Data Protection Policy – For Clients of Brandspeak Limited – Version dated 25 May 2018

Brandspeak Limited, with registered office at GSCD Accountants Limited, 701 Stonehouse Park, Sperry Way, Stonehouse, GL10 3UT with the company number 10107500.

Brandspeak Limited is known in this document as “Brandspeak”, “we” and “us”This Data Protection Policy details how we processes your personal data in accordance with the Data Protection laws in the UK and the EU General Data Protection Regulation (GDPR).

Separate Data Protection Policy for Participants

Brandspeak distinguishes between:

a) clients that engage its services to carry out market research and branding services (its “Clients”) and other third party contractors that Brandspeak engages; and

b) individual participants the Brandspeak or its third party agents source and interview on behalf of their Client, as part of qualitative or quantitative market research groups (“Participants”).

Please refer to the participants’ policy for more information.

The personal data we collect about you

Personal data collected, used, stored and transferred by us may include:

  • Identity Data including forenames and last name
  • Contact Data including business address, email address and telephone numbers

How do we collect your personal data?

Personal data is collected by us directly when you communicate with a member of the Brandspeak team in person, by phone or email.

How do we use your personal data?

We use your personal data in the following circumstances and relying on the following lawful basis for processing:

Purpose/Activity Type of Data Lawful Basis of Processing
To initially engage with you to discuss your requirements Identity
To manage our relationship with you Identity
Performance of a contract with you
Necessary for our legitimate interests
To administer our business Identity
Necessary for our legitimate interests

If we need to use your personal data for an unrelated purpose, we will notify you and explain the legal basis which allows us to do so. Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.

Changes to our Privacy Notice

We keep our Privacy Notice under regular review and we will let you know when we update it.

Marketing communications

Please note that your personal information will not be passed to any third-party organisation for marketing purposes.

Data Security

Brandspeak have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way. Access to your personal data is limited to only those members of the Brandspeak team, freelance advisers, business partners and suppliers who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

Sharing of personal data outside of the European Economic Area

Some of our external suppliers are based outside the European Economic Area (EEA) so their processing of your personal data will involve a transfer of data outside the EEA. Where we use providers based outside the EEA, Brandspeak requires them to provide similar protection for personal data as it has in the EEA.

Who we disclose personal data to

Your personal data may be shared with third parties for the following purposes:

Type of Recipient Reason
Within Brandspeak Depending on your requirements, it is likely to be necessary to share your personal data with Brandspeak’s team of freelance market research specialists.
Third party contractors Your data may be accessed by our external telephone operations provider, in order to take telephone messages from you and pass the information to Brandspeak.
Others Third parties to whom we may choose to sell, transfer or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses, then the new owners may use your personal data in the same way as set out in this privacy notice.

These companies are required to ensure appropriate security measures are in place and maintain the confidentiality of your personal data, and to use your personal data only in the course of providing such services and in accordance with our instructions.

How long is your personal data retained?

Brandspeak retains your personal data for 1 year following the completion of our contractual relations.

Your legal rights regarding your personal data

After this retention period, if there is no other on-going client relationship your personal data will be securely deleted. You have the right to (among other things): request access to your personal data; request correction of your personal data; or request deletion of your personal data.


If you have any questions or complaints relating to how we use your personal data, or if you wish to exercise any of your rights regarding your personal data, please contact us by emailing We will respond to you as soon as is possible. The length of time will depend on the type and complexity of the request, but you will receive a response no later than one month from the initial request.