Privacy Statement
We are committed to protecting your privacy and ensuring that your personal data is handled securely, responsibly, and in compliance with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This Privacy Statement explains how we collect, use, and protect your information when you take part in our market research activities.
Who We Are (Data Controller)
SRMC Limited is the data controller responsible for your personal data. Registered Address: 167-169 Great Portland Street, London, England, W1W 5PF Email: tobyp@shiftconsultancy.co.uk
Legal Basis for Processing
We process your personal data on the following legal bases: • Consent – where you have agreed to take part in research • Legitimate interests – to conduct market research and improve products and services, provided your rights are not overridden You may withdraw your consent at any time.
Taking Part in Research
We conduct market research only. We do not promote or sell products to participants. If you are invited to take part, it will be because: • You are a customer of, or have interacted with, one of our clients • You have agreed for your details to be shared for research purposes • You have opted in via a recruitment partner acting on our behalf We will never mislead you about the purpose of the research or how your data will be used. Participation is voluntary, and you may withdraw at any time without consequence.
Information We Collect
We may collect: • Contact details (name, email, phone number, address) • Demographic information (age, gender, occupation, etc.) • Your opinions and responses during research We only collect information relevant to the research. During online sessions (e.g. video calls or screen sharing), you may be shown materials, but we will never access your device or personal files.
How We Use Your Information
Your responses are combined with those of other participants and reported in anonymised form to clients. We take all reasonable steps to ensure that: • You cannot be identified in research outputs • Your personal data remains confidential Your information may only be disclosed where required by law or regulatory obligation (for example, in certain healthcare research scenarios). You will be informed in advance where this applies.
Sharing Your Information
We may share your data with trusted third parties who support our research activities, including: • Recruitment partners • Technology providers (e.g. survey or video platforms) • Clients (in anonymised or aggregated form only) All third parties are required to protect your data and use it only for specified purposes. We do not sell your personal data.
International Transfers
Your data is generally processed within the UK or European Economic Area (EEA). If data is transferred outside these areas, appropriate safeguards (such as Standard Contractual Clauses) will be in place.
Data Retention
• Personally identifiable information is retained for no longer than one month after project completion, unless otherwise stated • Anonymised research data may be retained for up to two years for analysis and reporting After these periods, data is securely deleted.
Your Rights
Under UK data protection law, you have the right to: • Access your personal data • Correct inaccurate data • Request deletion of your data • Restrict or object to processing • Request transfer of your data (data portability) • Withdraw consent at any time To exercise your rights, please contact us at the email address above.
Children’s Data
We do not knowingly collect data from individuals under 16 without appropriate consent from a parent or guardian.
Security
We implement appropriate technical and organisational measures to protect your data, including: • Secure storage systems • Restricted access controls • Encryption where appropriate
Complaints
If you have concerns about how your data is handled, please contact us first. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).
Updates to This Policy
This Privacy Statement may be updated from time to time to reflect legal or operational changes. The latest version will always be available upon request.
If you have any further questions, please reach out via our contact page.