Privacy Notice
Who We Are
The International Non-Profit Reporting Foundation (INPRF) is a non-profit organization established to develop global financial reporting guidance for non-profit organizations. It continues the work started by the IFR4NPO Project, led by Humentum and CIPFA.
Cookie policy
When you first visit our website, you will be asked to set your cookie preferences. We only place strictly necessary cookies without consent. All other cookies — such as analytics, functional, and marketing cookies — will only be activated if you choose to accept them. You can change or withdraw your consent at any time by selecting “Manage Cookies” in the website footer or via our cookie banner.
We use a Consent Management Platform (CMP) that regularly scans the site and updates a list of cookies in use. You can view the latest cookie declaration, including each cookie’s purpose, duration, and provider, by [linking to the CMP-generated cookie table].
Cookies help us:
- Deliver essential website functions
- Understand how visitors use our site (analytics)
- Improve our services and content
- Provide relevant communications, where consent is given
Privacy policy
1. What Data We Hold
We collect and store:
- Name
- Email address
- Organisation and role
- Country
- Subscription source (e.g., IFR4NPO legacy list or INPRF sign-up form)
For event registrants, we also collect details necessary for event participation (e.g., session selection, attendance status). Event registrants are automatically subscribed to our newsletter. Those who download INPRF publications are also automatically subscribed to our newsletter.
We do not collect sensitive personal data.
2. Why We Use Your Data
We use your data to:
- Send you updates on the progress of non-profit financial reporting standards
- Invite you to events, webinars, and consultation activities
- Keep you informed of opportunities to contribute to or benefit from the work
- Facilitate country-level engagement and coordination through Country Champions
3. Our Lawful Basis for Processing
We process your data under the following lawful bases, depending on how you subscribed:
- Legitimate Interests (Article 6(1)(f)): If you previously signed up to receive communications from the IFR4NPO Project (under Humentum), we process your data to continue delivering similar updates through INPRF. We have conducted a Legitimate Interests Assessment to ensure this processing is fair and does not override your rights.
- Consent (Article 6(1)(a)): If you signed up directly via INPRF’s website, events, or communications channels, we process your data based on your explicit consent. You can withdraw your consent at any time.
Regardless of the basis, you always have control over your preferences.
4. Your Rights
You have the right to:
- Access the data we hold about you
- Correct any inaccuracies
- Object to processing or unsubscribe at any time
- Request deletion of your data
To exercise any of these rights, contact us at: info@inprf.org
5. Data Sharing and Security
We do not share your personal data with third parties for commercial use. Your data is stored securely and only accessible to authorized personnel of the foundation and approved Country Champions.
6. International data transfers
For the purpose of country-level engagement and coordination, information about newsletter subscribers may be shared with the designated Country Champions for each country. Country Champions sign an agreement confirming that they will use the data only in accordance with INPRF’s Privacy Policy.
7. Communication Preferences
You can update your preferences at any time. Every email we send includes an “unsubscribe” link. You may also log into your account or contact us directly to adjust how you would like to hear from us.
8. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including any legal, accounting, or reporting requirements.
- Contact information (such as email addresses) is kept while you remain subscribed to our communications or engaged with our activities. If you unsubscribe or request deletion, we will remove your details from our active lists within 5 working days.
- Event or project participation records may be retained for up to 10 years to meet reporting obligations and maintain accurate organisational history.
- Financial transaction records are retained for 7 years as required by applicable law.
When the retention period ends, we will securely delete or anonymise personal data.
9. Contact
If you have questions or concerns about how your data is handled email: info@inprf.org
If you’re not satisfied, you can also contact your local Data Protection Authority.