Involve Interpreter Privacy Notice 

This Privacy Notice explains how Involve Visual Collaboration Ltd (“Involve”, “we”, “us”, “our”) collects, uses, and processes personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and applicable UK data protection law. 

We are committed to processing personal data lawfully, fairly, transparently, and securely. 

Who are we? 

Involve Visual Collaboration Ltd provides secure remote interpretation services, including British Sign Language (BSL) and spoken language interpretation, delivered via videoconferencing and a single point of access to qualified interpreters. 

For the purposes of data protection law: 

  • We act as a data processor when providing Involve Interpreter services on behalf of our customers (who are the data controllers).  

Registered office: 
Martin Dawes House, Europa Boulevard, Westbrook, Warrington, WA5 7WH 

The Information we Collect 

We collect and process personal data strictly as necessary to deliver Involve Interpreter services. The categories of data collected depend on the services used.

Services 

British Sign Language (BSL) and Spoken Language Service

When you use Involve Interpreter services, we may process the following categories of personal data: 

· Identity Data

includes [first name, last name, username or similar identifier and gender].

· Contact Data

includes [billing address, email address and telephone numbers].

· Transaction Data

includes [service usage, booking & payment information].

· Technical Data

includes [includes IP address, login details, browser type, device and system information].

· Profile Data

includes [includes preferences, feedback and usage history].

· Usage Data

includes [information about how you use our website, products and services].

· Marketing and Communications Data includes [your communication preferences].

These services can be accessed via our Booking Portal within the Involve Interpreter website.

 

Booking portal 

Our interpretation services are accessed via the Involve Interpreter booking portal. Personal data submitted through the portal is processed solely for the purpose of delivering booked services. 

Website usage & Cookies

We collect personal data via our websites to: 

  • analyse usage and performance,  
  • provide information about our services, and  
  • respond to enquiries.  

This includes data collected through cookies and similar technologies. 

We rely on: 

  • consent for non-essential cookies; and  
  • legitimate interests for website analytics and enquiry handling.  

Further information is available in Cookie Policy | Involve. 

Helpdesk/Customer Support

We operate a customer support service to assist users. Calls to our helpdesk may be recorded for quality assurance, training, and service improvement purposes. 

  • Recordings are stored securely in the UK  
  • Retention period: up to 3 months  

This processing is based on our legitimate interests. 

Videoconferencing services

Our videoconferencing services are designed to ensure secure communication: 

  • All transmissions are encrypted in transit  
  • No call content (audio, video, or images) is stored  
  • No data is retained after the session ends  

Monitoring, Reporting and Service Improvement

We monitor service usage to: 

  • maintain and improve service quality,  
  • ensure system performance and security, and  
  • provide service reports to customers.  

We may also generate aggregated reports to demonstrate service usage and value. 

This processing is carried out under legitimate interests and/or contractual necessity.

 

Marketing and Market Research

We may use business contact information to: 

  • provide updates about Involve Interpreter services, and  
  • conduct limited business-to-business marketing and market research.  

We rely on legitimate interests and ensure: 

  • communications are relevant and proportionate, and  
  • individuals can opt out at any time.  

We do not sell personal data or share it with third parties for their own marketing purposes.

Third Parties and Service Providers  

We use carefully selected third-party providers to support service delivery: 

Service Providers 

  • SendGrid (Twillio) – email notifications and alerts 
  • Redcentric PLC – secure hosting, connectivity, and data centre services however, they have no access to any of your organisation’s data. 

Their privacy notice can be seen here https://www.redcentricplc.com/privacy-and-cookie-policy/  

All providers act under written contracts and are required to: 

  • process data only on our instructions,  
  • maintain appropriate security measures, and  
  • delete or return data when no longer required

International Transfers

Where personal data is transferred outside the UK (e.g. SendGrid in the US), we ensure appropriate safeguards are in place, including: 

  • the UK–US Data Bridge / UK Extension to the EU–US Data Privacy Framework, and  
  • appropriate contractual data processing agreements.  

These safeguards ensure an adequate level of protection in line with UK GDPR requirements

Data Storage

Personal data is stored securely on UK-based servers and approved cloud infrastructure providers. 

Data Retention

We retain personal data only for as long as necessary to: 

  • deliver services,  
  • meet legal and regulatory obligations, and  
  • comply with contractual requirements.  

Retention periods vary depending on service type and legal requirements.

Your rights  

Under UK data protection law, you have the following rights:

  • Right to be informed  

 

  • Right of access  

 

  • Right to rectification  

 

  • Right to erasure (in certain circumstances)  

 

  • Right to restrict processing  

 

  • Right to data portability  

 

  • Right to object  

 

  • Rights related to automated decision-making and profiling  

 

  • Right to withdraw consent (where applicable)  

Where we act as a data processor, requests should be directed to the relevant data controller (your organisation). We will assist controllers in responding to such requests. 

 

Lawful Basis for Processing Your Information 

We process personal data under the following lawful bases: 

  • Contract – to deliver Involve Interpreter services  
  • Legitimate interests – to operate, secure, and improve services and for limited B2B marketing  
  • Legal obligation – where required by law  
  • Consent – for non-essential cookies and certain marketing activities

Security of Information

We maintain an ISO 27001-certified Information Security Management System and implement appropriate technical and organisational measures, including: 

  • access controls and authentication,  
  • encryption of data in transit,  
  • secure hosting environments, and  
  • monitoring and audit logging.  

These controls are designed to protect against unauthorised access, loss, alteration, or disclosure of personal data. 

Data Protection Officer

If you wish to exercise your rights or raise a concern, please contact: 

Data Protection Officer 
Involve Visual Collaboration Ltd 
Martin Dawes House, Europa Boulevard 
Warrington, WA5 7WH 

Email: DPO@Involve.vc 
Tel: 01925 918187 

We may request proof of identity before processing your request. 

We may also contact you for clarification to ensure we respond accurately and securely. 

Complaints

If you are dissatisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO): www.ico.org.uk 

We would appreciate the opportunity to address your concerns before you contact the ICO. 

 

.