HELM Impact Ltd operates HELM Culture Score (HCS). This notice explains what personal data we collect, why we collect it, and how we handle it. We keep this as short and plain as possible.
Who we are
HELM Impact Ltd is the data controller for all personal data collected through HELM Culture Score.
Contact: helen@impactbyhelm.com
Data we collect and why
We collect two categories of data.
1. Client contact data
When an organisation engages HELM Culture Score, we collect the following information about the person managing the engagement:
- Name
- Job title
- Email address
- Company name
- Industry sector
We use this to manage the client relationship, deliver the survey, and communicate results. The legal basis is contract: we need this information to provide the service.
2. Survey respondent data
When employees complete the HELM Culture Score survey, we collect:
- Survey responses (ten questions, scored on a 1 to 7 scale)
- IP address
- User agent (the browser and device type used to access the survey)
We do not collect names, email addresses, or any demographic information from survey respondents. There is no way to identify an individual from the data we hold.
We use respondent data to calculate the organisation’s HELM Culture Score and to build aggregate benchmark data for the UK employee baseline. The legal basis is legitimate interests: producing an honest, employee-verified workplace quality score that benefits organisations and the people who work in them.
What we do not do
- We do not share individual survey responses with the client organisation or anyone else.
- We do not sell data to third parties.
- We do not use survey responses for automated decision-making about individuals.
- We do not send marketing communications to survey respondents.
How long we keep data
Client contact data is kept for the duration of the client relationship and for three years after it ends.
Survey response data (including IP address and user agent) is kept for three years from the date of collection.
After these periods, data is deleted securely.
Where data is stored
Survey data is stored in Zoho Survey and Zoho Sheets, operated by Zoho Corporation. Zoho is GDPR-compliant and stores data within the European Economic Area.
Client contact data is stored in Microsoft 365 and Zoho Books, both of which operate appropriate data protection standards.
Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Ask us to correct inaccurate data
- Ask us to delete your data, where we have no legal obligation to retain it
- Object to our processing of your data
- Lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk
To exercise any of these rights, contact helen@impactbyhelm.com. We will respond within one calendar month.
Changes to this notice
We will update this notice when our practices change. The version number and date at the top of this document will reflect the most recent update.