Privacy Policy & Notice

Effective from 24 September 2022

SmartSurvey Ltd. is committed to protect and respect your privacy.

This Privacy Policy & Notice applies to www.smartsurvey.co.uk which is owned and operated by SmartSurvey Ltd (registration number: 4885155) of (Unit 23, Basepoint Business Centre, Tewkesbury, GL208SD).

SmartSurvey Ltd. is registered with the ICO (registration number: Z1155070). The ICO is the UK’s independent body set up to uphold information rights. The ICO’s details are

Web: https://ico.org.uk

Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

Phone: 0303 123 1113

By Signing up to an account with us, filling out a survey or visiting our site, you agree to our Privacy Policy & Notice. Specifically, you agree to us processing your personal data as described in this Privacy Policy & Notice. Furthermore, if you have enabled the use of cookies on your web browser, then you agree to our use of cookies as described in this Privacy Policy & Notice.

This Privacy Policy & Notice does not provide any additional terms and conditions nor warranties whether expressly or implied. All terms and conditions are on the Terms of Use page. This Privacy Policy & Notice provides transparency to our users as how their personal data is collected and used and serves as a privacy notice as required by legislation.

If you have any further queries, please don’t hesitate to contact our DPO on: hah@smartsurvey.co.uk, by writing to SmartSurvey Ltd’s address above, or by calling +44 (0) 1684 342 405.

We have appointed IT Governance Europe Limited to act as our EU representative. If you wish to exercise your rights under the EU General Data Protection Regulation (EU GDPR) or have any queries in relation to your rights or general privacy matters in the EU, please email our Representative at eurep@itgovernance.eu. Please ensure to include our company name “SmartSurvey Ltd” in any correspondence you send to our Representative.

Changes to this policy

We may change this Privacy Policy & Notice at any time by updating this page, please make sure you frequently visit this page. We will endeavour to provide you with a notice of change of this page if any amendments occur. If you do not agree with the amendments please close your account and discontinue use of our services and site, otherwise, you will be deemed to have consented expressly to any changes.

Introduction

Our Privacy Policy & Notice describes how we capture and use personal data that we collect about visitors to our website.

Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.

SmartSurvey acts as a data controller for all personal data which our account holders and site visitors input, except for any personal data which the Account Holder’s survey respondents fill out or which we otherwise process on behalf of the Account Holder. For the personal data which the Account Holder’s survey respondents fill out onto any of the surveys commissioned by the Account Holder or any other personal data we process on behalf on of the Account Holder, SmartSurvey acts as a data processor, processing only in accordance to our Account Holder’s instructions; the Account Holder in such circumstances is the data controller.

We have divided this policy into 3 parts:

• Part 1: Privacy of Account Holders
• Part 2: Privacy of Survey Respondents
• Part 3: Privacy of all Site Visitors.

Definitions

An “Account Holder” is anyone who creates surveys, administers surveys or collects surveys using our services.

A “Survey Respondent” is anyone who fills out a survey powered by SmartSurvey or has his/her personal data processed by SmartSurvey by the Account Holder inputting that personal data into their SmartSurvey account.

A “Site Visitor” is anyone who visits our site.

Part 1: Privacy of Account Holders

The personal data we collect from you

We collect the following personal data from you as data controller:

• Account and Billing Information: this is the information you put on when opening an account including your name, username, email address etc. Where you pay for using our service, we will also collect information regarding the payment method you have selected (including billing address, card number, expiry date etc)
• Account Settings
• Any other information you share with us including support tickets, emails, queries and testimonials.

We collect the following personal data from you as data processors:

• Survey Questions & Answers
• Address Book: including any email addresses and names you put in
• File Libraries: Any files you upload on SmartSurvey’s File Library features
• Any data subject’s personal data you input into your SmartSurvey account.

The legal basis for us collecting the above personal data is that it is necessary for us to provide you the services under contract. For personal data that we are a data processor, we follow your instructions regarding how you want to process that data.

Billing Information

We request information from the user on our order form. A user must provide contact information (such as name, email, and address) and financial information (such as credit card number, expiration date). This information is used for billing purposes and to fill your orders. If we have trouble processing an order, the information is used to contact you.

