Last updated: 29/07/2026
ELECT Social Value Exchange ("ELECT", "the platform", "we", "us", "our") is operated by Elect Social Value Exchange Ltd, a company registered in England & Wales (company number 12457674), registered office 8 Knowl Road, Mirfield, West Yorkshire WF14 8DQ.
We are the data controller for the personal data described in this notice. We are registered with the Information Commissioner's Office (ICO) under registration number 00014959470.
For any privacy question, or to exercise your rights, contact our data protection lead: Neil Barrett — privacy@elect.group — 8 Knowl Road, Mirfield, West Yorkshire WF14 8DQ.
This policy is written to comply with the UK GDPR and the Data Protection Act 2018.
ELECT connects four parties in the social value chain — councils, clients (contractors), delivery partners, and venue (network) partners — and supports the delivery and reporting of social value programmes. This notice covers personal data we process about:
ELECT holds information about partner organisations and their staff, business enquiries, and the aggregate outcomes of delivered programmes. We do not hold personal data about individual programme participants or beneficiaries — that data stays with the delivery partners who run the programmes.
| Category | Examples | Source |
|---|---|---|
| Account & profile | Name, work email, job title, organisation, role, login credentials (passwords are stored hashed), last login | You / your organisation |
| Organisation & billing | Organisation details, logo, subscription plan, billing status. Card details are handled directly by Stripe — we do not store them. | You; Stripe |
| Enquiries | Name, organisation, email, enquiry type, and any message you send us via the contact or partner‑interest forms | You |
| Delivery & outcomes | Records of the offerings delivered and the outcomes achieved for a programme, held at an aggregate level. We do not hold records about individual participants. | Delivery partners |
| Technical & usage | IP address, browser/device information, and session information needed to keep you signed in and keep the service secure | Automatically |
We only collect what we need to run the exchange and evidence social value.
| What we do | Purpose | Lawful basis (UK GDPR Art. 6) |
|---|---|---|
| Create and manage accounts; provide the platform | Deliver the service you or your organisation signed up for | Contract |
| Take subscription payments | Bill for the service | Contract; Legal obligation (accounting) |
| Respond to enquiries and notify our team (including via an internal Google Chat channel) | Handle your request | Legitimate interests (responding to people who contact us) |
| Match offerings to council priorities using AI (see §9); recommend and compose plans | Provide the platform's core matching features | Contract; Legitimate interests |
| Record delivery and outcomes; generate social value reports | Evidence delivered social value for contracts | Contract; Legitimate interests |
| Assess delivery‑partner applications | Onboard partners | Contract; Legitimate interests |
| Keep the platform secure, prevent misuse, maintain logs and backups | Security and integrity | Legitimate interests; Legal obligation |
| Keep records for tax and accounting | Comply with law | Legal obligation |
Where we rely on legitimate interests, we have balanced our interests against your rights; you can ask us for details of that assessment.
We do not sell your data. We share it only with:
Other parties to a programme where necessary — e.g., a council receives social value impact reports for contracts it has awarded; a contractor sees the delivery partners fulfilling its plan.
Our service providers (sub‑processors), who process data on our instructions under contract. Based on how the platform is built, these currently include:
| Provider | Purpose | Location |
|---|---|---|
| Microsoft Azure | Cloud hosting and database | UK South |
| Stripe | Payment processing | US / global |
| Anthropic (Claude API) | AI matching/scoring of offerings against council priorities | US |
| Google (Workspace, Google Chat) | Email and internal enquiry notifications | US / global |
| Resend (resend.com) | Sending transactional email | US |
This list must be verified and a DPA confirmed with each provider. Note that our web pages load fonts and libraries from third‑party CDNs (Google Fonts, jsDelivr), which may receive your IP address when pages load.
Authorities, regulators or advisers where we are legally required to, or to establish/defend legal claims.
We use a small number of strictly necessary cookies to keep you signed in (an authentication session cookie, currently around an 8‑hour sliding session) and to keep the service secure. These do not require consent.
We do not currently use advertising or analytics cookies.
Some of our providers (e.g., Anthropic, Stripe, Google) are based outside the UK, including in the United States. Where personal data is transferred outside the UK, we rely on appropriate safeguards such as UK adequacy regulations, the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, together with additional safeguards where needed. You can ask us for more detail.
We keep personal data only as long as necessary:
| Data | Indicative retention |
|---|---|
| Account & profile | While your account is active, then up to 12 months |
| Financial / invoicing | 6 years (tax/accounting law) |
| Enquiries | Up to 24 months if not taken forward |
| Delivery & outcomes (aggregate) | Per funder / contract requirements |
| Security logs & backups | 24 months |
ELECT uses AI (via the Anthropic Claude API) to score how well offerings align with a council's published social value priorities and to help compose plans. This processing is about offerings and organisational priorities, not about you as an individual, and it does not make automated decisions that produce legal or similarly significant effects about individuals under Article 22 of the UK GDPR.
We use technical and organisational measures including encrypted connections (HTTPS), hashed passwords, role‑based access control, and access restricted to those who need it.
Under UK data protection law you have the right to:
To exercise any right, contact us at privacy@elect.group. We will respond within one month.
If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO) — ico.org.uk, helpline 0303 123 1113 — though we'd ask you to contact us first so we can try to put things right.
We may update this policy from time to time. The "last updated" date at the top shows the latest version, and we will tell account holders about significant changes.
Elect Social Value Exchange Ltd — 8 Knowl Road, Mirfield, West Yorkshire WF14 8DQ Privacy contact: privacy@elect.group