Privacy - Policy
Introduction
Clearlight Insights is committed to protecting and respecting the personal data that we hold. This privacy statement describes why and how we collect and use personal data and provides information about individuals’ rights. It applies to personal data provided to us by individuals themselves or by third parties acting on their behalf. We may use personal data provided to us for the purposes described in this privacy statement or as made clear before collecting personal data.
Personal data refers to any information relating to an identified or identifiable living person. When collecting and using personal data, our policy is to be transparent about why and how we process it.
We process personal data for multiple purposes, and the means of collection, lawful basis of processing, use, disclosure, and retention periods for each purpose are outlined in the relevant sections below.
The personal data that we collect is provided either directly from the individual concerned or from a third party acting on their behalf. Where we receive personal data from a third party, we request that they inform the individual about how their data will be used and refer them to this privacy statement where necessary.
Security
We take the security of all data we hold seriously. Our staff undergo training on data protection, confidentiality, and security. We have a framework of policies and procedures to ensure we regularly review and update our security measures.
All information you provide to us is stored on secure servers. However, while we take precautions to protect your personal data, data transmission over the internet is not completely secure. Once we receive your information, we apply strict security measures to prevent unauthorized access.
Data We Hold and Purpose of Processing
We provide services to individuals and organizations. The exact data we collect depends on the services provided. Where we engage with individuals, we collect and process personal data to fulfill contractual or operational obligations
Why do we process data?
- Providing services: Data is processed in accordance with the purpose for which it was collected and may be further clarified in written documentation before processing occurs. We primarily process your data for research purposes and to compensate you for surveys completed.
- Assessing individual needs: Personal data is used to ensure client needs are met effectively.
- Business administration: Data may be processed to manage client relationships, maintain internal records, host events, and support operational processes.
- Regulatory compliance: We process personal data to fulfill legal, regulatory, or ethical obligations, including identity verification
- Services to clients: Personal data may include name, date of birth, research unique ID, bank details, next of kin, job titles, photographs, and other relevant information.
What data is processed?
- Services to clients: Personal data may include name, date of birth, research unique ID, bank details, next of kin, job titles, photographs, and other relevant information.
Data Retention
We retain personal data for as long as necessary for the purpose(s) for which it was collected. Some data may be retained for longer due to legal requirements. Personal data may be securely archived with restricted access and periodically reviewed to ensure relevance.
Our People
We collect personal data about our employees for business administration and management purposes. Further details are outlined in our staff handbook.
Applicants
We collect personal data from individuals applying to work for Clearlight Insights for the following purposes:
- Employment assessment: Applicant data is retained for as long as necessary or for a maximum of one year if no longer required. Evaluating applicants for potential roles.
- Business administration: :Making informed management decisions.
Applicant data is retained for as long as necessary or for a maximum of one year if no longer required.
Suppliers
We collect and process personal data of suppliers, subcontractors, and their representatives to manage our business relationships
Why do we process data?
- Receiving goods and services: Processing supplier and staff data as necessary.
- Providing services to clients: Managing supplier relationships and service delivery.
- Security and compliance: Ensuring quality, risk management, and adherence to legal obligations.
Data Retention
Supplier data is retained for as long as necessary to meet contractual and legal obligations
Website Users
Personal data may be collected through automated tracking or interactions with forms on our website. This includes information provided when individuals register, subscribe, or make inquiries.
Sharing Personal Data
We share personal data only when legally permitted and with security measures in place. Personal data may be shared with:
- Third-party service providers: IT services, cloud providers, data security, and storage services.
- Clients: Survey-related data may be shared with clients.
- Freelancers and research agencies: Data may be shared with authorized freelancers and agencies conducting research on our behalf
- Regulatory authorities: Data may be disclosed when required by law.
Locations of Processing
Your data may be processed and stored in the European Economic Area (EEA) or the United States. Regardless of location, we comply with all relevant data protection laws, including GDPR and U.S. data privacy laws, such as the California Consumer Privacy Act (CCPA).
Individuals’ Rights
Individuals have certain rights over their personal data, including:
- Accessing their data.
- Requesting corrections or erasure.
- Withdrawing consent where applicable.
- Objecting to processing or requesting data portability.
- Requesting human intervention in automated data processing.
To exercise these rights, please contact us at enquiries@clearlightinsights.com
Complaints
If you wish to make a complaint about our data processing, please email enquiries@clearlightinsights.com. We will investigate and respond accordingly.
Data Controller and Contact Information
The data controller for Clearlight Insights is:
Changes to this Privacy Statement
We may update this privacy statement from time to time. Any changes will be posted on our website. This privacy statement was last updated on 20th October 2024.