top of page

Privacy policy

Privacy notice for research respondents

Your personal data – what is it?
Personal data relates to a living individual who can be identified from that data. Identification can be by the information alone or in conjunction with any other information in the data processor's possession or likely to come into such possession. The processing of personal data is governed by the UK General Data Protection Regulation (UK GDPR).

Who are we?

Chalkstream is a market and reputation research agency. In the terms of the UK GDPR we are a 'data processor' – we use data supplied to us by a client (referred to in the UK GDPR as a 'data controller') for research purposes.

How do we process your personal data?
Chalkstream complies with its obligations under the UK GDPR by keeping personal data up to date; by storing and destroying it securely; by not collecting or retaining excessive amounts of data; by protecting personal data from loss, misuse, unauthorised access and disclosure; and by ensuring that appropriate technical measures are in place to protect personal data. We use your personal data for the following purposes:

 

  • To undertake statistical analysis of data sets on behalf of clients

  • To contact individuals to conduct research about their demographics, awareness, attitudes or behaviours on behalf of clients

  • To verify demographic information for representative sampling purposes.

 

What is the legal basis for processing your personal data?
The legal basis for processing is determined by the data controller (our client). Common bases include:

 

  • Legitimate interests of the data controller or a third party (Article 6(1)(f))

  • Processing necessary for the performance of a task carried out in the public interest (Article 6(1)(e))

  • For special category data: processing necessary for archiving, scientific research or statistical purposes (Article 9(2)(j))
     

Sharing your personal data
Any personal data we collect as a result of our research activities will be treated as strictly confidential and will be shared only with the data controller (our client).

 

How long do we keep your personal data?

We keep your personal data for no longer than is reasonably necessary. Upon completion of each research project (following delivery of reports to clients) we destroy all data sets supplied to us and any personal data collected as part of the research activity, typically within two months.

Your rights and your personal data
Unless subject to an exemption under the UK GDPR, you have the following rights with respect to your personal data:

 

  • The right to request a copy of your personal data

  • The right to request that we correct any personal data if it is found to be inaccurate or out of date

  • The right to request your personal data is erased where it is no longer necessary to retain such data

  • The right to withdraw your consent to the processing at any time (if consent is relied upon)

  • The right to request a restriction on further processing where there is a dispute

  • The right to object to the processing of personal data

  • The right to lodge a complaint with the Information Commissioner's Office.

Contact details
To exercise all relevant rights, queries or complaints please in the first instance contact Ben Verinder, Chalkstream MD via this site's Contact Us form or via telephone on 01442 851385.
 

You can contact the Information Commissioner's Office on 0303 123 1113 or via email at https://ico.org.uk/global/contact-us/email/ or at the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.

bottom of page