What we do with the information we collect

We use the information we collect to provide our services to you. This includes:

• Providing you customer support and help about our services when you contact us.
• Contacting you about your account, billing information, changes to our Terms of Use, changes to other policies, and any other issues regarding our services.
• For trouble shooting and testing of our services to ensure that it is secure, reliable and of high standard.
• Maintain and improve our services.
• To enforce our Terms of Use to ensure you are not carrying out any prohibited activities.
• To prohibit illegal activity using our services.
• To respond to legal requests, court orders or lawful requests from government agencies.
• For providing our services to you as per your request.

Bear in mind you may make the survey public through your account, in that case any information on the survey will be made available to the public.

Marketing and promotional emails

Where you have consented, we will contact you regarding promotional activities and marketing in order to inform you about offers and helpful tips about our service, you have a right to withdraw that consent at any time by following the simple instruction on the email or emailing support@smartsurvey.co.uk telling us you no longer wish to receive promotional emails. Please also see your rights below.

If you are an Account Holder, we will process your data for the purpose of sending you marketing or promotional emails as we have a legitimate interest to do so, you may opt out of this at anytime by clicking the opt out link provided in each marketing or promotional email, or by contacting support@smartsurvey.co.uk anytime. Please also see your rights below.

Sharing & disclosure of your personal data

We use sub-processors to deliver some of our services and to store your personal data safely and securely. All of our sub-processors have robust security features to ensure that they have the appropriate technical and organisation measures to keep personal data secure, furthermore, they are contractually bound to not access, modify, disclose or erase the personal data without our instructions. To see a list of our sub-processors, please visit: smartsurvey.co.uk/company/sub-processors.

We also use payment processors to accept card payments. Please check the privacy policies and terms & conditions of those. We use the following payments processors:

• PayPal, their privacy policy can be found at: paypal.com/ee/webapps/mpp/ua/privacy-full
• Stripe, their privacy policy can be found at: stripe.com/gb/privacy

We may disclose account details to the billing contact (if different, and if billing contact demands it).

We may disclose account details to your organisation, where the registered account belongs to the organisation itself.

We may disclose account or billing details if required by law or to comply with a court order or legal process.

We may disclose account details if there is a change in business ownership in the event of a merger, change in ownership, consolidation amalgamation or other corporate change, you agree that the successor will process that personal data instead of SmartSurvey following a notice of 1 month given to all of SmartSurvey’s customers.

SmartSurvey is heavily focused on the privacy of your personal data, it does not sell you survey data without first obtaining your consent and agreement.

Personal data for which we are data controllers may be stored or transferred to outside of the UK and EEA and may be processed by third parties as data processors for the purpose of providing us their services, we need these services to effectively organise our internal functions, allow us to operate efficiently and understand our customers (please see the heading “What we do with the information we collect” above for more information and the section below about cookies). Any third party we use as a data processor is subject to a data processing agreement which contains all of the necessary requirements as set by the UKGDPR and the GDPR.. To see a list of these organisations, please contact legal@smartsurvey.co.uk.

Your data to third countries

The personal data for which we are data processors may be processed and transferred to outside of the UK or EEA. You may object to the sub-processing at any time by contacting support at support@smartsurvey.co.uk or your account manager, this objection however, may only be resolved by terminating your account.

The personal data for which are data controllers or data processors may be stored, transferred and processed outside of the UK or EEA. We will make such transfers in compliance of the UKGDPR and Chapter 5 of GDPR.

Backup policy

All personal data you hold with us is backed up in a separate physical premises with appropriate technical and organisational measures to keep that data secure. This is to minimise the risk of your personal data is lost or destroyed should the original be destroyed without your instructions.

Rights to your personal data

If you are an Account Holder, you have the following rights to your personal data (please see below under the Heading “General Statement” for more information):

Right to access: You have the right to access most of the data we hold about you and for you by logging in to your account. From your account you can access all of your account data and the data of your surveys and responses.

The reason why we say “most” of the data in this section is because there may be other information we hold about you that is not in your account. We may store other information about you such as support questions you have submitted to us, therefore, if you would like all of the information we hold about you, please contact our support team on: support@smartsurvey.co.uk.

You also have the right to access any information we hold about you and your account in a common machine readable format for free of charge, unless your request is excessive or repetitive.

We will process your request without undue delay and at the latest within 1 month, unless, your request is complex or numerous in which case we may take up to 3 months, but we will inform you within 1 month if this is the case.

