Privacy Policy

Your privacy is of utmost importance to us. We prioritize the security of your information and have established stringent policies and procedures to safeguard it. This Privacy Policy is designed to provide you with a clear understanding of what data we collect, the reasons behind its collection, and how you can manage, update, export, or delete your information. This document outlines the practices of data processing conducted through the Internet and other electronic communication networks, both by our organization and on our behalf for third-party marketing purposes. Our data collection adheres to the Data Protection Act 2018, the Privacy and Electronic Communications (EC Directive) Regulations 2002, and the General Data Protection Regulation (GDPR).

We, operating under the name “Brit Survey” as a division of Leadora Limited, specialize in gathering consumer data through telephonic surveys on behalf of our UK clients. Our objective is to assist them in efficiently and effectively targeting their products and services. Rest assured, we always display our contact number during our calls, allowing you to identify us easily. You have the option to call back this number to halt any future calls, in line with your preferences. Leadora Ltd is duly registered with the Information Commissioner’s Office (ICO) under registration number ZB601602, with our official address located at 27 Old Gloucester Street, London, WC1N 3AX. You can reach us at Phone: +44 01217512027 or Email: contact@britsurvey.co.uk. This registration ensures that your information is consistently safeguarded, and we strictly adhere to the General Data Protection Regulation ((EU) 2016/679) (“GDPR”), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (“PECR”) (2003). Our commitment is to use the information you provide to us solely for the purposes stated in the opt-in statement at the time of data collection and in full compliance with this Privacy Policy. Your data’s security and integrity are paramount to us.

Information we hold about you

Personal data or personal information encompasses any details about an individual that can lead to their identification, either directly or indirectly. This definition excludes data that does not allow for the identification of an individual, often referred to as anonymous data. In accordance with the law, we only retain information pertaining to consumers within the age range of 18 to 75 years.

Typically, the information we collect includes:

  • First Name
  • Last Name
  • Gender
  • Age
  • Residential Status
  • Marital Status (unless deemed necessary)
  • Address (including postcode)
  • Telephone Number
  • Email Address
  • Information concerning products and services you frequently use
  • Call recordings, SMS, emails, and similar data
  • Campaign-specific data

It’s important to note that certain questions within consumer surveys pertain to named sponsor organizations. By indicating a specific positive interest in their brand or products, you are also granting permission to be contacted by them.

Information we don't hold about you

  • Credit and debit card details
  • Bank account information
  • Medical history data
  • Political and Religious beliefs
  • Bank balance
  • Confidential assets

How long do we keep information?

We highly value the importance of your data. While there isn’t a specific legal timeframe dictating how long we should retain your personal information, our practice aligns with retaining it only for as long as reasonably necessary to fulfill the purposes for which it was collected. This includes meeting any legal, regulatory, or reporting obligations and ensuring that the data remains accurate, up-to-date, and in accordance with your preferences. In situations where there is a compliance request or a reasonable anticipation of potential litigation related to our relationship with you, we may retain your personal data for a longer duration. To determine the appropriate retention period for personal data, we consider several factors, including the volume, nature, and sensitivity of the data, the potential risks associated with unauthorized use or disclosure, the purposes for which we process it, the feasibility of achieving those purposes through alternative means, and the relevant legal, regulatory, or other requirements.

Detailed information about our various data retention periods can be found in our retention policy, which is available upon request. Our data retention policy takes into account the specific purpose and legal basis under which data is processed. For marketing purposes, when we process your data based on your consent, we retain it for up to five years, while data processed under legitimate interests is retained for a period of ten years. Similarly, data processed for profiling purposes is kept for ten years. We are committed to ensuring that the personal data we hold and process is accurate and current. To achieve this, we regularly cross-check our database against suppression lists and promptly remove individuals who no longer wish to be contacted. Your data’s accuracy and your preferences are central to our data management practices.

Why do we collect your information?

