PURE LEAPFROG — Privacy Notice

About this privacy notice

At Pure Leapfrog we respect your privacy and are committed to protecting your personal data. This privacy notice explains, amongst other things, how and why we collect, store, use and share personal data and your rights to control our use of it.

It applies not just to use of our website, but also personal data that we process through other interactions with individuals in the course of running our organisation and delivering our services. This includes potential and existing clients and partners, industry contacts, people interested in working for or with us and our suppliers. Our website and services are not intended for children and we do not knowingly collect data relating to children.

Information about us (the ‘data controller’)

Pure Leapfrog (Company no. 05534395 — Charity no. 1112249) is a sustainability charity working with communities to develop responses to sustainability challenges across the systems of Carbon, Energy, Buildings, Finance, Nature and Place. We develop new business models and solutions that have environmental and social impact.

Our contact address is 7–14 Great Dover Street, London, SE1 4YR. To get in contact please see “How to contact us” below.

This privacy notice is issued on behalf of all group companies, so when we mention “Pure Leapfrog”, “we”, “us” or “our”, we are referring to the relevant company in our group responsible for processing your data.

Where we collect, use and are responsible for personal data about individuals (including you), we are regulated under applicable data protection laws, such as the EU General Data Protection Regulation (GDPR). We are responsible as “data controller” of that personal data for the purposes of the law.

Types of personal data obtained, purposes and legal basis

Personal data means any information about an individual from which that person can be identified. It does not include anonymous data.

We use personal data from different categories of individuals for several different purposes, each with its own lawful basis.

If you fill in a form on our website to contact us

We store the data you enter (usually name, contact details, comment and possibly telephone number, website, organisation name, job title) for the purposes of answering your enquiry or otherwise communicating with you. We do this on the basis of our legitimate interests in operating our website and organisation.

If you would like us to update or delete your information, please email us (see “How to contact us”) or use the unsubscribe links on marketing emails.

If you make a donation via our website

We receive and store the following data you enter: name, address, donation amount, comment, reason for donation. We need this for taking payment, understanding our donors and claiming Gift Aid. This is based on our legitimate interests in raising funds for our charity.

We do not receive or store your card details – payments are taken by PayPal, Stripe or GoCardless.

If you use our flight carbon offsetting tool

We receive and store: flight take‑off and landing location, number of passengers, class of travel and donation amount. We need this to calculate emissions, take payment and claim Gift Aid. This is based on our legitimate interests in providing a carbon offsetting tool and raising funds for offsetting projects.

We do not receive or store your card details – payments are taken by PayPal, Stripe or GoCardless.

If you interact with us through partners or suppliers working on our behalf

If you access our services or take part in research and development projects delivered through trusted partners, we may collect details such as health, income, ethnicity, religion and other demographic metrics. You will have provided this information while taking part in a project or using our services.

If you receive our email newsletters

We hold your name and email address for the purpose of sending you news and updates about our activities and clean community energy. We process this data based on your consent. You can withdraw consent at any time via the unsubscribe link in each email.

If you work for a client, are an industry contact, or work in a relevant field

We may hold your name, company, job title, contact details, and in some cases identity and background information for “know your client” checks. We may receive this from you, your employer, or publicly available sources such as LinkedIn.

We use this data to:

Operate and develop our organisation and services, and perform compliance checks
Communicate regarding events, news and updates
Gather and share information relevant to our mission

This is based on our legitimate interests in operating our organisation and delivering our services.

If you are a supplier or work for a supplier

We may hold your name and contact details to procure and pay for goods and services. This is based on our legitimate interests in doing business with you or your company.

Cookies and similar technologies

If you visit our website, we may store information using cookies or similar technologies. Some cookies may include information that identifies you. For more information, see our Cookie Policy.

Retention of personal data

We retain personal data only for as long as needed for the purposes for which it was collected, taking into account data protection laws, legal retention periods, limitation periods and our business needs.

Sharing your personal data

We may share your personal data with:

IT and system administration service providers
Professional advisers (lawyers, bankers, accountants, auditors)
Construction industry professionals
Grant funders and partners
Evaluation and research partners (we will not publish your personal data without your agreement)
Law enforcement or authorities where required by law

If you attend one of our events, your name and company may be shared with speakers, our Board, trustees, third‑party hosts and other attendees.

We may also make targeted email introductions to other industry participants.

In the event of a merger, transfer, acquisition or sale, we may disclose your information, requiring third parties to provide comparable protection.

Data processors

We use service providers acting as data processors, including:

Website analytics providers
Website and data hosting providers
Document storage providers
Email, contacts and calendar providers
CRM providers
Accounting software providers
Data analysis providers

They only process data on our behalf and in accordance with our instructions.

International transfers of personal data

We do not directly transfer your personal data outside the EEA. However, some data processors may do so. Safeguards include:

Transfers only to countries deemed adequate by the European Commission
Use of EU‑approved model contracts
For US providers, self‑certification to the EU‑US Privacy Shield

Your personal data rights

You have the right to:

Request a copy of your personal data
Correct inaccuracies
Withdraw consent
Object to processing based on legitimate interests
Object to direct marketing
Request erasure or restriction of processing in certain circumstances
Request transfer of your data in a machine‑readable format

To exercise these rights, email us (see “How to contact us”).

Automated decision‑making

We do not undertake automated decision‑making or profiling that produces legal or similarly significant effects.

Keeping your personal data secure

We have appropriate security measures to prevent loss, misuse or unauthorised access. Access is limited to those with a business need and subject to confidentiality obligations.

We have procedures for dealing with suspected data breaches and will notify you and regulators where legally required.

Your rights to lodge a complaint

You may lodge a complaint with the Information Commissioner’s Office (ICO): https://ico.org.uk/concerns/ or 0303 123 1113.

Changes to this privacy notice

We may update this notice from time to time.
Last updated: 22 January 2024

How to contact us

For questions or concerns about our privacy management, email: info@pureleapfrog.org