Right to rectify: when you log on to your account, you can also rectify or update any information on your account or any questions and responses from surveys you have commissioned. If you are not able to do so, please contact us at support@smartsurvey.co.uk.

Right to erase: When you log on to your account, you may also erase any data on your account with the exception of data that is required for you to keep your account open (such as your email address, name etc). You may erase any survey questions or responses as you like when you are inside your account. You also have the right erase any other personal data which we hold about you including raising any questions or support tickets, if you would like to do so, please contact us at support@smartsurvey.co.uk

When you terminate your account, all of your personal data will be erased. When you delete your data or terminate your account, it may still be stored with us for up to an additional 30 days due to the backups we have. During this time, the data is considered “beyond use”.

Right to object: You have the right to object to us using your data for marketing purposes. If you would like to do so please contact us at support@smartsurvey.co.uk. This will be done free of charge and without undue delay.

Communication from the site

We send all new members a welcoming email to verify their registration.

Established members may occasionally receive information on improvements to our service, general service announcements, and a newsletter. Out of respect for the privacy of our users we present the option to not receive these types of communications. Please see the Choice and Opt-out sections in the options menu on your account or the link provided in such emails.

On some occasions it is necessary to send out a strictly service-related announcement. For instance, if our service is temporarily suspended for maintenance, we might send users an email. Generally, users may not opt-out of these communications; however, these communications are not promotional in nature.

We communicate with users on a regular basis to provide requested services and in regards to issues relating to their account we reply via email or phone, in accordance with the user’s wishes.

Retention Periods

We will retain your personal data for as long as necessary to carry out the service to you. If you wish to cancel your account, you may do so from your account settings. Alternatively, you may request that we no longer use your information to provide you our services then please contact us at: support@smartsurvey.co.uk.

Part 2: Privacy of Survey Respondents

A “Survey Respondent” is anyone who fills out a survey powered by SmartSurvey or has his/her personal data processed by the Account Holder using their SmartSurvey account.

The information SmartSurvey collects about Survey Respondents

Survey responses: On the instructions of the Account Holder, we collect your survey responses and any other personal data on their behalf. We then store those survey responses and other personal data for the Account Holder to provide them our Service. If you would like your survey responses erased, rectified, accessed or for any other queries about your responses, please contact the Account Holder directly.

Please bear in mind that not all surveys are anonymous and some Account Holders may ask you to put in your personal data.

Information which the Account Holder has shared with us for the purposes of administering the survey: Sometimes Account Holders list their Survey Respondents for us to contact to take the survey, or to ensure that certain data is not duplicated by the same Survey Respondent. Because of this you may find that the Account Holder has shared your email address so that we can contact you about responding to the survey, or has allowed for your IP address to be recorded and linked to your survey responses when you complete the survey responses. Please contact the Account Holder for further help on this issue.

SmartSurvey’s Use of the information we collect about you

We do not use your survey responses other than carrying out the service for the Account Holder. Your survey responses are owned and managed by the Account Holder who will have its own policy on data handling and would decide on whether your survey responses are kept private, disclosed to third parties, or provided to the public.

We do however employ a high standard of security, so if the Account Holder keeps your survey responses private, it will be stored in a highly secured environment – for more information please see our security page: https://www.smartsurvey.co.uk/security and our security policy.

We do not sell your survey data to other parties nor do we store it to contact you for a purpose other than under the direction of Account Holder.

We only share your data with third parties if necessary to carry out the Service(s) that the Account Holder has requested and as mentioned in this Privacy Policy & Notice.

If an Account Holder does not select the “Anonymous Survey” feature, then your IP address will be made available to the Account Holder.

Your rights to the personal data we process on behalf of the Account Holder

If you want to access your personal data, rectify your personal data, erase your personal data, object to the processing of your personal data, or for any other enquiries regarding the handling of your personal data, please contact the Account Holder directly. The Account Holder is able to amend, erase and access all the survey data and responses from its SmartSurvey account.

If you believe that the Account Holder is not complying with its legal obligation(s) regarding your personal data, please contact our legal team for a resolution: legal@smartsurvey.co.uk.

You can opt out of receiving survey requests by contacting the Account Holder directly. Alternatively, you can also click on the link supplied in an invitation email to opt out of receiving survey requests.

Data Retention

Please note that as the Account Holders control their own survey data, if you are a Survey Respondent you will need to contact them directly to amend or delete anything in your survey responses.

