New Possible Events Privacy Policy
Last updated: 24th March 2026
Your privacy and confidentiality are really important to us and we are committed to protecting your personal information. This privacy notice applies to your involvement in one of our awards campaigns (including the British HR Awards, British Training Awards, and British Recruitment Awards). If you want to know how we collect and use data when you use our website, please read this notice. Just so that you know, whenever we use the words “New Possible”, “we”, “us”, or “our”, we mean New Possible Research Limited.
In this information notice, we’re going to share with you:
Who we are
We’re a UK based company that believes when people thrive, organisations thrive too. Our flagship awards campaigns discover and celebrate success across the people profession.
What data we collect about you
Personal data means any information about someone who is, or can easily be, identified. It does not include data where the identity has been removed (e.g. statistics).
Information collected directly from you:
We collect the personal data provided to us when:
- Entering our awards - Usually your name, email address, and employer. However, this may also include additional personal data shared within the entry.
- Attending our events - Dietary and accessibility requirements are collected to help tailor your event experience.
- We also capture any contact details and personal data you share with us when you contact us for support.
Our purposes and lawful bases
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:
- Managing award entries and event registrations (including communications about your entry/attendance): Contract (steps to enter into/perform a contract with you).
- Facilitating event logistics: Legitimate interests
- Sharing attendee name and organisation with event partners 14 days before the event to facilitate networking: Legitimate interests. You can object and opt out at any time by emailing privacy@newpossible.io. If you opt out after we have shared your details, we will instruct partners to delete your data. We do not share contact details with partners.
- Dietary requirements and accessibility needs: Explicit consent (special‑category data). We use this information only to support your attendance.
- Compliance and financial record‑keeping (e.g., tax, accounting): Legal obligation.
- Event photography and filming: Legitimate interests (documenting and promoting our events). We provide a no‑photo option at the event and we can remove photos from the event gallery by emailing privacy@newpossible.io.
- Communication following the event: Legitimate interests. We occasionally email entrants and attendees about other New Possible events and related content. You can object and opt out at any time using the unsubscribe link in our emails or by emailing privacy@newpossible.io. Opting out won’t affect essential service emails (e.g., entry confirmations or event logistics).
How long we’ll keep your data for
We’ll only keep your personal data for as long as we need it, to fulfil the purposes we collected it for, including to satisfying any legal, accounting, or reporting requirements.
How we keep your information safe
New Possible is Cyber Essentials certified, which is a Government-backed, industry-supported scheme that helps organisations protect themselves against common online threats. We also perform annual Penetration Testing and receive ongoing advice from a CREST certified Cyber Security Advisor who provides guidance on our cyber security strategy.
When we may share your information with others
We may share some data with the third parties set out below, to allow us to provide our services. All data is processed and stored in the UK and EU:
- Judging panel - We may share your entry with our judging panel. In some instances, this may include an individual’s name, role and employer (if taking part in an individual category, such as ‘Leader of the Year’).
- Event suppliers - We may share your details with key event suppliers, such as the venue, caterers, and printers. This may also include dietary preferences and accessibility requirements.
- Event partners - We may share attendee name and organisation with event partners 14 days before the event as described in 'Our purposes and lawful bases'.
- If we merge with, or are acquired by, a third-party company, we will share, or transfer your personal data with that company so business can operate as usual. If this happens, the new owners may only use your personal data in accordance with this privacy notice.
Your Legal Rights
You have the ability to exercise the following rights over your personal data:
- Request access to a copy of the personal data we have about you, to check that it’s accurate, and that our processing of it is lawful. It’s free to do this, but we may charge a reasonable fee, or refuse to comply, if your request is repetitive or excessive.
- Complete or correct any information about you, but we may need to verify the new data is accurate.
- Request deletion or removal of your personal data. However, we may not always be able to do this, due to specific legal reasons, but we’ll tell you if this is the case.
- Object to the processing of your personal data, if your circumstances mean we’re impacting your rights too much. But we may investigate to find out whether our interests override your rights.
- Request we temporarily stop processing your personal data (a) if you want us to show the information is accurate; (b) where our use of the data is unlawful but you don’t want us to delete it; (c) where you need us to hold the data because you need it for a legal claim; or (d) you have objected to our use of your data but we need to work out whether we have legitimate grounds to use it.
- Withdraw consent at any time, where we’re relying on consent to process your data. If you withdraw your consent, we may not be able to provide certain services to you. We’ll advise you at the time, if this is the case.
In addition to the rights listed above, you may request data portability (to receive certain information in a structured, commonly used and machine‑readable format and have it transmitted to another controller where technically feasible). We do not make decisions based solely on automated processing that produce legal or similarly significant effects about you.
Exercising your rights:
If you want to exercise any of your rights, please contact us. We may need further information about your request, or to confirm your identity, before we take action.
We try to respond to all requests within one month. If requests are complex or you have made more than one, we may notify you that it’ll take longer than a month to process.
The right to complain
You have the right to complain to the Information Commissioner’s Office (“ICO”), the UK’s supervisory authority for data protection issues (www.ico.org.uk). However, we’d appreciate the chance to deal with any concerns before involving the ICO, so please contact us.
Changes to this Privacy Notice
This Privacy Policy was last updated on the date indicated at the top of this page. This notice supplements the other notices we may issue from time to time, and is not intended to override them.
This Privacy Notice may be updated occasionally, in line with changes to the law or our practices. Please regularly check this notice for changes, as we will only directly notify you, via email, when we want to make significant changes to the way we collect, store or process your data.
How to Contact Us
You can contact us by emailing privacy@newpossible.io, or by posting to:
Privacy at New Possible Research Limited
Office 10, Merseyway Innovation Centre,
Stockport,
SK1 1PN
