Legal

Privacy Policy.

Last updated: 24 May 2026

1. Who we are

Impact Explorers Ltd (“we”, “us”, “our”) is the data controller for personal information collected through impactexplorers.com and our affiliated brand sites (Volunteering Solutions, Med Trips). We are registered in England & Wales. Our registered office is First Floor, 5-6 Chalice Close, Wallington, SM6 9RU, United Kingdom.

For any privacy queries, contact info@impactexplorers.com.

2. What information we collect

We collect personal information you provide directly when you:

Submit an enquiry, proposal request or contact form (name, email, phone, country, programme interest, dates, budget)
Book or pay for a programme (passport details, medical information, emergency contacts, payment details processed by our payment provider)
Subscribe to updates or newsletters
Communicate with us by email, phone, WhatsApp, or social media

We also collect information automatically through cookies and analytics — see our Cookie Policy.

3. How we use your information

To respond to enquiries and prepare custom proposals
To process bookings, payments and provide in-country support
To meet legal, regulatory and insurance requirements
To communicate with you about your programme and any changes
With consent, to send marketing emails about programmes you may be interested in
To improve our website and services (analytics, anonymised)

4. Legal basis (UK GDPR / EU GDPR)

We rely on the following lawful bases:

Contract — to deliver the programme you have booked
Consent — for marketing, optional cookies, and any special-category data (e.g. medical/dietary)
Legitimate interests — to operate our business and improve our services
Legal obligation — to comply with tax, safeguarding and travel regulations

5. Sharing your information

We share personal information only when necessary and with appropriate safeguards:

In-country programme partners and host organisations (only what they need to run your placement)
Hospital/clinical placement supervisors (for Med Trips internships)
Payment processors (Stripe, PayPal) — we never store full card details
Insurance providers, where you have requested travel insurance through us
Service providers (email, CRM, cloud hosting) under data-processing agreements
Authorities, when legally required

We never sell your data.

6. International transfers

As we operate across 24+ countries, some recipients of your data are outside the UK/EEA. Where we transfer data internationally we use the UK International Data Transfer Agreement and the EU Standard Contractual Clauses, or rely on adequacy decisions where they apply.

7. How long we keep your data

Enquiry data: up to 24 months from last contact
Booking and programme records: 7 years (UK accounting and insurance requirements)
Marketing consent: until you unsubscribe
Website analytics: 14 months (then automatically deleted)

8. Your rights

Under UK GDPR you have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion (“right to be forgotten”)
Object to processing or restrict it
Data portability
Withdraw consent at any time
Lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk

To exercise any of these rights, email info@impactexplorers.com.

9. Security

We use industry-standard technical and organisational measures — TLS encryption, access controls, secure CRM, regular backups. No method of transmission is 100% secure, but we work hard to protect your information.

10. Changes to this policy

We may update this policy from time to time. Material changes will be notified by email or a prominent notice on our website.