Part 3: Privacy of All Site Visitors

A “Site Visitor” is anyone who visits our site.

Cookies

We use both session ID cookies and persistent cookies. For the session ID cookie, once users close the browser, the cookie simply terminates. A persistent cookie is a small text file stored on the Site Visitor’s hard drive for an extended period of time. Persistent cookies can be removed by following Internet browser help file directions (see below). With session cookies we are able to ensure that only people who have entered in correct login details are able to use password-protected areas, and only areas that they are authorised to use. Persistent cookies enable us to track and target the interests of our users to enhance the experience on our site.

When you visit our site, we use cookies to store data on your device. This is so that we can:

• Distinguish you from other users of our website.
• Helps us to improve our website’s performance and your experience of using our website.
• Make it easier and more convenient for you to log in to our site, by storing the username and password on your device.
• For ensuring secure login.
• In certain surveys under the Account Holder’s direction, to ensure that a survey respondent can’t retake the same survey more than once.
• To track referral data and see how you got to our site.
• To measure your usage of our services.

Third Party cookies

Third parties we work with also place cookies on your device when you visit our website to provide you with marketing content which is tailored according to you, and in order to determine if such content is useful or effective. If you don’t want to view targeted ads please visit youradchoices.com to opt out. We use Google Analytics on our website to support display advertising. If you wish to find out more about this, please visit: google.com/intl/en/policies/technologies/ads

To learn more about the cookies we use, please visit our cookies page: smartsurvey.co.uk/company/how-we-use-cookies

Some third party cookies may transfer your personal data outside of the EEA, for example, where your IP address is collected and anonymised. Where this happens we ensure that we comply with Chapter 5 of the GDPR, which ensures that the transfer is subject to appropriate safeguards if it is not transferred to a country that has been conferred an adequacy decision by the EU Commission.

If you would like to restrict any cookies, you may do so from your browser settings by following the instructions below, depending on the browser you use:

Google Chrome: support.google.com/chrome/answer/95647?hl=en-GB&p=cpn_cookies

Microsoft Internet Explorer: support.microsoft.com/en-us/topic/delete-and-manage-cookies-168dab11-0753-043d-7c16-ede5947fc64d

Microsoft Edge: support.microsoft.com/en-us/windows/microsoft-edge-browsing-data-and-privacy-bb8174ba-9d73-dcf2-9b4a-c582b4e640dd

Mozilla Firefox: support.mozilla.org/en-US/kb/block-websites-storing-cookies-site-data-firefox?redirectslug=Blocking+cookies&redirectlocale=en-US

How to control cookies from your web browser

Web browsers general accept cookies. You can however change your setting to decline cookies. To learn more about this, please visit this link: aboutcookies.org/how-to-control-cookies/

Do note that changing the setting on your browser to reject cookies means that you may not have access to important features on our site.

As the legal basis of using cookies, it is necessary for the purposes of the legitimate interests pursued by SmartSurvey and other parties as applicable (including Google). Our legitimate interests are:

• Distinguish you from other users of our website.
• Helps us to improve our website’s performance and your experience of using our website.
• Make it easier and more convenient for you to log in to our site, by storing the username and password on your device.
• For ensuring secure login.
• In certain surveys under the Account Holder’s direction, to ensure that a survey respondent can’t retake the same survey more than once.
• To track referral data and see how you got to our site.
• To measure your usage of our services.

However, if you believe that such interests are overridden by the interests or fundamental rights and freedoms of you as the data subject and that those require protection of your personal data, please contact us at support@smartsurvey.co.uk.

We will block access to your personal data or give you the means to quickly do so, while we make a decision as to your request.

You can also click on the privacy settings icon displayed on the webpage to change your cookie preferences.

Source Data

SmartSurvey records the source of how you got to our site, including for example from another website or from a link to our website.

Log Files

We collect information about you when you visit our site including which webpages you visit, when you have visited them etc. We may also keep log files which contain data about the device you’re using, the IP address, internet service provider, operating system, timestamps and files you view from our site.

IP Addresses

By visiting our site, your IP address will be recorded by our servers and stored in log files. These log files are used for record keeping, tracking referring websites, inferring your general location, and for security purposes to avoid SPAM, abuse and DDOS attacks.

