Our data Protection Officer
Types of personal data we may collect from you
How we collect it
How it is used
Where it goes
How long we keep it for
How we secure it
Your rights explained
Davies McKerr Ltd (davies+mckerr) are a brand strategy agency utilising multiple research techniques to obtain insight and opinion from you and then shape it into effective and inspiring solutions and ideas for our clients. Our registered office is 7-8 Market Place, London, W1W 8AG and our company registration number is 05310125.
We are committed to meeting the requirements of all applicable data protection legislation and requirements, including the following laws, codes and standards:
- The EU General Data Protection Regulation (GDPR)
- UK Data Protection Act 2018
- Market Research Society’s (MRS) Code of Conduct
Any information that you supply to davies+mckerr is used solely for legitimate market research or statistical purposes and will never result in an attempt to sell you anything based on your responses.
Data Protection Officer
Davies McKerr Ltd.
7-8 Market Place
- Full name
- Phone number
- Email address
- Postal address
- Potentially bank details (if your incentive is paid with BACS)
- Other demographic information such as profession and age
- Product information you may have with one of our clients
- Your opinions
- Photos of you
- Audio and video recordings of the market research sessions
- We may also collect your IP address and which type of web browser you are using if you participate in an online market research survey
If there is a requirement to collect and process sensitive personal data (such as gender, ethnicity, political opinions, religious beliefs, trade union activities, physical or mental health or sexual life) we will obtain your explicit consent and provide a full description of how it will be used and where it will be located.
Information from your Browser
When you visit our site, we will collect information that helps us understand how you engage with our site, recording statistical data about users’ browsing actions and patterns.
This data may include information such as your computers Internet Protocol (IP) address, browser type, the time spent on our site and other statistics.
Social Media Platforms
Communication, engagement and actions taken through external social media platforms that this site and its owners participate on are custom to the terms and conditions as well as the privacy policies held with each social media platform respectively.
Users are advised to use social media platforms wisely and communicate / engage upon them with due care and caution in regard to their own privacy and personal details. This site nor its owners will ever ask for personal or sensitive information through social media platforms and encourage users wishing to discuss sensitive details to contact them through primary communication channels such as by telephone or email.
This site may use social sharing buttons which help share web content directly from web pages to the social media platform in question. Users are advised before using such social sharing buttons that they do so at their own discretion and note that the social media platform may track and save your request to share a web page respectively through your social media platform account.
- From one of our clients, who you are a customer of or have had contact with in the past
- From a research panel that you have signed up to in the past and for which you have consented your personal information to be used for invitations to future market research studies
- From one of our third parties who have previously made contact to invite you to conduct market research activities
- From the Contact Us form on our website
- From information that is publicly available
davies+mckerr sometimes obtains contact details from its clients, usually where you have had some contact with them previously and they are seeking feedback on a service they provide to you.
If your contact details have been provided to us by one of our clients, you will either have agreed to this when you gave them your contact details (consent) or they should have informed you that your information may be passed to third party research company such as davies+mckerr. In this case the information provided to us is done so either under our client’s legitimate interests to conduct the research or where they are a public authority, and that it is necessary to share the information in order to conduct the research task in the public interest.
Our clients will sometimes give us additional information about you, along with your contact details, but this will only be information needed for conducting or reporting the research. We will not seek to pass back any information which could identify you without your explicit consent, unless you are otherwise informed during the course of the research.
We may have also received your information from a third party you have previously been in contact with and with whom you have actively agreed that they may pass your contact details on to market research companies like davies+mckerr. If this is the case, we will let you know how and where your personal data will be used during and shortly after the research. We will then request consent to participate from you before the research starts.
We want to make sure that you are happy for us to use your information for market research purposes. If you think that your details should not have been passed to us, please inform us by firstname.lastname@example.org so that we can raise the concern with the organisation that provided us with your contact details.
- Contacting you to invite you to participate in a market research survey
- Attendance checking and coordination activities during face-to-face research interview sessions
- For internal quality control purposes
- Recording your research responses as either audio / video files or as text files, depending on the research methodology used
- Sharing with carefully selected third party vendors to conduct additional processing activities relating only to the research survey you have participated in
- Reviewing your research responses in combination with the responses obtained from others in order to identify trends and key messages
- Feed back to our client anonymised findings we believe to be of interest to them
At the start of these activities you may be asked for consent to an audio recording of the session being made. The recording is simply to enable our researchers to more easily and accurately report on the findings of the session. These recordings are typically kept for 12 months after the end of the research study, or longer in certain circumstances (in which case you will be advised of the actual period during the interview or discussion group), but they will be deleted after this time.
