NOT IMPOSSIBLE USER FRIENDLY PRIVACY NOTICE

Not Impossible (We) are committed to protecting and respecting your privacy. We don't hide behind small print because we understand how important your privacy is to you. That's why we share everything you need to know about what we do with your personal information, in plain language. This policy covers everyone whose information we hold: young people, the hosts who give an hour of their time, and our employer and partner contacts.

What is personal data?

Personal data is information that identifies you. The bits we collect depend on which part of Not Impossible you use.

What we collect and where it comes from

What we collect depends on who you are.

If you're a young person

You give most of it to us when you sign up or get in touch. Your school, college or organisation may also share information with us where we have an agreement to do so. We collect:

· Your name

· Your email address

· Date of birth

· Address

· Your phone number

· Your school, college or organisation

· Your log-in and password

· Your social media handle (if you follow us, message us or comment on our posts)

· Technical information your device tells us, like roughly where you are and the device you are using

· Information about your visit to our site, like which pages you saw and any searches you made

· To check you're eligible: things like your postcode, whether you get free school meals or pupil premium, or if you are a care leaver

· Your CV, which you can upload

If you're a host

When you offer to host a young person, we collect:

· Your name, work email and phone number

· Your LinkedIn, your role and your employer

· Your career history and notes about your public work, so we can introduce you well

· Notes and a recording of your discovery call with us, which we transcribe

We use this to introduce you to young people who would value meeting you, and to set up and run the microplacement.

If you're an employer or partner contact

We collect your name, work email, phone number and organisation. We use this to manage our work together and to arrange placements.

If you refer or nominate a young person

If you are a teacher or someone who refers a young person to us, we collect your name, your school or organisation, and your email, so we can set up the referral.

Information we are extra careful with

Some information needs extra care. The law calls this special category data. We only collect it from young people who go on to a placement, and only:

· Your ethnicity, to check we are reaching the young people we set out to

· Any health, access or support needs you choose to tell us about, so your placement is safe and right for you

You don't have to share this, and we explain why we are asking before you do. To use it the law needs an extra reason, called an Article 9 condition: we rely on keeping you safe (safeguarding), checking we treat people fairly (equality monitoring), or your clear consent.

How we use this information

We use young people's information to make and support microplacements. We use hosts', employer contacts' and referrers' information to set up and run those placements and to keep in touch. We also use it to measure the difference we are making.

For most of what we do we rely on what the law calls legitimate interest: on balance, it is fair to everyone involved. For our newsletter, and for sharing a young person's access or support needs with an employer, we rely on consent.

Sharing your information

We use trusted companies to run our systems, like our database, forms, scheduling, email and AI helpers. They only ever act on our instructions, not for their own purposes. We can tell you the full list if you ask.

To set up a microplacement we share some of a young person's details with the host and employer: their name, what they have told us about themselves, and their feedback afterwards. We remove contact details from a CV before we share it. We share any access or support needs only with consent, and only what is needed. We never share a young person's ethnicity with employers.

We show hosts' professional profiles (role, employer and career background) to young people, so they can choose who they would like to meet.

We also use AI tools to help us, for example to draft summaries and to type up recordings of calls. Under our agreements these companies process the information for us and do not use it to train their own systems.

We pay to run ads so more young people find us. We only show these ads to adults.

When someone signs up, we let organisations like Meta (the company behind Instagram) know that a sign-up happened. That is how we tell which ads are working and which are a waste of money. We do not send Meta anyone's name, email, or phone number.

How we measure our website

We use Google Analytics to see how people use our site, so we can make it better. It shows us things like which pages people visit, not who you are. Google cannot use this for its own advertising.

Both of these use cookies, and we only set them if you accept. You can change your cookie choices at any time, and the site still works either way.

Where your information is kept

Your information is kept in the United Kingdom, the European Union, and sometimes the United States, depending on the company. Where it goes to the United States, we use approved legal protections (Standard Contractual Clauses, the UK International Data Transfer Addendum, and the EU-US Data Privacy Framework) so it is looked after to the same standard.

How long we keep it

We keep young people's information for three years after you stop using our services. We keep hosts' and referrers' information for two years, and employer contacts' information for two years after our work together ends. It is longer for young people so we can support you after your next step (for example from school into college or work). Some information we have to keep longer for legal reasons.

Your rights

The law gives you rights over your information. You can:

· ask to see a copy of what we hold about you, free of charge

· ask us to correct anything that is wrong

· ask us to delete your information

· ask us to stop or limit how we use it

· object to how we use it

· ask us to stop sending you newsletters at any time

To use any of these, or to ask a question, contact our Data Privacy and Compliance contact, Luke Ashman, at luke@teamnotimpossible.com. You can also complain to the Information Commissioner's Office (ico.org.uk).

This privacy policy was last updated on 11 June 2026.