Your personal information plays a vital role in enhancing our ability to tailor our services to your specific needs. It enables us to gain insights into your purchasing habits, ultimately allowing us to inform you about offers and opportunities that align with your interests. Your information serves various purposes, including data validation, enrichment, verification, suppression, tracing, and, where permitted by law, individual reference or lookup services. In essence, your information serves the following key purposes for our clients:

1. Targeting: We ensure that you receive offers that are highly relevant to you. Our clients utilize your information, along with data on other individuals, to determine the most effective way to reach you through suitable communication channels. This means you are more likely to receive offers that align with your preferences and needs.

2. Marketing: Our core business involves providing our clients with personal data for their marketing campaigns. For instance, if a relevant organization wishes to inform you about their product or service, we may provide them with details based on your demographics, location, and legitimate interests.

We collaborate with some of the leading brands in the UK to assist them in precisely targeting their offers by collecting essential purchasing information on their behalf. This survey process, where we gather your data, aids these organizations in understanding customer needs and optimizing their sales programs.

How do we safeguard your information?

We prioritize the security of your data to safeguard it from breaches and unauthorized access. The data we collect is securely stored at a protected location within our office and is processed exclusively by authorized personnel, one of whom belongs to our partner suppliers. All information you provide to us is retained on secure servers and cloud storage systems. When you submit your personal data, you implicitly consent to its storage, processing, and transfer in accordance with the terms outlined in this privacy policy.

Our commitment extends to taking all reasonable measures to ensure that your data is handled with the utmost security and in strict adherence to this privacy policy. We employ a variety of network security measures, encompassing physical, electronic, and procedural safeguards, to prevent unauthorized access, data theft, accidental data loss, data disclosure, or data deletion. Access to this information is strictly limited to authorized personnel within our organization. Additionally, we have established protocols to address unforeseen events that may lie beyond our control and affect data accessibility or security. Your data’s confidentiality and integrity remain our top priority.

How do we transfer information?

To ensure the secure transfer of data, our company follows a rigorous protocol. Our primary method involves utilizing a secure and trusted portal that is designated by the client for data exchange. This portal ensures end-to-end encryption and provides a controlled environment for data transit, assuring the highest level of security. However, in cases where a client-specific portal is not available, we employ a stringent alternative approach.

In such instances, we utilize email communication for data transmission, but with a series of robust security measures in place. To maintain the confidentiality of the data, we meticulously encrypt all information using password protection. This additional layer of security ensures that only authorized individuals can access and decipher the data. Furthermore, we actively monitor and manage access permissions to fortify our defenses against potential breaches. Our unwavering commitment to data security drives us to consistently update our practices in alignment with industry standards and emerging security threats. Your data’s safety remains our top priority.

To whom do we transfer data?

Marketing Service Providers are companies that gather data from various Data Controllers, including us. They play a crucial role in helping their clients customize products and services to better match their preferences. Additionally, they may use your data for fraud prevention measures. It’s important to note that the Marketing Services Providers we collaborate with undergo thorough vetting processes. They are selected based on their commitment to processing your data in strict compliance with all data protection laws, guidelines, and regulations.

Under the legal basis of legitimate interests and within the confines of stringent licensing terms, we share your data with the Marketing Services Providers listed below. These providers, like us, utilize your data to develop products and services that assist organizations in understanding the probable traits of their existing customers and identifying similar individuals across various marketing channels. Consequently, you may receive advertising from organizations within the industry sectors listed below, which is tailored to your preferences through direct mail or when you visit websites. It’s important to note that these marketing service providers will not promote their own products and services directly to you.

Under the Data Protection Act 2018, we are permitted to share certain information with third parties for various purposes, including marketing, credit assessment, research, fraud prevention, and debt collection. This includes data you provide today, in the past, and in the future. We share data with third parties through written agreements, with oversight, unless required for regulatory reasons. In some cases, we may share your information with organizations outside the UK and Europe, ensuring compliance with local data protection laws. When we engage with other organizations to process your data, we ensure they uphold high data security standards and prohibit unauthorized use of your information. If a third party assists in providing a service you’ve requested, they may contact you for direct marketing via email, post, telephone, SMS, or social media advertising.

