Data Protection Policy – For Clients of Brandspeak Limited – Version dated 25 May 2018
Brandspeak Limited, with registered office at GSCD Accountants Limited, 701 Stonehouse Park, Sperry Way, Stonehouse, GL10 3UT with the company number 10107500.
Brandspeak Limited is known in this document as “Brandspeak”, “we” and “us”This Data Protection Policy details how we processes your personal data in accordance with the Data Protection laws in the UK and the EU General Data Protection Regulation (GDPR).
Separate Data Protection Policy for Participants
Brandspeak distinguishes between:
a) clients that engage its services to carry out market research and branding services (its “Clients”) and other third party contractors that Brandspeak engages; and
b) individual participants the Brandspeak or its third party agents source and interview on behalf of their Client, as part of qualitative or quantitative market research groups (“Participants”).
Please refer to the participants’ policy for more information.
The personal data we collect about you
Personal data collected, used, stored and transferred by us may include:
- Identity Data including forenames and last name
- Contact Data including business address, email address and telephone numbers
How do we collect your personal data?
Personal data is collected by us directly when you communicate with a member of the Brandspeak team in person, by phone or email.
How do we use your personal data?
We use your personal data in the following circumstances and relying on the following lawful basis for processing:
| Purpose/Activity | Type of Data | Lawful Basis of Processing |
|---|---|---|
| To initially engage with you to discuss your requirements | •Identity•Contact |
Consent |
| To manage our relationship with you | •Identity•Contact |
Performance of a contract with you Necessary for our legitimate interests |
| To administer our business | •Identity•Contact |
Necessary for our legitimate interests |
If we need to use your personal data for an unrelated purpose, we will notify you and explain the legal basis which allows us to do so. Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.
Changes to our Privacy Notice
We keep our Privacy Notice under regular review and we will let you know when we update it.
Marketing communications
Please note that your personal information will not be passed to any third-party organisation for marketing purposes.
Data Security
Brandspeak have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way. Access to your personal data is limited to only those members of the Brandspeak team, freelance advisers, business partners and suppliers who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
Sharing of personal data outside of the European Economic Area
Some of our external suppliers are based outside the European Economic Area (EEA) so their processing of your personal data will involve a transfer of data outside the EEA. Where we use providers based outside the EEA, Brandspeak requires them to provide similar protection for personal data as it has in the EEA.
Who we disclose personal data to
Your personal data may be shared with third parties for the following purposes:
| Type of Recipient | Reason |
|---|---|
| Within Brandspeak | Depending on your requirements, it is likely to be necessary to share your personal data with Brandspeak’s team of freelance market research specialists. |
| Third party contractors | Your data may be accessed by our external telephone operations provider, in order to take telephone messages from you and pass the information to Brandspeak. |
| Others | Third parties to whom we may choose to sell, transfer or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses, then the new owners may use your personal data in the same way as set out in this privacy notice. |
These companies are required to ensure appropriate security measures are in place and maintain the confidentiality of your personal data, and to use your personal data only in the course of providing such services and in accordance with our instructions.
How long is your personal data retained?
Brandspeak retains your personal data for 1 year following the completion of our contractual relations.
Your legal rights regarding your personal data
After this retention period, if there is no other on-going client relationship your personal data will be securely deleted. You have the right to (among other things): request access to your personal data; request correction of your personal data; or request deletion of your personal data.
Questions
If you have any questions or complaints relating to how we use your personal data, or if you wish to exercise any of your rights regarding your personal data, please contact us by emailing enquiries@brandspeak.co.uk. We will respond to you as soon as is possible. The length of time will depend on the type and complexity of the request, but you will receive a response no later than one month from the initial request.