CHRB Privacy Statement



This privacy statement sets out how CHRB collects and processes the personal data of individuals outside of CHRB staff, workers and members. It will tell you how we look after your personal data when you visit our website, contact us or take part in our consultations.

CHRB handles a small amount of personal data and does so in compliance with the provisions of the EU General Data Protection Regulation (GDPR) and the UK Data Protection Act 1998.


Data Collection and Processing


CHRB may collect and process the following personal data:

  • Identity data (first and last name)
  • Contact data (address, phone, email, social media handle)
  • Technical data (such as IP address, geolocation - see comments below)
  • Communications preference concerning CHRB Newsletters via MailChimp (see comment below on MailChimp)


You may share personal data with CHRB through multiple means including: visiting the CHRB website, directly contacting CHRB, signing up to our Newsletter or online forms, or by using the AddThis function of our website (see below). CHRB may also collect personal information when you interact with us on sites such as Twitter or LinkedIn.



  • What Are Cookies

As is common practice with almost all professional websites this site uses cookies, which are tiny files containing text data that are downloaded to your computer, to improve your experience. This page describes what information they gather, how we use it and why we sometimes need to store these cookies. We will also share how you can prevent these cookies from being stored however this may downgrade or 'break' certain elements of the sites functionality. For more general information on cookies see the Wikipedia article on HTTP Cookies.

  • How We Use Cookies

We use cookies for certain functions to improve the usability of the website. We may use both “session” cookies and “persistent” cookies on the website. We use the session cookies to keep track of you whilst you navigate the website. We use the persistent cookies to enable our website to recognise you when you visit. Session cookies will be deleted from your computer when you close your browser. Persistent cookies will remain stored on your computer until deleted, or until they reach a specified expiry date.

Unfortunately in most cases there are no industry standard options for disabling cookies without completely disabling the functionality and features they add to this site. It is recommended that you leave on all cookies if you are not sure whether you need them or not in case they are used to provide a service that you use. For more information about cookies and instructions on how to adjust your browser settings to restrict or disable cookies, please see

  • Disabling Cookies

You can prevent the setting of cookies by adjusting the settings on your browser (see your browser Help for how to do this). Be aware that disabling cookies will affect the functionality of this and many other websites that you visit. Disabling cookies will usually result in also disabling certain functionality and features of this site. Therefore it is recommended that you do not disable cookies.


Google Analytics - CHRB uses Google Analytics (GA), which is one of the most widespread and trusted analytics solution on the web, to help us to understand how you use the site and ways that we can improve your experience.These cookies may track things such as how long you spend on the site and the pages that you visit so we can continue to produce engaging content.


Although GA records data such as your geographical location, device, internet browser and operating system, none of this information personally identifies you to CHRB. GA also records your computer’s IP address, which could be used to personally identify you, but Google does not grant us access to this. We consider Google to be a third-party data processor. For more information on Google Analytics cookies, see the official Google Analytics page the Google Analytics Privacy Policy.


AddThis - The CHRB website also uses AddThis which facilitates social sharing of its content. In order to deliver this service AddThis creates cookies which may collect information from visitors, this information does not directly identify an individual and is instead designed to identify the devices used by visitors. You can opt out at any time using the AddThis opt out. (link to CHRB may use similar products in the future to improve communications.


MailChimp - CHRB uses MailChimp as its marketing automation platform. By providing your email address in order to receive CHRB e-newsletters, reports and occasional event updates, you acknowledge that the information you provide will be transferred to MailChimp for data processing in accordance with their Privacy Policy and Terms.


Userfusion – By signing up for our newsletter or completing the ‘Contact Us’ form on the website, the information you provide is also processed via our web developer (Userfusion) in accordance with their own Privacy Policy.

CHRB will retain your personal data for as long as necessary to fulfil the purpose for which we collected it. At a minimum, CHRB will review its personal data every five years to weed out personal data that is no longer necessary to store.


Using Personal Data

CHRB uses personal data to help support its business aim of improving the human rights performance of companies around the world. As a not for profit company with a focus on respecting the rights of individuals, we will always handle your personal data in a way that respects the rights set out in the GDPR:


The GDPR provides the following rights for individuals:

  1. The right to be informed about the collection and use of your personal information.
  2. The right of access, this allows you to be aware of and verify the lawfulness of the processing.
  3. The right to rectification, to have inaccurate personal data rectified, or completed if it is incomplete.
  4. The right to erasure – this is the right to be forgotten, it is not absolute, and only applies in certain circumstances.
  5. The right to restrict processing - it is not absolute, and only applies in certain circumstances.
  6. The right to data portability – this allows you to obtain, reuse and move your personal data in a common format across different services.
  7. The right to object to processing based on legitimate interests, direct marketing and or processing for purposes of research and statistics. (We confirm we do not engage in direct marketing.)
  8. Rights in relation to automated decision making and profiling. We confirm we make no decisions on you using an automated process.

If you would like to exercise any of the above rights, or contact us on a personal data issue, please email us at

In addition to the collection and processing described above, CHRB largely uses personal data to enable communications with individuals and organisations that are interested or involved in human rights as part of the legitimate interests of the company (where those interests are not overridden by your fundamental rights), or where required by legal or regulatory obligations.


CHRB sends occasional invites, reports, updates and newsletters to its database of contacts via MailChimp, on a consent basis. If you receive communication from CHRB and would like yourself removed from our contacts list, please email and we will remove you from future communications. CHRB does not consider generic work emails such as ‘’ to be personal information.


Sharing Data or Changing Purpose

We will only use your personal data for the purposes for which we collected it, unless we consider that we need to use it for another reason and that reason is compatible with the original purpose – for example, CHRB receives an inquiry on a matter that CHRB believes is best dealt with by another similar organisation with a different focus, resulting in CHRB connecting the organisation and the inquirer.

CHRB expects all service providers who we involve in data management to follow the law and the requirements of the GDPR. We will never sell your data to a third party without your permission.


It is possible that CHRB could change governance and become part of another organisation, or wind up. In this case, our database of individuals would be a key item of interest. CHRB would only share this information with another not-for-profit or charitable organisation and will not seek to profit from personal data.


Embedded Content and Third Party Websites

Some of the content on our website and on the CHRB e-newsletter may contain links to third-party websites which are outside our control and are not covered by this Privacy Policy. This includes but is not limited to: Google Maps for interactive mapping, YouTube or Vimeo for hosted video and Flickr for images. When you visit a page containing content from one of these sites a cookie may be set. CHRB is not responsible for the privacy policies or practices of these third-party websites and you should check the relevant third party website for more information about these.



CHRB may make changes to this privacy statement from time to time by updating this page.