mail

Privacy Policy

This Privacy Policy outlines the manner in which we collect, use, and manage your personal data. It also explains your rights regarding your data and provides guidance on how you may exercise control over the ways in which the Prosperity Institute Limited uses your information. This webpage outlines the steps you can take to alter how your data is processed.

Who We Are

Prosperity Institute Limited is a private limited company incorporated in England and Wales (company number 14543238). For the purposes of this Privacy Policy, references to “the Company,” “we,” or “us” refer to Prosperity Institute Limited.

Prosperity Institute Limited is wholly owned and operated by the Legatum Group. In accordance with our legitimate business interests and as permitted under Article 6 Paragraph 1 Clause 1(f) of the General Data Protection Regulation (GDPR), certain data may be shared between Prosperity Institute Limited and the Legatum Group to facilitate the efficient operation of the Company.

The Purpose for Collecting Your Information and the Categories of Data We Collect

In pursuit of our mission to advance prosperity through research, policy, and educational initiatives, we routinely collect information from individuals who engage with our organisation. The collection and processing of personal data is essential to ensure the effective delivery of our services and the fulfilment of our objectives.

We may collect and process data relating to individuals who:

  • Attend events hosted by the Company, whether on our premises or at external venues;
  • Participate as speakers or panellists in events and activities organised by us;
  • Contribute to our research endeavours;
  • Attend meetings with our staff members;
  • Subscribe to our newsletters or opt in to receive regular updates;
  • Rent or use office or desk space within our facilities;
  • Engage in any of our external facing programmes e.g., The Edington Fellowship;
  • Engage in any of our external facing campaigns.

How We Obtain Your Data

There are two ways in which we obtain data:

  • Directly from you: The majority of personal information we hold has been provided directly by you when engaging in one or more of the activities described above.
  • From third-party and public sources: In certain circumstances, we may supplement information you provide with additional data from reputable external sources. This may include enhancing or verifying contact details, appending social, economic, financial, or demographic information, or conducting appropriate due diligence to protect the Company’s assets and reputation in the context of significant financial transactions. Data sources may include publicly accessible records such as media coverage (including social media), directories (e.g., telephone directories, the Royal Mail’s National Change of Address database), Companies House, and sector-specific audience segmentation data. We may also acquire information about individuals new to our organisation, for example, if an existing contributor recommends that we contact you regarding potential involvement with the Company.

What We Do With Your Data

The primary purpose of us processing your data is to send you information about the Company, primarily in the form of invitations to events, newsletter updates, and adding you to our Substack mailing list. Other uses include but are not limited to:

  • Disseminating information to you regarding the Company and its activities;
  • Providing details and managing arrangements for events, including the administration of event attendance;
  • Managing membership schemes and related participation;
  • Administering internship opportunities and related educational programmes;
  • Developing and maintaining engagement with the Company through targeted marketing activities;
  • Managing our relationship with you in your capacity as a contributor to Company events or initiatives;
  • Administering and responding to correspondence with you;
  • Ensuring compliance with our legal and regulatory obligations.

Information We Collect

We collect and process the following categories of personal information:

  • Name(s);
  • Addresses;
  • Email addresses;
  • Telephone numbers and preferred contact details;
  • Records of event attendance;
  • Technical data related to your visits to our website or applications, or in connection with digital communications and materials we provide;
  • Social media interactions relating to the Company (e.g., engagement with our X/LinkedIn profiles);
  • Work experience records;
  • Photographs and audio/video recordings produced at our events, as well as related information;
  • Details regarding our relationship with you, including correspondence and meeting notes;
  • Occupation, skills, professional activities, affiliations, and interests as relevant to our operations;
  • Financial information, where necessary for our purposes; and
  • Any other information you may provide to us that is relevant to our relationship.

Profiling

We may use your data to group together people who have behaved or might behave in similar ways. For example, we might find that people who had been to certain events were likely to come to similar events or be interested in similar areas of research. If this was the case, then we might “tag” your record to remind us to include you in invitations to similar events or to assess the likelihood that you might come to another type of event. We might carry out similar processes to help us target our marketing.

You have the right to ask us not to do this. If you would prefer us not to, then please contact us using any of the contact details below.

Protecting Your Data

We keep your data secure in our database with appropriate security mechanisms in place.

We may share your personal data with other organisations where it is necessary for the purpose for which you have given us the data or described in this notice. Examples are given below:

  • We will provide information to HMRC where we are under a legal obligation to do so.
  • We may share basic information on the attendees at an event or function or meeting with the host or members of the Company’s staff.
  • We may pass data to other organisations, known as Data Processors, to provide specific services to us. Contracts are always in place with any Data Processor that the Company uses, which specifically disallows the Data Processor from using your data in any way other than that which we have requested. In the instances where a Data Processor is used, we always retain legal control of your data.

Our Responsibilities

We are legally obliged to inform you of the basis upon which we process your personal data.

Certain activities require your explicit consent. For example, we will only send you news and event invitations by email, or share your information with third parties for these purposes, upon your prior express consent. Where the law mandates consent for particular forms of data processing, we will ensure such consent is obtained prior to carrying out these activities.

In other cases, processing is necessary to fulfil a contract or agreement. If a contractual relationship exists, we process your data in accordance with the terms of that contract.

Further, there are circumstances in which legal obligations require us to disclose your information to third parties.

In all other cases, and where not dictated by our public obligations, we process your data on the basis of our legitimate interests. We may only do so where we can demonstrate a valid business need, and provided that such processing does not override your interests or fundamental rights and freedoms. Before proceeding, we conduct an assessment to ensure that our data processing will not cause you harm, is not unduly intrusive, and is carried out in line with this Privacy Policy.

How Long We Keep Your Data For

We will keep data for as long as is needed to complete the task for which it was collected. Should you wish to remove your data from our database, you can request this, and your data will be removed no later than one day following acknowledgement of receipt of the request.

Your Rights

Your rights regarding the processing of your personal data are outlined below:

  • Withdrawal of Consent: Where our use of your data is based on consent, you may withdraw that consent at any time.
  • Objection to Processing: Where processing is based on our legitimate interests, you have the right to request that we cease such processing.
  • Access: You are entitled to request a copy of the personal data we hold about you.
  • Profiling: If we undertake profiling activities, you may request that these be discontinued in relation to your data.
  • Communication Preferences: You may amend or restrict the manner in which we communicate with you or process your personal data at any time. If the data is no longer required for the purpose for which it was provided, we will cease its use immediately.
  • Complaints: Should you be dissatisfied with our handling of your personal data, you have the right to lodge a complaint with the Office of the Information Commissioner, to whom we are registered.

Contacting us

If you have any questions about this Privacy Policy, about the way in which we process your data, or if you wish to change the way we use your data, including how we communicate with you, then please contact us:

By post: Operations Manager, Prosperity Institute Limited, 11 Charles Street, London, W1J 5DW

By email: info@prosperity.com

By phone: +44 207 148 5400

Created Date

01/04/2023

Last Reviewed On

11/08/2025