In obtaining your cooperation, we will not mislead you about the nature of the research or the use that will be made of the findings.
We will not send you unsolicited email or pass on your email address(es) to others for this purpose. If we want to send you future email or contact you using other methods, we will ask your explicit permission for this.
Where it goes
It is our intention to be as transparent with you as possible with regards to who we may need to share your personal data with to fulfil our research. Before you start your research with us we will let you know who we will share your information with strictly for the purposes of conducting necessary and legitimate additional market research activities.
During the course of a research programme your personal information may be shared with the following types of organisation:
- Recruiters (who will invite you to participate in research on our behalf)
- Fieldwork agencies (who may conduct interviews on our behalf)
- Research viewing facilities (who provide rooms, recording facilities and coordination services for our interviews)
- Online platforms (which we use to host online research activities)
- Video streaming partners (if we conduct any live streaming of any face-to-face interviews)
- Our clients (only if you are a customer and we have told you upfront that is what we planning to do)
- Transcribers (who may transcribe recordings)
- Cameramen and video editors (who may perform editing activities on our behalf)
- Law enforcement (only if required to do so)davies+mckerr utilizes a carefully selected network of third party vendors for market research related data processing and analysis. These organisations are contractually obliged to solely use your information for research and statistical purposes and safeguard your information from unauthorised disclosure or modification. They are also contractually obliged to delete your information in line with an agreed retention period.
davies+mckerr may need to transfer your data outside of the EU in order to complete research activities or fulfil our contractual requirements. We will always make sure we do the following if this is required:
- We’ll ask for your consent to do this before you start your research session with us
- We’ll ensure there are acceptable cross border transfer mechanisms in place (e.g. EU-US Privacy Shield for US companies, or EU standard contractual clauses for transfers to other organisations outside the EU)
- We’ll ensure adequate security mechanisms are in place to protect your information (as per our ISO 27001 procedures)
- We will never sell or rent your information to third parties
- We will never share your information with third parties for additional marketing purposes
How long we keep it for
Most personal information held about you by us in order to conduct our market research activities will be retained for 12 months after the completion of the work. This is to ensure we can respond to any validation requests from our clients or otherwise complete the provision of our services to our clients.
All information is securely deleted as soon as the retention period has been met.
The only personal data belonging to you that is not deleted after 12 months is your name and date of attendance which is securely stored in a separate database for a further 2 years. This is for legitimate internal quality control purposes.
We need to keep any signatures your provide against the receipt of monetary incentives for seven years to meet statutory requirements.
How we secure it
At davies+mckerr we make best efforts to ensure your personal data is protected at rest and in transit throughout its lifecycle (from creation, processing, sharing, through to deletion).
Your personal contact data is saved in files that are permanently password protected using Government grade AES encryption.
All video and audio footage is kept on encrypted hard drives . If we need to share audio or video footage with a third party we use carefully selected file transfer services that provide end-to-end encryption.
Your rights explained
At any point while we are in possession of or processing your personal data, you, the data subject, have the following rights:
• Right of access
you have the right to request a copy of the information that we hold about you.
• Right of rectification
you have a right to correct data that we hold about you that is inaccurate or incomplete.
• Right to be forgotten
in certain circumstances you can ask for the data we hold about you to be erased from our records.
• Right to restriction of processing
where certain conditions apply to have a right to restrict the processing.
• Right to object
you have the right to object to certain types of processing such as direct marketing.
• Right to judicial review
in the event that we refuse your request under rights of access, we will provide you with a reason as to why. You have the right to complain as outlined below.
Please contact our DPO (email@example.com) if you would like to exercise any of these rights.
In some cases, we will be acting as Joint Data Controller of your personal data along with our client, who would have provided us with your contact details to conduct the research. In such cases we will provide you details of our data protection policy and contact details for our Data Protection Officer should you have any queries. If you would like to update any of your information we will ensure that all other Data Controllers are notified.
Review of this Policy
We keep this Policy under regular review. This Policy was last updated in July 2019.