Array of Verticals

Automotive | Property | General retail |Home improvement | Home services | Fashion and clothing | Pharmaceutical | IT and home computing | Telecoms and utilities |Broadband |Mobility |Pensions | Loans | Credit cards | Mortgages | Investment | Savings and Funds | Insurance of Homes and Cars | Personal and other insurances |Debt |Travel and Hotels |Leisure |Gaming | Health & Fitness | Media and publishing companies | Sky warranty | Pets |Charities | Legal Institution | Claims Management Service |Utilities | Prepaid funeral | Finance products and services | PPI | Lottery | Education | Market research

GDPR Rights

Under the UK’s Data Protection Act 2018 and GDPR, individuals have various rights concerning their personal data:

1. Right to Be Informed: Individuals have the right to know how their personal data is handled, typically provided through a privacy notice.
2. Right of Access: Individuals can request to access their personal data, enabling them to verify its accuracy and legality.
3. Right to Rectification: Individuals can request corrections to inaccuracies in their personal data.
4. Right to Be Forgotten (Erasure): Individuals can request the deletion of their data in certain situations, though exemptions apply.
5. Right to Restriction: Individuals can ask for the temporary suspension of data processing, especially during complaints or objections.
6. Right to Data Portability: Individuals can request their data in a structured, machine-readable format if processed electronically.
7. Right to Object: Individuals can object to specific types of processing, particularly for direct marketing.
8. Rights in Relation to Automated Decision-Making and Profiling: Individuals have the right to challenge automated decisions, with exceptions.

Our policy is updated as needed to align with best practices, data security, and compliance with evolving data protection laws. The maximum response time for data controller duties and exceptions for rectification, erasure, restriction, and data portability is one month, as per GDPR, with limited circumstances allowing for longer response times. Customers will be informed if extensions are necessary, with explanations provided.

Subject Access Request Form

Our organization complies with Article 15 of the GDPR, allowing customers to make Data Subject Access Requests (SAR). You can request information about the personal data we hold, its duration of retention, and other relevant details in line with your rights as a customer. To facilitate a prompt response to SARs, we encourage you to use the Access Request Form available on our website’s support section. Upon receiving your request, we will promptly reach out to you and may request a photocopy of your proof of identity and address via email. While using the Data Subject Access Request Form is not mandatory, it can streamline the processing of your request.

It’s important to note that there are exceptions to the rights granted to data subjects under Section 15 of the GDPR 2018 Act. Detailed explanations of these exemptions can be found at www.ico.org.uk and are beyond the scope of this policy. We aim to respond to SAR within one month of receiving the request. In limited circumstances where an extension may be necessary, we will communicate this to the customer within one month and provide an explanation for the delay. Our commitment is to meet Subject Access Requests within the one-month timeframe whenever possible.

Consent & Legitimate Interests

We are committed to safeguarding your personal information and complying with all relevant laws, including the Data Protection Act 2018. The processing of your data can occur under two lawful bases: Consent or Legitimate Interest, depending on specific circumstances and aspects. Under GDPR, there are six lawful bases for processing data: Consent, Contract, Legal Obligation, Vital Interests, Public Task, and Legitimate Interests. For post and telephone marketing (non-automated), GDPR allows the use of either legitimate interests or consent as the basis for processing information.

Consent, as defined by GDPR, involves individuals making a deliberate and informed decision, signifying their agreement to the processing of their personal data. Consent must be explicit, specific, and limited to reasonable and known purposes. It cannot extend to unspecified or unforeseen uses, and data controllers like us must offer users both opt-in and opt-out choices, along with the option to delete previously collected data.

