We are Mētis ((the trading name for Global Partners Governance Practice Ltd (company number 8435805) and Global Partners Foundation Ltd (company number 12533227)). 

Under data protection law, we are a data controller, which means that we determine how and why your personal information is used. This Privacy Notice explains how we collect, use and protect your personal information, and your rights in relation to it. 

Mētis is committed to protecting your privacy. We aim to respect any personal information you share with us, or that we receive from other organisations, and to keep it secure at all times. 

This Notice applies to personal information collected through our website and through our work and interactions with you. 

What is personal information? 

Personal information means any information relating to an identified or identifiable individual. This includes, for example, your name, email address, and IP address. 

How we collect personal information 

We may collect personal information about you in the following ways: 

• When you provide it directly – For example, when you contact us, sign up for updates, apply to work with us, or otherwise engage with our services. 
• When we receive it indirectly – For example, from partners, service providers, or publicly available sources. Where appropriate, we will inform you how and why we intend to use your information. 
• When you use our website – We automatically collect certain technical and usage information, including: IP address, browser type and version, time zone setting, pages visited and interactions 

We also use cookies – please see our Cookie Notice for further details. 

What personal information we use 

We may collect and process the following types of personal information: 

• Name and contact details (e.g. email address) 
• Professional information (e.g. role, experience, organisations you work with) 
• Location (e.g. country of work) 
• Technical data (e.g. IP address, website usage) 
• Information you provide through communications or applications 
• Any other personal information you choose to share 

 Special category data 

In limited circumstances, we may process special category data (such as information relating to political views or affiliations), where this is necessary for our work and permitted under data protection law. 

Where we do so, we will ensure that: 

• there is a valid lawful basis for processing under Article 6 of the UK GDPR  

• a relevant condition for processing special category data under Article 9 of the UK GDPR is met (for example, explicit consent, where processing is necessary for reasons of substantial public interest, or where carried out by a not-for-profit body in the course of its legitimate activities)  

• appropriate safeguards are in place to protect the data and the rights of individuals 

Why we use your personal information 

We use your personal information to: 

• Provide services, advice and information you request 
• Communicate with you and respond to enquiries 
• Manage relationships with clients, partners and networks 
• Deliver events, training and programmes 
• Improve our services, website and communications 
• Monitor and report on our work and impact 
• Process applications for roles or collaboration 
• Comply with legal and regulatory obligations 
• Prevent fraud or misuse of services 

Lawful bases for processing 

Under UK GDPR, we rely on the following lawful bases: 

Consent – where you have agreed to specific uses (e.g. receiving updates) 

Contract – where processing is necessary for a contract with you 

Legal obligation – where we must comply with legal requirements 

Legitimate interests – where processing is necessary for our work, provided this does not override your rights. Our legitimate interests include operating and developing Mētis, delivering our services, and supporting our work in governance and institutional development. Examples include:  

• managing our relationships with clients or partners  

• responding to enquiries and communications 

• improving our services, website and outreach 

• ensuring the security of our systems and preventing misuse  

You have the right to object to processing carried out on this basis (see “Your Rights” below).  

Marketing communications 

We may use your contact details to send you information about our work, events and publications. 

Where required by law, we will only do this with your consent. You can withdraw your consent at any time by: 

• clicking “unsubscribe” in emails 
• contacting us directly 

How long we keep your information 

We retain personal information only as long as necessary for the purposes for which it was collected. 

As a general rule, we retain personal information for up to six years, unless: 

• it is no longer needed sooner 

• we are required to keep it longer 

• you request deletion (where applicable) 

We may retain minimal information to ensure we respect your preferences (e.g. suppression lists).  

We may retain information for longer where required by law or where necessary to establish, exercise or defend legal claims.  

Sharing your personal information 

We do not sell or rent your personal information. 

We may share it with trusted third parties where necessary, including: 

• service providers (e.g. IT, hosting, email platforms) 

• professional advisers (e.g. legal, financial) 

• partners and collaborators involved in our work 

• analytics and research providers 

We may also share information where required by law or to protect our legal rights. 

International data transfers 

As our work is international, your personal information may be processed outside the UK. 

Where this occurs, we ensure appropriate safeguards are in place, such as: 

• the UK International Data Transfer Agreement (IDTA) 

Standard Contractual Clauses 

These safeguards are designed to ensure your personal information remains protected. 

Security 

We take appropriate technical and organisational measures to protect your personal information. 

Access is restricted to authorised personnel, and systems are designed to prevent unauthorised access or disclosure. 

Your rights 

Under UK GDPR, you have the right to: 

• Access your personal information 

• Request correction of inaccurate data 

• Request deletion (in certain circumstances) 

• Restrict processing 

• Object to processing (including marketing) 

• Request data portability (where applicable) 

• Withdraw consent at any time (contact details below) 

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO):
https://www.ico.org.uk 

Automated decision-making 

We do not carry out automated decision-making that has legal or similarly significant effects on individuals. 

Changes to this notice 

We may update this Privacy Notice from time to time. Updates will be published on our website and, where appropriate, communicated directly. 

Links to other websites 

Our website may contain links to external sites. We are not responsible for their content or privacy practices. 

Contact us 

If you have any questions about this Notice or how we handle your personal information, please contact us: 

Email: hello@metispractice.co
Address:
Global Partners Governance Practice Ltd, t/a Mētis
The Black and White Building
74 Rivington Street
London EC2A 3AY