GDPR statement.

1. Lawful basis for processing

Intervene Limited (registered in England and Wales, company number 17317647, registered office 71-75 Shelton Street, London WC2H 9JQ) processes personal data on three lawful bases under UK GDPR Article 6:

• Legitimate interests (Art. 6(1)(f)). To respond to professional enquiries directed at the practice, including requests made through the Intervention Readiness Snapshot, and to determine whether an engagement is appropriate. You may object to this processing at any time.
• Performance of a contract (Art. 6(1)(b)). To deliver a contracted advisory engagement to a client organisation.
• Consent (Art. 6(1)(a)). To run Google Analytics where you have accepted the site's cookie notice. You may withdraw consent at any time via "Cookies" in the footer.

2. Data retention

Enquiry data is retained for twelve months from the close of correspondence, then deleted. Engagement data is retained for the duration of the contract and for a period appropriate to professional record-keeping obligations following the close of the engagement, typically six years.

Requests arising from the Intervention Readiness Snapshot are treated as enquiries and follow the twelve-month rule above. Contributions to the Intervention Readiness Index carry no name, email address, organisation or role, and are retained for trend analysis. Because a contribution contains no identifier, an individual contribution cannot be located or deleted on request. That limitation is stated here in advance rather than explained afterwards.

3. Your rights under UK GDPR

• Right of access. A copy of personal data held about you.
• Right of rectification. Correct inaccurate or incomplete data.
• Right of erasure. Subject to legal and contractual record-keeping obligations.
• Right to restrict processing. In defined circumstances.
• Right to object to processing. Available against anything we run on legitimate interests, which is how we handle enquiries, including those arriving through the Snapshot.
• Right to data portability. For data you have provided in machine-readable form.

4. How to exercise your rights

Submit requests via the contact form. We respond within one calendar month, in line with UK GDPR. There is no fee for exercising these rights, save where a request is manifestly unfounded or excessive.

5. Supervisory authority

The supervisory authority for the United Kingdom is the Information Commissioner's Office. If you are dissatisfied with our handling of a request, you may lodge a complaint at ico.org.uk.

6. International transfers

Intervene Limited holds and works with personal data in the United Kingdom. Three transfers outside the UK and EEA occur in the course of running this site.

• Form submissions. Every contact form and Snapshot follow-up is relayed by Formspree, Inc., which is established in the United States. This means the name, email address, organisation, role and free-text message you submit are transferred to the United States as part of delivering them to us. Formspree's processing is governed by its own data processing terms.
• Typefaces. Font assets are served from Google Fonts, which involves a transient transfer of your request, including your IP address, to Google-operated infrastructure.
• Analytics, only where you consent. Google Analytics may transfer usage data to Google-operated infrastructure under the safeguards in Google's data processing terms, being Standard Contractual Clauses and the UK extension to the EU-US Data Privacy Framework. No personal form data is transferred to Google.

A previous version of this statement said personal data was processed only in the UK and EEA. That was wrong for form submissions, which have always been relayed through a United States processor. It is corrected here rather than quietly amended.