Last updated: 10 August 2022
1.1 The operator of ProQuo is ProQuo AI International Limited, registered in England and Wales with company registration number 14264902, with our London office MICHELIN HOUSE, 81 FULHAM ROAD, LONDON, GREATER LONDON, SW36RD, UNITED KINGDOM ("ProQuo"/"we"/”us”). We are committed to protecting and respecting your privacy.
Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it. This Privacy Notice is applicable to all those who access the Platform including visitors of the Site, our Clients (as defined below) and their employees, agents, independent contractors and other third parties authorised to use the Platform (“Authorised Users”) which access the Platform.
1.3 For the purposes of the United Kingdom General Data Protection Regulation, (“UK GDPR”), the European Union General Data Protection Regulation (“EU GDPR) and the Data Protection Act 2018:
1.3.1 Data we collect:
We act as data controller for all processing of personal data relating to:
(a) visitors of our Site; and
(b) subscribers to Premium Services (“Clients”) and their Authorised Users in the course of providing our services to Clients.
1.3.2 Data we receive from other controllers:
We also receive data from:
(a) Individual respondents matching our demographic requirements, sourced by our third party panel providers, which access the survey application on our Site to respond to surveys. Our Platform enables panel providers to generate surveys and send links to their own network of private contacts to invite them to participate in those surveys. In these circumstances the third party panel provider controls who the link is sent to and holds their contact data. We have no direct relationship with the individual respondents as they sign up to complete surveys directly with the panel provider. The information they submit via the survey is received by us. The only types of information we capture about individual respondents is generic information such as their shopping habits, age, gender, occupation type and location (country/state). Such data is not considered personal data in law as this data will not directly or indirectly reveal an individual’s identity. We analyse the data received and deliver brand management guidance to our Clients.
We do not collect any personal data from individual respondents and the relevant third party panel provider is the controller of the individual respondent’s personal data. The third party survey provider is responsible for ensuring compliance with all aspects of data privacy relating to the sending out of the survey.
(b) Commercial data from our Clients such as sales, volumes and media spend data. None of this data will contain any personal data.
The Privacy Notice applies to the data we collect as controller as set out in clause 1.3.1 however does not apply to the data we collect as set out in clause 1.3.2 where we are not the controller of the personal data or no personal data is included in the data provided to us.
1.3.3 We do not act as a data processor in any circumstances.
2. INFORMATION WE MAY COLLECT FROM YOU
2.1 We may collect and process data about you in the manner set out below. We will only use your personal data where we have a valid lawful basis to do so. Where we mention “legitimate interests”, this is the lawful basis we rely on when we feel that it is necessary to use your personal data for a reason which is in our and/or your interests and which does not unfairly affect your rights over your personal data.
2.2 You may give us information about you by visiting our Site, filling in forms on our Platform or by corresponding with us by phone, e-mail, support chat function or otherwise. This includes information you provide when you visit our Site, enquire about our services, register to use our Platform, subscribe to any of our services, enter a competition or promotion, when you report a problem with our Platform or when you upload information or data on our Platform. The information you give us may include your name, address, e-mail address, phone number, password and other registration information.
2.3 With regard to each of your visits to or use of our Platform we may automatically collect the following information about you or your devices:
2.4 We may receive information about you from sub-contractors and service providers in technical and payment services (please see part 7 of this Privacy Notice below for more information on this), and may receive information about you from them.
5.5 If there are any other circumstances which would require us to transfer your personal data outside of the EEA or the UK, we will seek your consent to transfer your personal data outside of the EEA or UK. You can ask us for more information about where we may transfer or store your personal data and how we will take steps to ensure your personal data is protected by using the contact details in section 10 of this Privacy Notice.
5.6 Where you have chosen a password that enables you to access certain parts of our Platform, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
6. HOW LONG WE STORE YOUR PERSONAL DATA
6.1 We will store your data for as long as necessary to fulfil the purposes for which it is originally collected, as explained in this Privacy Notice, or any other lawful purpose subsequently communicated to you, and for other essential purposes such as complying with legal obligations and enforcing our rights, such as those arising under any agreement with you. The retention period may therefore vary for different types of data, and depending on how and why it was gathered. Criteria relevant to determine retention periods include:
6.2 If the data is necessary for the performance of a contract, we will retain it while performance under that contract remains active, and for a period thereafter in which that data may still be relevant to dispute resolution and/or enforcement of rights under the contract.