Device Data

We collect data about the device and system you use to access our site. In particular, we collection your IP address, operating system, device type, browser type and your general location of accessing the site.

Security

SmartSurvey has active security measures to ensure that we are compliant with all data we process in accordance to data privacy legislation as applicable to the UK. Our technical and organisational security measures mean that we comply with our obligations to ensure that data stored with us is stored safely and securely.

Our security measures include:

• ISO27001 certified
• Cyber Essentials Plus certified
• Access controls
• Firewalls
• Tenable Nessus security scans
• Online Security (TLS Encryption) – with the exception of our Basic Account (free).
• Encryption at rest

For more information on our security measures, please visit: smartsurvey.co.uk/security

Our website takes every precaution to protect our users’ information. When users browse or submit information via the website, their information is protected both online and off-line. Our website is encrypted and is protected by HTTPS (with the exception of our Basic Account (free). The lock icon displayed on your web browser signifies that HTTPS protection is active, as opposed to un-locked (or open). While we use HTTPS encryption to our website, we also do everything in our power to protect user information offline. All of our users’ information is restricted. Only employees who need the information to perform a specific job are granted access to personally identifiable information. Furthermore, all employees are kept up-to-date on our security and privacy practices. Every quarter, as well as any time new policies are added, our employees are notified and/or reminded about the importance we place on privacy, and what they can do to ensure our users’ information is protected. Finally, the servers that store personally identifiable information are in a secure environment, in a locked facility.

Regarding our accounts, HTTPS encryption for surveys is available for all accounts and surveys administered by those accounts, except for surveys that are administered by our Basic Account. When using one of our Paid Accounts please ensure that the “SSL Encryption” option is switched when you create and send surveys to your survey respondents.

For ensuring security of data at rest, we use Microsoft SQL Server Transparent Data Encryption (TDE) using AES encryption algorithm.

If you have any further queries about security, please contact security@smartsurvey.co.uk.

Right to complain

If you feel that we have mistreated the handling of your data, you have the right to complain to us in which case we will rush to resolve the matter as quickly as possible and prevent any further mishandling.

You also have the right to complain to the Information Commissioner’s Office.

Necessary Disclosure by law

Though we make every effort to preserve user privacy, we may need to disclose personal information when required by law wherein we have a good-faith belief that such action is necessary to comply with a current judicial proceeding, a court order or legal process served on our website.

Links

This website contains links to other sites. Please be aware that we, SmartSurvey, are not responsible for the privacy practices of such other site. We encourage our users to be aware when they leave our site and to read the privacy statements of each and every website that collects personally identifiable information. This privacy statement applies solely to information collected by this website.

General Statement

For this section, the following definitions apply:

Controller: the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.

Personal data: any information relating to an identified or identifiable natural person (“Data Subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Data subject: any identified or identifiable natural person, whose personal data is processed by the controller responsible for the processing.

Processor: a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

Recipient: a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing.

Third Party: a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.

Restriction of processing: the marking of stored personal data with the aim of limiting their processing in the future.

Processing: any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Profiling: any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.

Consent: Consent of the data subject is any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

Legal Basis

In addition to the legal basis mentioned above, we may also possess the following legal basis for processing the data subject’s personal data where:

• the data subject has given consent to the processing of his or her personal data for one or more specific purposes;
• processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
• processing is necessary for compliance with a legal obligation to which the controller is subject;
• processing is necessary in order to protect the vital interests of the data subject or of another natural person;
• processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller; or,
• processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

Data Subject Rights

Certain regulations afford EU Data Subjects with rights. These rights are summarised below. In order to assert any of these rights please contact our DPO or another SmartSurvey employee at any time.