On the other hand, the Legitimate Interest provision permits organizations to process personal data without specific consent, provided they can demonstrate a legitimate purpose and the essential nature of data processing in achieving that purpose. This approach necessitates a risk-based assessment of potential impacts on data subjects and the implementation of risk mitigation strategies. It involves striking a balance between the organization’s mission and the privacy interests of data subjects.

Under Article 6(1)(f) of GDPR, legitimate interest provides a lawful basis for processing when it is necessary for the legitimate interests pursued by the controller or a third party, except when the data subject’s interests or fundamental rights and freedoms require the protection of personal data, especially when the data subject is a child.

Regarding direct marketing via Mail, SMS, Telephone (for numbers registered with the Telephone Preference Service – TPS), and Post (for those registered with the Mailing Preference Service – MPS), we primarily rely on “Consent” as the basis for data processing. Legitimate interest serves as our legal basis for processing data appropriately for Post (if not registered with MPS), Telephone (Non-TPS numbers), customer analysis and non-automated profiling, tracing, ID verification, and other specified purposes. Legitimate interests also enable us to contact you when we have received your details from a third party that names us in their privacy policy as a recipient of your information, and for the purposes of fraud prevention and security.

In selecting the most appropriate legal basis, we have conducted Legitimate Interest Assessments and balancing tests to ensure minimal privacy impact. The documentation for these assessments is available upon request by emailing us at contact@leadoraltd.co.uk

As our data processing is based on both consent and legitimate interest, you have the right to object to and withdraw your consent at any time. We may also monitor and maintain records of email and telephonic communications with you, as per this policy and our business interests. Your data may be used for various purposes, including communication, record keeping, crime investigation and prevention, research, disclosure to regulatory bodies for compliance monitoring, processing job applications, feedback collection, legal obligations, prudent business management, keeping you informed about relevant products or services with your consent, and other lawful purposes.

Remember, you always have the right to refuse to answer any question.

Opt-out Programme

You have the option to unsubscribe from our brand, Brit Survey, at any time. You can do so by providing your details on our website or by requesting to opt out during survey calls. When you choose to unsubscribe, we will add your telephone number to our global Do Not Call (DNC) list. As a result, your details will be suppressed as per your request, and you will no longer receive any further emails, or SMS messages, or have your information shared with third parties for purposes outlined in our Privacy Policy.

If you wish to request complete suppression of your information, please contact us at contact@leadoraltd.co.uk
For inquiries related to your data and privacy, you can reach out to our Data Protection Officer, Mr. Noah, at compliance@leadoraltd.co.uk

ICO details

There are no fees associated with exercising your rights, and you will not incur any charges while participating in our survey program. When contacting us, please refrain from including confidential information in emails or letters. We aim to address your request at the initial point of contact whenever possible. If we cannot resolve your request immediately, we will conduct an investigation and provide you with our findings. If you are dissatisfied with how your request has been handled or the resolution provided, you have the option to escalate your complaint to the Information Commissioner’s Office (ICO) for an independent external review.

You can reach the Information Commissioner’s Office at the following contact details:

The Information Commissioner’s Office
Water Lane, Wycliffe House
Wilmslow, Cheshire
SK9 5AF
https://ico.org.uk/
0303 123 113

Also, you are giving your permission for us to share your information with third parties, such as but not limited to:

COMPANY
WEBSITECATEGORYSUB-CATEGORYCOMPANYICO
Acxiom Ltdhttp://www.acxiom.co.uk/MarketingMarketing companies1182318Z5459609
Age UKhttps://www.ageuk.org.uk/CharityElderly charities6825798Z1669914
AIG Europe Ltdhttps://www.aig.co.uk/InsuranceGeneral insurance1486260Z9265754
Alchemy Direct Media UK Ltdhttp://www.alchemydirectmedia.com/homeMarketingMarketing companies6604160Z1366077
Alpha Thrust Managementhttps://Atmanagement.co.ukUtilitiesTelecom Companies6306526Z1610273
Alzheimer’s Societyhttps://www.alzheimers.org.uk/CharityHealth & medical charities2115499Z6160647
Amnesty Internationalhttps://www.amnesty.org.uk/CharityHuman rights charities3139939Z8131207
British Heart Foundationhttps://www.bhf.org.uk/CharityHealth & medical charities699547Z8000253
BT Group plchttps://www.btplc.com/UtilitiesTelecom companies4190816Z8339253
Buffalo Data And Media Ltdhttp://buffalodm.com/MarketingMarketing companies9772577ZA142985
C & C communications Ltdhttp://candccommunications.co.uk/MarketingMarketing companies1199163ZA145335
Grevitywings Technologies Private Limitedhttp://www.grevitywings.comMarketingMarketing companies12884840ZA788601
C-Centric Ltdhttp://www.ccentric.co.uk/MarketingMarketing companies7096453ZA188569
Choose Leads Ltdhttp://www.chooseleads.co.uk/MarketingMarketing companies8241795ZA031580
CLC World Resorts & Hotelshttps://www.clcworld.com/TravelHoliday and property ownership3123199Z6762365
Data Baby Direct Marketing Ltdhttps://www.datababy.co.uk/MarketingMarketing companies8509409ZA002757
East Anglian Air Ambulancehttps://www.eaaa.org.uk/CharityLife saving charities4066700Z3529278
Eco Home Group Ltdhttps://www.theecohomegroup.com/UtilitiesEnergy products & services9452482ZA252894
EDF Energy plchttps://www.edfenergy.com/UtilitiesElectricity, gas & oil providers2366852Z7005326
Equiniti Data Limitedhttps://equinitidata.co.ukMarketingMarketing companies5350329Z9452802
Goldman Knightley Limitedhttp://www.goldmanknightley.co.uk/FinanceClaims9733115ZA167830
Guide Dogs for the Blindhttps://www.guidedogs.org.uk/CharityAnimal charities291646Z5672321
Home Appliance Guard Limitedhttp://www.homeapplianceguard.co.uk/InsuranceGeneral Insurance5927936Z2849365
Marketing Punchhttp://www.marketingpunch.co.ukMarketingMarketing companies6692565Z1503626
Marketingfile.com Ltdhttp://www.marketingfile.com/MarketingMarketing companies3991400Z8529876
Marks & Spencer plchttp://www.marksandspencer.com/RetailFashion & clothing214436Z6046528
Marsh & Parsons (Holdings) Ltdhttp://www.marshandparsons.co.uk/Real EstateReal Estate Agency7815928Z2953457
Mazda Motors UK Ltdhttps://www.mazda.co.uk/RetailAutomotive4212655Z5739409
McCann-Erickson Advertising Ltdhttps://www.mccann.com/MarketingMarketing companies1372305Z5991425
Media Bowl Ltdhttp://mediabowl.co.uk/MarketingMarketing companies7675128Z2763280
New Mount Reclaim Limited FinanceClaims9481117ZA127582
Octopus Energy Ltdhttps://octopus.energy/UtilitiesElectricity, gas & oil providers9263424ZA156851
Orca Ltdhttp://orca.ltd.uk/MarketingMarketing companies4395028Z6688377
Perfect Ingenuity Ltdhttp://perfectingenuity.com/MarketingMarketing companies9265244ZA081918
TDP Direct Marketing Ltdhttp://www.tdpmarketing.co.uk/MarketingMarketing companies6547606Z138694X
Vision Vantage Ltdhttp://www.linklifestyle.co.uk/MarketingTelesurvey12305541ZA562947
Willing To Give Ltd T/a Greyfriars Estate Planninghttp://www.greyfriars-estateplanning.co.uk/Financial AdviceFuneral plans,Will writing and Life AssuranceSC611290ZA520701
Captivate Plus LimitedMarketingMarketing companies15156403ZB636605

 

Scroll to Top