Privacy Notice
How Signify Impact handles — and mostly avoids — your data. We sell privacy advisory; this page is written the way we tell clients to write theirs.
Signify Impact is a mostly static website with no accounts and no logins. We have built it to collect as little as possible about you, and to be explicit about the little we do.
Browsing the Site
We do not use advertising or tracking cookies to follow you across the web, we do not build profiles of visitors, and we do not sell or rent personal data. Where a cookie or consent choice appears, we default to the most privacy-preserving option. We also run no analytics of any kind — not even the cookieless, aggregate sort. We considered it in July 2026 and declined: if we ever change that decision, this paragraph changes first, before anything is enabled.
The configurator
When the configurator is live, it asks only firmographic and readiness questions — organization size, sector, entity count, the state of the artefact. It deliberately does not collect risk content, incident details, personal data about your staff, or anything confidential: intake is not the place for that, and we practice what we advise. We ask for your email address for exactly two purposes: to send you a save-and-resume link, and to send you your Scope Confirmation. Your answers are shared with the consultant assigned to you as a briefing, so your first call does not begin with questions you already answered. Every question in the flow is used; none are decorative.
Credit balances
Where work is sold as credits (currently Internal Audit), your balance and its redemption history live in the Impact Platform, alongside the engagement files themselves, under your engagement agreement. This website holds no balance, no ledger and no account for you: it publishes the menu, the rate and the rules, and stops there. Purchases and redemptions are handled with your consultant, not through a checkout on these pages.
Booking and signing
Scheduling a call and signing engagement documents are handled by specialist third-party providers embedded on our pages. When those providers are selected and live, they will be named — with what they process and where — in this Privacy Notice, which carries our public subprocessor list.
When you contact us
Contact links open your own email application or show our phone and LinkedIn details, so you can reach us directly. Anything you choose to send us is handled as ordinary, confidential business correspondence.
Grant applications
Grant applications ask for the information needed to verify eligibility (such as 501(c)(3) status and location) and to score the published selection criteria — nothing more. Registration data is used only for round selection and program administration, and is not used for marketing.
Client portal
The client portal (for subscribers and grantees) authenticates by emailed one-time link — no passwords are created or stored. Portal identity data is held in Signify’s own infrastructure. Engagement data inside the portal is governed by your engagement agreement, which prevails over this notice for that data.
Hosting and logs
The Site is served through Cloudflare Pages. As with any website, the hosting provider may process standard technical information — such as IP address and browser type — in its server logs to keep the service secure and performant. That processing is governed by the hosting provider’s own policies.
Your choices and rights
You can ask us what we hold about you, ask us to correct it, or ask us to delete it, subject to legal retention duties. Requests can be made via the Signify Solution contact page and are answered by a human.
Changes
We may update this notice from time to time. Material changes will be reflected here with a revised date.
Last updated 23 July 2026.