose to send.

We deliberately do not collect risk content, incident details, personal data about your staff, or anything confidential at this stage. Intake is not the place for that, and we practice what we advise.

Credit balances

Where work is sold as credits (currently Internal Audit), your balance and its redemption history live in the Impact Platform, alongside the engagement files themselves, under your engagement agreement. This website holds no balance, no ledger and no account for you: it publishes the menu, the rate and the rules, and stops there. Purchases and redemptions are handled with your consultant, not through a checkout on these pages.

Booking and signing

Scheduling a call and signing engagement documents are handled by specialist third-party providers embedded on our pages. When those providers are selected and live, they will be named — with what they process and where — in this Privacy Notice, which carries our public subprocessor list.

When you contact us

Contact links open your own email application or show our phone and LinkedIn details, so you can reach us directly. Anything you choose to send us is handled as ordinary, confidential business correspondence.

Grant applications

Grant applications ask for the information needed to verify eligibility (such as 501(c)(3) status and location) and to score the published selection criteria — nothing more. Registration data is used only for round selection and program administration, and is not used for marketing.

Client portal

The client portal (for subscribers and grantees) authenticates by emailed one-time link — no passwords are created or stored. Portal identity data is held in Signify’s own infrastructure. Engagement data inside the portal is governed by your engagement agreement, which prevails over this notice for that data.

Hosting and logs

The Site is served through Cloudflare Pages. As with any website, the hosting provider may process standard technical information — such as IP address and browser type — in its server logs to keep the service secure and performant. That processing is governed by the hosting provider’s own policies.

Your choices and rights

You can ask us what we hold about you, ask us to correct it, or ask us to delete it, subject to legal retention duties. Requests can be made via the Signify Solution contact page and are answered by a human.

Changes

We may update this notice from time to time. Material changes will be reflected here with a revised date.

Last updated 23 July 2026.