This policy applies to all personal data, visual media, and other information collected, processed, stored, and shared in connection with the services we provide to our clients, including data from stakeholders involved in these projects and initiatives. This policy is in compliance with applicable data protection laws, including but not limited to the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and any other relevant regulations.

​

We collect both qualitative and quantitative data from a variety of stakeholders, including, but not limited to, employees, partners, clients, and beneficiaries of our clients' initiatives. Additionally, we capture visual media, including photographs and videos. The types of data we collect may include:

• Personal data: names, contact details, job titles, and other identifiers.

• Quantitative data: survey results, metrics, statistics, and performance indicators.

• Qualitative data: interview responses, feedback, opinions, and open-ended survey responses.

• Visual media: photographs and videos captured during data collection.

• Technical data: IP addresses, browser types, and user behaviour on our online dashboard hosted by Bubble.

​​

We collect and process data strictly for the purpose of providing services to our
clients. This includes:

• Conducting analyses on the social impact of projects and initiatives.

• Creating reports and visualisations for our clients.

• Sharing insights with clients through our secure online dashboard.

• Creating downloadable photo and video content for client use.

• Developing social media posts and short documentaries to showcase the impact of our clients' projects.

​​

All media files (photographs and videos) created during our consultancy work remain the property of Yarra 1 Consultancy Ltd, although we will only use them for other purposes (e.g., promotional materials) with the explicit consent of the client.

​

We collect data through the following methods:

• Surveys and questionnaires: distributed electronically to stakeholders.

• Interviews and focus groups: conducted with stakeholders.

• Photographs and videos: taken during the data collection process to document project impact.

• Online sashboards: used to display reports and insights from our analysis.

​

We process data based on the following legal grounds:

• Consent: we seek explicit consent from all individuals whose personal data and visual media we process.

• Contractual necessity: data is processed as required to fulfil the contractual agreements we have with our clients.

• Legitimate interest: in certain cases, we may process data to fulfil our legitimate business interests, such as improving our services, provided that these interests do not override individuals' privacy rights.

​​

We do not sell, rent, or trade any personal data with third parties. We may share
data under the following circumstances:

• With our clients: data, photographs, and videos collected and processed on behalf of a client are shared with that specific client for the purposes of project evaluation and reporting.

• Service providers: We may share data with trusted third-party service providers (such as Bubble.io) that assist in hosting and maintaining our online dashboard, provided that they comply with strict confidentiality and data protection obligations.

• Legal requirements: we may disclose data when required to comply with legal obligations, enforce our agreements, or protect our rights, property, or safety.

​​

We are committed to ensuring that all data is stored securely and protected against unauthorised access, loss, or disclosure. We implement robust security measures, including but not limited to:

• Encryption: all personal data, including photographs and videos, stored and transmitted is encrypted to protect it from unauthorised access.

• Access controls: access to data and media files is restricted to authorised personnel only, and we use strict authentication procedures to ensure data security.

• Data minimisation: we limit the amount of personal data and visual media collected to only what is necessary for the purposes of our consultancy services.

​​

Data is stored on secure servers, and we use reputable cloud service providers that comply with data protection regulations.

​​

We retain personal data and media files only for as long as is necessary to fulfil the purposes for which they were collected or as required by law. Upon completion of our services or at the end of our contractual relationship, personal data and media files will be securely deleted, anonymised, or returned to the client, unless otherwise required by law.​

​

It is the responsibility of our clients to ensure that any data shared with Yarra 1 Consultancy Ltd is collected in compliance with applicable laws, including securing consent from stakeholders where necessary. Yarra 1 Consultancy Ltd is not responsible for verifying the legality of data collection by the client.

​

All photographs, videos, and other visual media created during the data collection process remain the exclusive property of Yarra 1 Consultancy Ltd. We provide clients with access to these media files, which may be downloadable for their own use, including social media posts and promotional materials. However, Yarra 1 Consultancy Ltd will not use, distribute, or publish these media files for any other purpose without the explicit consent of the client. This includes promotional use on our own channels, social media, or website.

​​

Individuals whose data we collect and process have the following rights:

• Right to access: you have the right to request access to your personal data.

• Right to rectification: you can request correction of any inaccurate or incomplete data we hold about you.

• Right to erasure: under certain conditions, you can request the deletion of your personal data and visual media.

• Right to object: you may object to the processing of your personal data in certain circumstances.

• Right to data portability: you have the right to request that we transfer your data to another organisation in a structured, commonly used, and machinereadable format.

• Right to withdraw consent: Where data and media are processed based on consent, you have the right to withdraw your consent at any time.

 

To exercise any of these rights, please contact us at info@yarra.one, We will respond to your request in accordance with applicable data protection laws.

​

While we implement strict security measures to protect personal data and media files, Yarra 1 Consultancy Ltd shall not be held liable for any unauthorised access, data breaches, loss, or damage caused by factors beyond our reasonable control, including but not limited to hacking, theft, or misuse of data and media by clients or third parties.

​

Clients agree to indemnify, defend, and hold harmless Yarra 1 Consultancy Ltd from any and all claims, damages, losses, liabilities, and expenses (including legal fees) arising out of or related to the client’s breach of this policy, violation of applicable laws, or misuse of data and media files provided to Yarra 1 Consultancy Ltd.

​

As we use cloud-based services, data and media may be transferred and stored outside of your country of residence. In cases where data is transferred internationally, we ensure that appropriate safeguards are in place to protect your data, such as standard contractual clauses or other legally accepted mechanisms.

​

In the event of a data breach that is likely to result in a risk to the rights and freedoms of individuals, we will promptly notify affected clients and the Information Commissioner’s Office (ICO) within 72 hours of becoming aware of the breach, unless the breach is unlikely to result in a risk to the rights and freedoms of individuals.

​

We utilise third-party service providers, such as Bubble, to store and process data and media files. These providers are carefully selected and required to comply with data protection regulations. However, Yarra 1 Consultancy Ltd shall not be held liable for any security or privacy breaches resulting from actions or inactions of thirdparty service providers.

​

Where Yarra 1 Consultancy Ltd processes personal data on behalf of clients, a separate Data Processing Agreement (DPA) shall be in place to govern the processing activities and ensure compliance with applicable data protection laws.

​

Clients are responsible for ensuring the accuracy, completeness, and legality of the data and media files provided to Yarra 1 Consultancy Ltd. We shall not be held liable for any issues arising from inaccurate, incomplete, or unlawful data or media provided by clients.

​

This Data Privacy Policy and any related disputes shall be governed by and construed in accordance with the laws of England and Wales. Any disputes arising under this policy shall be subject to the exclusive jurisdiction of the courts in London, United Kingdom.

​

Our online dashboard may use cookies or other tracking technologies to enhance user experience and collect certain technical data. Users can control their cookie preferences through their browser settings.

​

We reserve the right to update or modify this Data Privacy Policy at any time. Any changes will be communicated to clients and other stakeholders via our website or through direct communication channels. The date of the latest revision will always be indicated at the top of this policy.

​

If you have any questions or concerns regarding this Data Privacy Policy or our data practices, please contact us at Info@yarra.one. By engaging with our services, you acknowledge that you have read and understood this Data Privacy Policy and consent to the collection, use, and processing of data and media as described herein.

​