INSIGHT DOJO PRIVACY NOTICE
As a company collecting and analysing personal data, Insight Dojo are committed to full compliance with the General Data Protection Regulations (GDPR) principles. In practice this means we are have established processes to ensure we store and use personal data in a lawful manner, and that we give you the right to access your data, withdraw consent or to have any of your personal data erased at any point.
The purpose of this privacy notice is to inform you of our intended use of your data and to provide the information you need should you wish to find out more or exercise any of your rights under GDPR.
WHO WE ARE
Insight Dojo are a Customer Insights company based in London, UK.
WHAT INFORMATION DO WE COLLECT?
When we conduct market research interviews we typically collect both audio and video recordings. This allows us to go back and analyse the interview after it has taken place.
In some situations, we may also collect your personal details (such as your name, address and phone number). This will only be if these details are absolutely required – for example, if we are conducting an interview at your home.
If you have taken part in an online survey conducted on behalf of Insight Dojo, the data we receive and hold will be fully anonymized and not directly attributable to you.
HOW DO WE USE PERSONAL INFORMATION?
Any personal contact details that we hold (for example, your name, address, telephone number) are collected for the sole purpose of organising market research interviews and will never be shared with a third party, or used for any other purpose.
Any audio and video files are collected for research purposes only – for example, for members of the Insight Dojo team to watch-back and analyse the interview. In some cases, we may use short audio or video clips from the recordings when presenting findings back to the research sponsor, but these will never be physically shared with the sponsor (unless we have asked for specific consent for this at the outset of the project).
In some cases, the audio and video files will be shared with a third party video editing company. In such cases, Insight Dojo have contracts in place to ensure that the third party in question is also GDPR compliant.
Any online survey data that we hold will be fully anonymised and responses will not be directly attributable to you.
WHAT LEGAL BASIS DO WE HAVE FOR PROCESSING YOUR PERSONAL INFORMATION?
Under the GDPR there are six possible legal grounds for processing personal data. These are: consent, contract, legitimate interests, vital interests, public task and legal obligation.
The specific grounds for Insight Dojo’s personal data processing is ‘consent’ – this means that we must gain your individual consent based on your understanding on the project, and that we must inform you of your rights to withdraw at any time.
WHERE DO WE STORE AND PROCESS PERSONAL DATA?
Any personal contact details that we hold (for example, your name, address, telephone number) will be stored on a password protected Insight Dojo computer for the duration of the project. Processes are in place to ensure that all details are deleted as soon as the project has come to an end.
Any audio and video files will be stored for a maximum of 24 months on a password protected secure drive. Processes are in place to record the location of these files and to ensure that these are deleted within the specified timeframe (24 months).
Any handwritten consent forms containing your signature (and any other personal information) are securely stored in a locked filing cabinet for 24 months post project completion.
All data held electronically will be permanently deleted from all locations on which it resides (after the specified timeframe). All data held physically (such as signed consent forms) will be shredded (after the specified timeframe).
Under GDPR guidelines, you have the right to request the deletion of any of the files specified above at any given point (see ‘Your rights in relation to personal data’ section).
YOUR RIGHTS IN RELATION TO PERSONAL DATA
Under GDPR guidelines you have a number of rights with regards your personal data. These are as follows:
- Right to request more information on how your data is being used
- Right to access your personal information
- Right to withdraw consent
- Right to have your personal data deleted at any point
- Right to object to your personal data being processed
- Right to have inaccurate data rectified
HOW TO CONTACT US
Should you have any further questions, please do not hesitate to get in contact with us by:
- Telephoning: Genevieve Hall, +447342 335655
- Writing: Insight Dojo Ltd, Studio 206, The Print Rooms, Union Street, London, SE1 0LH