The Challenges Group is a family of organisations made up of:
- Challenges Catalyst Ltd (SC377928) – the UK delivery team of Challenges Group
- Our regional delivery teams, which deliver and implement our programmes in each respective country: Challenges Ghana, Challenges Malawi, Challenges Rwanda, Challenges Tanzania, Challenges Uganda, and Challenges Zambia
Challenges Worldwide Limited (SC193890 / SC028814) – charity and strategic partner of The Challenges Group
Our UK offices are at 5–7 Montgomery Street Lane, Edinburgh, EH7 5JT. Challenges Catalyst Ltd and Challenges Worldwide Limited, referred to as “we” or “us”, are the data controller for information collected through our websites and any of our UK social media accounts: https://www.thechallengesgroup.com/ https://www.theventureslab.com/ https://www.makingworkwork.scot/
Our overseas teams act as delivery and implementation partners, and may act as processors or joint controllers depending on the programme and specific funder requirements. If a different entity is acting as the controller for a specific programme, we will make this clear at the point of data collection.
We are committed to keeping your personal information safe, being transparent about how we use it, and giving you clear choices and control. Any personal data you give us directly on this website will be processed in accordance with this policy unless we tell you otherwise at the time of collection. If you have questions or wish to change how we contact you, please email admin@thechallengesgroup.com.
This policy outlines how we collect, use, store, and protect personal information when you:
- visit our websites
- complete a contact form
- register to receive content from us
- apply to join one of our programmes
- engage with The Ventures Lab, Making Work Work, or any future Challenges Group programme via each respective website
- interact with us by email, phone, or social media
Information you provide us
Our website collects information that you provide us with directly, which may include:
- your full name
- email address
- phone number
- organisation (if applicable)
- programme interests information submitted through forms or enquiries
If you apply to join a programme, we may also collect:
- demographic information
- any support requirements or adjustments
- application responses
- monitoring and evaluation data
We only ask for information that is relevant to your enquiry or participation.
Information collected automatically
We use Google Analytics 4 to understand how visitors use our websites, helping us improve the quality of our content and your experience.
When you visit our websites, we collect:
- IP address device and browser information
- approximate location pages visited and interactions cookie preferences
You can amend your cookie consent on our website at any time by clicking the blue circular cookie icon in the bottom left of any page.
Information stored in our CRM
We use Monday.com (registered company number 12855633) as our Customer Relationship Management (CRM) system. Under data protection law, Monday.com is considered a data processor.
For more information on how Monday.com processes and manages data on our behalf, please visit the Monday.com Privacy Policy.
If you contact us directly, apply to, or participate in a programme, your information may be stored in our CRM, including:
- contact details
- communication history
- programme involvement
- notes relevant to your enquiry or participation
We use your data for the following purposes:
- to provide and maintain our website and services
- to respond to your enquiries, requests, or comments
- to analyse and improve our website’s performance and user experience
- to send you updates or news about any initiatives or campaigns you have shown interest in or become involved with
We will not sell or share your personal information with third parties for their marketing purposes. We may, however: - share your data with service providers who assist in the operation of our website and communication systems, or who work with us on initiatives and campaigns
- disclose your information if required by law, court order, or government regulation
Some Challenges Group programmes involve administrative support from staff based in our overseas offices, including Challenges Uganda. Where this occurs, staff access our UK-hosted systems – including Microsoft SharePoint and the CMI platform – remotely. Personal data remains stored on UK-based infrastructure at all times and is not transferred to or stored in any overseas country as part of this process.
Staff with remote access to our systems are required to work within those approved platforms and are not permitted to download, copy, or store personal data on local devices. This ensures that your personal data remains within UK infrastructure and under our control.
Where the nature of a programme requires personal data to be shared with an overseas office in a way that goes beyond remote system access, we will make this clear to you at the point of data collection and ensure that appropriate safeguards are in place.
We take reasonable measures to protect your personal information from unauthorised access, disclosure, alteration, or destruction. However, no method of data transmission over the internet or electronic storage is completely secure.
You have the right to:
- request a copy of the data we hold about you
- access, correct, or delete your personal information
- opt out of receiving marketing communications from us
- disable cookies through your browser settings
We may update this policy to reflect changes in our work or for legal reasons. We will notify you of these changes by posting the updated policy on our website, including the date the policy was updated.
If you have any questions or concerns about our Privacy Policy, or would like to see our full data protection policy, please contact us at admin@thechallengesgroup.com.
