Data Protection Policy – Participants of Market Research Commissioned by Brandspeak Limited – Version dated 25 May 2018
Brandspeak Limited, with registered office at GSCD Accountants Limited, 701 Stonehouse Park, Sperry Way, Stonehouse, GL10 3UT with the company number 10107500.
Brandspeak Limited is known in this document as “Brandspeak”, “we” and “us”
This Data Protection Policy details how we processes your personal data in accordance with the Data Protection laws in the UK and the EU General Data Protection Regulation (GDPR).
Separate Data Protection Policy for Client and other third party contractors
Brandspeak distinguishes between:
a) clients that engage its services to carry out market research and branding services (its “Clients”) and other third party contractors that Brandspeak engages; and
b) individual participants that Brandspeak or its third party agents source and interview on behalf of their Client, as part of the qualitative or quantitative market research projects that Brandspeak undertakes (“Participants”).
Please refer to the Client and Third Party Data Protection Policy for more information.
The personal data we collect about you
Personal data collected, used, stored and transferred by us may include:
- Identity Data including forenames and last name
- Contact Data including personal address, email address and telephone numbers
How do we collect your personal data?
Personal data is collected by us directly when you communicate with a member of the Brandspeak team in person, by phone or email. It is also collected through our third party market research (recruitment) agents, when you communicate with them in person, by phone or email.
How do we use your personal data?
We use your personal data in the following circumstances and relying on the following lawful basis for processing:
|Purpose/Activity||Type of Data||Lawful Basis of Processing|
|Market research purposes||
|To administer our business||
If we need to use your personal data for an unrelated purpose, we will notify you and explain the legal basis which allows us to do so.
Changes to our Privacy Notice
Please note that your personal information will not be passed to any third-party organisation for marketing purposes.
Brandspeak have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way. Access to your personal data is limited to only those members of the Brandspeak team, freelance advisers, business partners and suppliers who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
Sharing of personal data outside of the European Economic Area
Some of our external suppliers are based outside the European Economic Area (EEA) so their processing of your personal data will involve a transfer of data outside the EEA. Where we use providers based outside the EEA, Brandspeak requires them to provide similar protection for personal data as it has in the EEA.
Who we disclose personal data to
Your personal data may be shared with third parties for the following purposes:
|Type of Recipient||Reason|
|Within Brandspeak||Depending on our Client’s requirements, it is likely to be necessary to share your personal data with Brandspeak’s team of freelance market research specialists.|
|External market research agencies||Depending on our Client’s requirements, it may be necessary to share your personal data with market research agencies, in order for them to complete the market research we have assigned to them.|
|Third party contractors||Your data (in particular, the consent forms you sign when you agree to participate in market research) will be retained by our external auditors in order to confirm participant expenses in our financial records.|
These companies are required to ensure appropriate security measures are in place and maintain the confidentiality of your personal data, and to use your personal data only in the course of providing such services and in accordance with our instructions.
How long is your personal data retained?
Brandspeak retains your personal data for up to 1 year following the completion of our contractual relations with our Client. Our external auditors will retain your consent forms for 7 years from the date of audit to which they relate.
Your legal rights regarding your personal data
After this retention period, if there is no other on-going Client relationship need to re-access your personal data it will be securely deleted.
You have the right to (among other things): request access to your personal data; request correction of your personal data; or request deletion of your personal data.
If you have any questions or complaints relating to how we use your personal data, or if you wish to exercise any of your rights regarding your personal data, please contact us by emailing firstname.lastname@example.org. We will respond to you as soon as is possible. The length of time will depend on the type and complexity of the request, but you will receive a response no later than one month from the initial request.