• Right to Confirmation: Each data subject has the right to obtain from SmartSurvey (acting as controller) confirmation as to whether or not his or her personal data is being processed. This includes the right to confirm whether his or her personal data is transferred to a third country or to an international organisation as well as the appropriate safeguards relating to the transfer.
• Right to Access: Each data subject has right to obtain from SmartSurvey (acting as controller), free information about his or her personal data stored at any time and a copy of this information, however, SmartSurvey reserves the right to charge a ‘reasonable fee’ when a request is manifestly unfounded or excessive, particularly if it is repetitive.
• Right to Rectification: Each data subject has the right to rectify inaccurate personal data concerning him or her that is being processed by SmartSurvey (acting as controller) without undue delay. Furthermore, the data subject has the right to complete any incomplete personal data and to provide supplementary statements to rectify that personal data.
• Right to Erasure: Each data subject has right to erase any personal data concerning him or her which is being processed by SmartSurvey (acting as controller) without undue delay. SmartSurvey may refuse to grant you this right if a statutory exemption applies.
• Right of Restriction of Processing: Each data subject has the right to restrict the processing of personal data from SmartSurvey (acting as controller) where a statutory ground applies.
• Right to Data Portability: Each data subject has the right to receive the personal data concerning him or her, which was provided to SmartSurvey (acting as controller), in a commonly used machine-readable format.
• Right to Object: Each data subject has the right to object to SmartSurvey (acting as controller) to the processing of his or her personal data if a statutory basis exists.
• Right not to be subject to automated individual decision-making, including profiling: Each data subject has the right not to be subject to a decision based solely on automated processing, including profiling.
• Right to Withdraw Consent: Where consent forms the basis for processing by SmartSurvey (acting as controller), the data subject has the right to withdraw his or her consent to the processing of his or her personal data at any time. Data Subjects can contact SmartSurvey’s Data Protection Officer or any other employee to withdraw consent at any time.
• Right to Complain to the Supervisory Authority (Information Commissioner’s Office (ICO)): Details of the ICO are provided at the top of this Privacy Policy & Notice.

Security of processing

SmartSurvey has implemented technical and organisational measures to ensure personal data processed remains secure, however, absolute security cannot be guaranteed. Please contact our DPO or Security Team (security@smartsurvey.co.uk) for further details.

Law & jurisdiction

This Privacy Policy & Notice is governed by and interpreted according to the law of England and Wales. All disputes arising out of this Privacy Policy & Notice will be subject to the exclusive jurisdiction of the English and Welsh courts.

Transfer of Rights

You may not transfer any of your rights under this Privacy Policy & Notice to any other person. We may transfer our rights under this privacy notice where we reasonably believe your rights will not be affected.

Invalid provisions

If any court or competent authority finds that any provision of this Privacy Policy & Notice (or part of any provision) is invalid, illegal or unenforceable, that provision or part-provision will, to the extent required, be deemed to be deleted, and the validity and enforceability of the other provisions of this Privacy Policy & Notice will not be affected.

Effective until 23 September 2022

SmartSurvey Ltd. is committed to protect and respect your privacy.

This Privacy Policy & Notice applies to www.smartsurvey.co.uk which is owned and operated by SmartSurvey Ltd (registration number: 4885155) of (Unit 23, Basepoint Business Centre, Tewkesbury, GL208SD).

SmartSurvey Ltd. is registered with the ICO (registration number: Z1155070). The ICO is the UK’s independent body set up to uphold information rights. The ICO’s details are

Web: https://ico.org.uk

Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

Phone: 0303 123 1113

By Signing up to an account with us, filling out a survey or visiting our site, you agree to our Privacy Policy & Notice. Specifically, you agree to us processing your personal data as described in this Privacy Policy & Notice. Furthermore, if you have enabled the use of cookies on your web browser, then you agree to our use of cookies as described in this Privacy Policy & Notice.

This Privacy Policy & Notice does not provide any additional terms and conditions nor warranties whether expressly or implied. All terms and conditions are on the Terms of Use page. This Privacy Policy & Notice provides transparency to our users as how their personal data is collected and used and serves as a privacy notice as required by legislation.

If you have any further queries, please don’t hesitate to contact our DPO on: hah@smartsurvey.co.uk, by writing to SmartSurvey Ltd’s address above, or by calling +44 (0) 1684 342 405.

We have appointed IT Governance Europe Limited to act as our EU representative. If you wish to exercise your rights under the EU General Data Protection Regulation (EU GDPR) or have any queries in relation to your rights or general privacy matters in the EU, please email our Representative at eurep@itgovernance.eu. Please ensure to include our company name “SmartSurvey Ltd” in any correspondence you send to our Representative.

Changes to this policy

We may change this Privacy Policy & Notice at any time by updating this page, please make sure you frequently visit this page. We will endeavour to provide you with a notice of change of this page if any amendments occur. If you do not agree with the amendments please close your account and discontinue use of our services and site, otherwise, you will be deemed to have consented expressly to any changes.

Introduction

Our Privacy Policy & Notice describes how we capture and use personal data that we collect about visitors to our website.

Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.

SmartSurvey acts as a data controller for all personal data which our account holders and site visitors input, except for any personal data which the account holder’s survey respondents fill out. For the personal data which the account holder’s survey respondents fill out onto any of the surveys commissioned by the account holder, SmartSurvey acts as a data processor, processing only in accordance to our account holder’s instructions; the account holder in such circumstances is the data controller.

We have divided this policy into 3 parts:

• Part 1: Privacy of Account Holders
• Part 2: Privacy of Survey Respondents
• Part 3: Privacy of all Site Visitors.

Definitions

An “Account Holder” is anyone who creates surveys, administers surveys or collects surveys using our services.

A “Survey Respondent” is anyone who fills out a survey powered by SmartSurvey.

A “Site Visitor” is anyone who visits our site.

Part 1: Privacy of Account Holders

An “Account Holder” is anyone who creates surveys, administers surveys or collects surveys using our services.

The personal data we collect from you

We collect the following personal data from you as data controllers:

• Account and Billing Information: this is the information you put on when opening an account including your name, username, email address etc. Where you pay for using our service, we will also collect information regarding the payment method you have selected (including billing address, card number, expiry date etc).
• Account Settings
• Any other information you share with us including support tickets, emails, queries and testimonials.

We collect the following personal data from you as data processors:

• Survey Questions & Answers
• Address Book: including any email addresses and names you put in.
• File Libraries: Any files you upload on SmartSurvey’s File Library features.

The legal basis for us collecting the above personal data is that it is necessary for us to provide you the services under contract. For personal data that we are a data processor, we follow your instructions regarding how you want to process that data.

Billing Information

We request information from the user on our order form. A user must provide contact information (such as name, email, and address) and financial information (such as credit card number, expiration date). This information is used for billing purposes and to fill your orders. If we have trouble processing an order, the information is used to contact you.

What we do with the information we collect

We use the information we collect to provide our services to you. This includes:

• Providing you customer support and help about our services when you contact us.
• Contacting you about your account, billing information, changes to our Terms of Use, changes to other policies, and any other issues regarding our services.
• For trouble shooting and testing of our services to ensure that it is secure, reliable and of high standard.
• Maintain and improve our services.
• To enforce our Terms of Use to ensure you are not carrying out any prohibited activities.
• To prohibit illegal activity using our services.
• To respond to legal requests, court orders or lawful requests from government agencies.
• For providing our services to you as per your request.

Bear in mind you may make the survey public through your account, in that case any information on the survey will be made available to the public.

If an Account Holder does not select the “Anonymous Survey” feature, then the IP addresses of the survey respondents will also be stored by us.

Marketing and promotional emails

Where you have consented, we will contact you regarding promotional activities and marketing in order to inform you about offers and helpful tips about our service, you have a right to withdraw that consent at any time by following the simple instruction on the email or emailing support@smartsurvey.co.uk telling us you no longer wish to receive promotional emails. Please also see your rights below.

If you are an Account Holder, we will process your data for the purpose of sending you marketing or promotional emails as we have a legitimate interest to do so, you may opt out of this at anytime by clicking the opt out link provided in each marketing or promotional email, or by contacting support@smartsurvey.co.uk anytime. Please also see your rights below.

Sharing & disclosure of your personal data

We use sub-processors to store your personal data safely and securely. All our sub-processors have robust security features to ensure that they have the appropriate technical and organisation measures to keep personal data secure, furthermore, they are contractually bound to not access, modify, disclose or erase the personal data without our instructions. To see a list of our sub-processors, please visit: https://www.smartsurvey.co.uk/company/sub-processors.

We also use payment processors to accept card payments. Please check the privacy policies and terms & conditions of those. We use the following payments processors:

• PayPal, their privacy policy can be found at: https://www.paypal.com/ee/webapps/mpp/ua/privacy-full
• Stripe, their privacy policy can be found at: https://stripe.com/gb/privacy

We may disclose account details to the billing contact (if different, and if billing contact demands it).

We may disclose account details to your organisation, where the registered account belongs to the organisation itself.

We may disclose account or billing details if required by law or to comply with a court order or legal process.

We may disclose account details if there is a change in business ownership in the event of a merger, change in ownership, consolidation amalgamation or other corporate change, you agree that the successor will process that personal data instead of SmartSurvey following a notice of 1 month given to all of SmartSurvey’s customers.

