Privacy notice

Best CSR Ltd, a company registered in England and Wales, is the data controller for personal data submitted through this website. Data protection questions go to privacy@bestcsr.co.uk.

• Enquiries and tool results. When you submit the social value estimator, the readiness check, an enquiry form or a grant application, we record your name, your organisation where you give one, your work email address, the answers or figures you entered, and the fact and time of your consent.
• Sponsor portal accounts. If you are given access to the sponsor portal, we hold your account email and the evidence files and application details you upload.
• Staff accounts. Colleague accounts used to administer the site hold an email address and a role.
• Page statistics. We record the page address visited, whether it was the first page of the visit, and the domain that referred you. We do not record IP addresses, device identifiers or anything that names you.

Enquiry and tool data is used only to reply to you and, where you asked for it, to send a copy of your results. Our lawful basis is your consent, given by ticking the consent box before you submit. Sponsor portal data is processed to run the sponsorship and evidence process, on the basis of our contract or steps taken at your request. Page statistics are processed on the basis of our legitimate interest in understanding which pages are useful, and are aggregated rather than linked to an individual.

We do not sell your data, and we do not share it for advertising.

The website, database, file storage and sign-in are hosted on managed cloud infrastructure operated by our technology providers on our behalf. Notification emails about your enquiry are sent to our own team through an email delivery provider. These providers act on our instructions only.

Enquiry and tool records carry a deletion date of 24 months from the moment they are created, and a scheduled job deletes expired records automatically each night. Sponsor portal records are kept for the life of the sponsorship and for as long as we must evidence it. You can ask for earlier deletion by emailing privacy@bestcsr.co.uk.

You can ask for access to, correction of, or deletion of your personal data, ask us to restrict or stop using it, ask for a portable copy, and withdraw consent at any time without affecting earlier lawful processing. See data protection and your rights for how to make a request and how to complain.

This site sets no advertising or tracking cookies; see the cookie policy. Where the tools use an automated calculation, we explain it in the AI transparency statement. No automated decision is made about you.