Privacy Policy
1. INTRODUCTION
This privacy statement provides you with details of how I
use and process your personal data; rkwconsulting.co.uk and social media
(Twitter, Facebook, Linkedin). I am committed to protecting your personal data;
whether you are a client or a research participant, whether you are emailing me
or contacting me by telephone, face to face or by post.
I am committed to meeting
the requirements of the following laws and codes:
· The EU General
Data Protection Regulation (GDPR)
· Market Research
Society’s (MRS) Code of Conduct
If you are participating in market research
I commit, in obtaining your co-operation, not to mislead you about the nature
of the research or how the findings will be used. Your responses will be
treated as confidential unless you consent to being identified.
My email address is
info@rkwconsulting.co.uk.
If you are
not happy with any aspect of how I collect and use your data, you have the
right to complain to the Information Commissioner’s Office (ICO), the UK
supervisory authority for data protection issues (www.ico.org.uk). I should be grateful if you would contact
me first if you do have a complaint so that I can try to resolve it for you.
It is very
important that the information I hold about you is accurate and up to date.
Please let me know if at any time your personal information changes by emailing
me at info@rkwconsulting.co.uk.
Sensitive Data
When
participating in some types of market research I may need to collect the
following sensitive data about you in order to fulfil the needs of the market research project: race or
ethnicity, religious or philosophical beliefs, sex life, sexual orientation,
political opinions, trade union membership, information about your health and
genetic and biometric data. I do not collect any information about criminal
convictions and offences.
I require
your explicit consent for processing sensitive data and I will request your
signature for this consent.
2. HOW I USE YOUR PERSONAL DATA
Purposes for
processing your personal data as a client - I
may process your personal data for more than one lawful ground, depending on
the specific purpose for which I am using your data. Please email me at info@rkwconsulting.co.uk if you need
details about the specific legal ground I am relying on to process your
personal data where more than one ground has been set out: (i) register
you as a new client, (ii) manage payment, (iii) collect and recover monies owed
to me, (iv) to manage my relationship with you, (v) send you details of my
services, (vi) to comply with a legal or regulatory obligation.
You will
receive marketing communications from me if you have:
(i) requested
information from me or purchased services from me
(ii) and
you have not opted out of receiving that marketing.
I will not
share your personal data with any third party for marketing purposes.
You can ask
me to stop sending you marketing messages at any time by emailing me at info@rkwconsulting.co.uk
Where you
opt out of receiving my marketing communications, this will not apply to
personal data provided to me as a result of a service purchase, service
experience or other transactions.
If you are a research participant then I rely on consent as a legal ground for processing
your personal data. The personal information I collect is:
· Combined
with the responses/opinions of others who participated in the same research and
reported back anonymously to the client commissioning the study
· Maybe
occasionally used to re-contact you to validate your responses (if you have
consented to me doing so)
All of your research
responses are treated as confidential. I will never intentionally disclose your
personal information or individual responses to the client that commissioned the
study or any third parties unless:
· You request or
consent to sharing your identifying information and individual responses
· In the
rare but possible circumstance that the information is subject to disclosure
pursuant to judicial or other government subpoenas, warrants, orders or for
similar legal or regulatory requirements
3. DISCLOSURES OF YOUR PERSONAL
DATA - CLIENTS
I may have
to share your personal data with the parties set out below for the purposes set
out in the table in paragraph 2 above:
· Professional
advisers including lawyers, bankers, auditors and insurers who provide
consultancy, banking, legal, insurance and accounting services.
· HM
Revenue & Customs, regulators and other authorities based in the United
Kingdom and other relevant jurisdictions who require reporting of processing
activities in certain circumstances.
· Third
parties to whom I sell, transfer, or merge parts of my business or my assets.
I require
all third parties to whom I transfer your data to respect the security of your
personal data and to treat it in accordance with the law. I only allow such
third parties to process your personal data for specified purposes and in
accordance with my instructions.
4. INTERNATIONAL
TRANSFERS
Some of my third party providers are businesses outside of the EEA in
countries which do not always offer the same levels of protection for your
personal data. I do my best to ensure a similar degree of security by ensuring
that contracts, code of conduct or certification are in place which give your
personal data the same protection it has within Europe. If I’m not able to do
so, I will request your explicit consent to the transfer and you can withdraw
this consent at any time.
Please email me at info@rkwconsulting.co.uk if you want
further information on the specific mechanism used by me when transferring your
personal data out of the EEA.
5. DATA SECURITY
I have put
in place appropriate security measures to prevent your personal data from being
accidentally lost, used or accessed in an unauthorised way, altered or
disclosed. In addition, I limit access to your personal data to agents,
contractors and other third parties who have a business need to know such data.
They will only process your personal data on my instructions and they are
subject to a duty of confidentiality.
I have put
in place procedures to deal with any suspected personal data breach and will
notify you and any applicable regulator of a breach where I am legally required
to do so.
6. DATA RETENTION
I will only
retain your personal data for as long as necessary to fulfil the purposes I
collected it for, including for the purposes of satisfying any legal,
accounting, or reporting requirements.
To determine
the appropriate retention period for personal data, I consider the amount,
nature, and sensitivity of the personal data, the potential risk of harm from
unauthorised use or disclosure of your personal data, the purposes for which I
process your personal data and whether I can achieve those purposes through
other means, and the applicable legal requirements.
By law I
have to keep basic information about my clients (including Contact, Identity,
Financial and Transaction Data) for six years after they cease being customers
for tax purposes.
In some
circumstances you can ask me to delete your data: see below for further
information.
7. YOUR LEGAL RIGHTS
You are able to exercise certain rights in relation to your personal data
that I process. These are set out in more detail at
https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/
In relation to a Subject Access Right request, you
may request that I inform you of the data I hold about you and how I process
it. I will not charge a fee for responding to this request unless your request is clearly unfounded,
repetitive or excessive in which case I may charge a reasonable fee or decline
to respond.
I will, in
most cases, reply within one month of the date of the request unless your
request is complex or you have made a large number of requests in which case I
will notify you of any delay and will in any event reply within 3 months.
If you wish
to make a Subject Access Request, please email info@rkwconsulting.co.uk
Privacy Policy updated April 2018