6.3 If the data is processed pursuant to consent only, and consent is withdrawn, we will delete the data immediately, or we will cease processing and retain the data for a period only if we have a need to keep it for dispute resolution or enforcement of rights.
6.4 In certain cases we may be legally obliged to hold data for a certain period of time, or to delete the data at a certain time, including in accordance with the exercise of your rights as data subject as explained in this Privacy Notice.
7. PAYMENT PROCESSING
7.1 We do not store any credit card data associated with any purchases processed on the Platform. Instead, we use Stripe or GoCardless to manage payments.
7.2 You acknowledge that your use of the payment service provided by Stripe Payments Europe Ltd or GoCardless Ltd will require them to process your personal data. We may receive information about you in accordance with part 2 above from Stripe Payments Europe Ltd or GoCardless Ltd and we may disclose information about you in accordance with part 4 above to Stripe Payments Europe Ltd or GoCardless Ltd.
7.3 You acknowledge that your personal data may be processed and stored by Stripe Payments Europe Ltd or GoCardless Ltd outside of the EEA. Whilst we have been assured by Stripe Payments Europe Ltd or GoCardless Ltd that they comply with relevant data protection legislation, where Stripe Payments Europe Ltd or GoCardless Ltd are independent controllers of your personal data, we cannot guarantee the security of your personal data and any payments made through Stripe Payments Europe Ltd or GoCardless Ltd are undertaken at your own risk. To the extent that, Stripe Payments Europe Ltd or GoCardless Ltd are processors of your personal data, we will ensure that your personal data is processed in accordance with our instructions.
7.4 You should review Stripe Payments Europe Ltd Privacy Notice at https://stripe.com/gb/privacy or GoCardless Ltd Privacy Notice at https://gocardless.com/privacy/ for more details about how your information is collected, stored and maintained by Stripe Payments Europe Ltd or GoCardless Ltd.
8. YOUR RIGHTS
8.1 We will use your personal data for direct marketing purposes only where you have provided your consent to us. You have the right to ask us not to process your personal data for these purposes by clicking on the “unsubscribe” link at the bottom of each email or by emailing firstname.lastname@example.org. If you withdraw your consent to receiving marketing emails, we will still be able to send you essential communications that are necessary for the performance of our contract with you.
8.2 If you are an individual within the EEA or the UK, the GDPR provides you with rights to:
8.2.1 request from us confirmation of whether or not your personal data is being processed and where that is the case, confirmation of the information set out in this Privacy Notice;
8.2.2 request from us a copy of your data that is undergoing processing, including, in relation to data provided to us by you, and a right to request that data in a structured, commonly used and machine readable format;
8.2.3 request that we rectify or complete your personal data, where it is inaccurate or incomplete for the purposes of our processing of the data;
8.2.4 request that we erase your personal data in the following circumstances:
8.2.5 request that we restrict the processing of your personal data in the following circumstances:
8.2.6 object to any processing that is based on our, or a third party’s legitimate interests, upon which event we shall suspend processing until we demonstrate legitimate purposes that justify that processing. We may at all times continue to use data for the purpose of establishment, exercise or defence of legal claims;
8.2.7 withdraw your consent for future processing (where the processing is based on that consent);
8.2.8 lodge a complaint with the Information Commissioner’s Office, which is the data protection supervisory authority in the UK, or the national courts to seek a remedy if you think that your rights in relation to your personal data have been breached.
8.3 We will comply with any valid request for information under the rights explained above within one month, though we may tell you that this period is to be extended by a further two months where necessary, taking into account the complexity and number of the requests. This will normally be provided free of charge. If the request is manifestly unfounded, excessive or repetitive we may charge a reasonable fee or refuse to action the request.
8.4 The provision of personal data to us is not a statutory requirement. Where the provision of data is a contractual requirement, or a requirement necessary to enter into a contract, we will make that clear as part of the process by which the contract is concluded, which may include by way of terms of the contract. These provisions will also make clear the consequences of failure to provide such data.
8.5 Where the data is not a contractual requirement, you are not obliged to provide the data, but if you do not do so, we may be unable to offer certain benefits and functionality to you. For example, you may not be able to access parts of the Platform.
8.6 Our Platform may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates (including, but not limited to, websites on which our Platform is advertised). If you follow a link to any of these websites, please note that these websites and any services that may be accessible through them have their own privacy notices and that we do not accept any responsibility or liability for these notices or for any personal data that may be collected through these websites or services. Please check these notices before you submit any personal data to these websites or use these services.