Privacy Policy

Effective 15 October 2026 · Version 2026-10-15

1. Who is responsible

GRAVITON GLOBAL HOLDINGS LTD is the controller responsible for personal information collected through this awards website.

GRAVITON GLOBAL HOLDINGS LTD, registered in England and Wales, company number 09818235.
Registered office: First Floor Office, 19 Hercules Way, Farnborough, England, GU14 6UU.
Email: TEAM@IAEAWARDS.ORG.

2. Information we collect and its source

Nomination forms collect the nominee’s name and organisation; applicant or nominator name, email and telephone number; sector and award title; optional Instagram, Facebook and LinkedIn details; consent and application reference. Contact forms collect name, email, subject, message and consent. We also keep relevant correspondence, submission dates, email-delivery status and payment status.

We obtain information directly from you or from a person nominating you. Nominees should be given this notice by the nominator. If information concerns you but was supplied by someone else, contact us to ask about its source and use. Do not send patient records, health details, identity documents or other sensitive information through the general forms.

Cloudflare, Google/YouTube and Stripe may receive technical information such as IP address, browser/device information, security signals and service interactions when their services are used. Stripe collects payment and billing information directly; this website’s forms do not ask for or store your full card number.

3. Why we use information and our lawful bases

• Applications, payments and registration: to take steps at your request before a contract and perform a contract with you. Where a contract is with an organisation or another person, relevant contact and nominee data are processed for our legitimate interests in administering and assessing the programme.
• Enquiries and correspondence: our legitimate interests in responding to requests, running the awards and maintaining useful business records; pre-contract steps where your enquiry concerns a service you wish to buy.
• Security, spam prevention, record integrity and disputes: our legitimate interests in protecting the website, preventing misuse and resolving complaints or claims.
• Accounts and legal requirements: compliance with applicable tax, accounting and other legal obligations.
• Optional uses requiring consent: consent, where requested separately, for relevant marketing or optional technologies. A form’s privacy acknowledgement does not give blanket consent to unrelated marketing.

We balance legitimate interests against individuals’ rights and expectations. We do not use the forms to make solely automated award decisions with legal or similarly significant effects. Spam checks may automatically block a submission; contact us if this prevents a legitimate enquiry.

4. Who receives information

Information is available to authorised awards staff and, where necessary, judges, professional advisers and service providers supporting the relevant task. Sponsors are not entitled to applicant data merely because they sponsor the programme and cannot influence award decisions.

• Google Sheets and Apps Script: nomination and enquiry records are saved in the organiser’s Google Sheet; Apps Script handles records and operational payment emails.
• Cloudflare Pages and Turnstile: website hosting, request handling and spam/security checks.
• Stripe: payment processing and related payment records. The application reference may be passed to checkout to help reconcile payment.
• Google/YouTube and Google Fonts: embedded ceremony footage and website fonts may cause your browser to contact these services.

Service providers may act as processors or as independent controllers for their own purposes. Their notices explain those activities: Google, Cloudflare and Stripe. We may disclose information where required by law or necessary to establish or defend legal claims.

5. International processing

These providers operate internationally, so information may be processed outside the UK. Where a restricted transfer is made, applicable UK data protection requirements must be met, including an adequacy decision or appropriate contractual safeguards where required. Contact us for information about safeguards relevant to your information. This notice does not promise that every provider stores all data in the UK.

6. Retention

We keep identifiable application information for the relevant awards cycle and for as long afterwards as needed to address queries, complaints, licensing matters or legal claims. Enquiries are retained while being resolved and while a related follow-up or dispute reasonably requires the record. Payment and accounting records are retained for the period required by applicable tax and accounting law.

Retention decisions take account of the purpose, whether a matter remains open, applicable limitation periods and legal record-keeping duties. Information no longer needed is deleted or anonymised, subject to necessary backup and legal retention arrangements. Ask us about the retention criteria for your particular record.

7. Cookies, browser storage and embedded services

The payment journey uses browser session storage to retain a saved application reference in the same tab; personal form details are not put in that storage. If storage is unavailable, the reference may be passed in the payment page’s URL fragment. Turnstile uses security-related browser processing. YouTube footage, including the muted film below the hero, may contact Google when loaded and use its own storage or cookies. Muting a video does not stop data processing.

Your browser can manage or block cookies and site storage, which may affect forms or media. This privacy notice is information, not consent to optional cookies; any consent required for non-essential technologies must be obtained separately. You may use the website’s contact email if embedded services prevent you from contacting us.

8. Your rights

Depending on the circumstances and lawful basis, you may request access, correction, deletion, restriction, portability or object to processing, including processing based on legitimate interests. You may withdraw consent where processing relies on it, without affecting earlier lawful processing. Some information is required to assess and administer an application; without it we may be unable to provide that service.

Email TEAM@IAEAWARDS.ORG to exercise your rights. We may need proportionate identity information before releasing or changing a record. You may complain to the Information Commissioner’s Office. You can contact us first so we can try to resolve your concern.

9. Changes and security

We use measures appropriate to the information and risk, including restricted Sheet access, server-side validation and spam protection; no internet service can promise absolute security. We will update this notice when relevant practices change and provide additional information where required.