SmartSurvey is heavily focused on the privacy of your personal data, it does not sell you survey data without first obtaining your consent and agreement.

Personal data for which we are data controllers may be stored or transferred to outside of the EEA and may be processed by third parties as data processors for the purpose of providing us their services, we need these services to effectively organise our internal functions, allow us to operate efficiently and understand our customers (please see the heading “What we do with the information we collect” above for more information and the section below about cookies). Any third party we use is subject to a data processing agreement which contains all of the necessary requirements as set by the GDPR including those imposed under Article 28 of the GDPR. These organisations are on this page: data processors.

Your data to third countries

The personal data for which we are data processors may be processed and transferred to outside of the EEA. You may object to the sub-processing at any time by contacting support at support@smartsurvey.co.uk or your account manager, this objection however, may only be resolved by terminating your account.

The personal data for which are data controllers or data processors may be stored, transferred and processed outside of the EEA. We will make such transfers in compliance of Chapter 5 of GDPR – in the absence of a transfer to a country that is not subject to an adequacy decision, the transfer will be made subject to an appropriate safeguard.

Backup policy

All personal data you hold with us is backed up in a separate physical premises with appropriate technical and organisational measures to keep that data secure. This is to ensure that your personal data is not lost or destroyed should the original be destroyed without your instructions.

Rights to your personal data

If you are an Account Holder, you have the following rights to your personal data (please see below under the Heading “General Statement” for more information):

Right to access: You have the right to access most of the data we hold about you and for you by logging in to your account. From your account you can access all of your account data and the data of your surveys and responses.

The reason why we say “most” of the data in this section is because there may be other information we hold about you that is not in your account. We may store other information about you such as support questions you have submitted to us, therefore, if you would like all of the information we hold about you, please contact our support team on: support@smartsurvey.co.uk.

You also have the right to access any information we hold about you and your account in a common machine readable format for free of charge, unless your request is excessive or repetitive.

We will process your request without undue delay and at the latest within 1 month, unless, your request is complex or numerous in which case we may take up to 3 months, but we will inform you within 1 month if this is the case.

Right to rectify: when you log on to your account, you can also rectify or update any information on your account or any questions and responses from surveys you have commissioned. If you are not able to do so, please contact us at support@smartsurvey.co.uk.

Right to erase: When you log on to your account, you may also erase any data on your account with the exception of data that is required for you to keep your account open (such as your email address, name etc). You may erase any survey questions or responses as you like when you are inside your account. You also have the right erase any other personal data which we hold about you including raising any questions or support tickets, if you would like to do so please contact us at support@smartsurvey.co.uk

When you terminate your account, all of your personal data will be erased.

When you delete your data or terminate your account, it may still be stored with us for up to an additional 30 days due to the backups we have. During this time, the data is considered “beyond use”.

Right to object: You have the right to object to us using your data for marketing purposes. If you would like to do so please contact us at support@smartsurvey.co.uk. This will be done free of charge and without undue delay.

Communication from the site

We send all new members a welcoming email to verify their registration.

Established members may occasionally receive information on improvements to our service, general service announcements, and a newsletter. Out of respect for the privacy of our users we present the option to not receive these types of communications. Please see the Choice and Opt-out sections in the options menu on your account or the link provided in such emails.

On some occasions it is necessary to send out a strictly service related announcement. For instance, if our service is temporarily suspended for maintenance we might send users an email. Generally, users may not opt-out of these communications; however, these communications are not promotional in nature.

We communicate with users on a regular basis to provide requested services and in regards to issues relating to their account we reply via email or phone, in accordance with the user’s wishes.

Retention Periods

We will retain your personal data for as long as necessary to carry out the service to you. If you wish to cancel your account, you may do so from your account settings. Alternatively, you may request that we no longer use your information to provide you our services then please contact us at: support@smartsurvey.co.uk.

Part 2: Privacy of Survey Respondents

A “Survey Respondent” is anyone who fills out a survey powered by SmartSurvey.

The information SmartSurvey collects about Survey Respondents

Survey responses: On the instructions of the Account Holder, we collect your survey responses on their behalf. We then store those survey responses for the Account Holder. If you would like your survey responses erased, rectified, accessed or for any other queries about your responses, please contact the Account Holder directly.

Please bear in mind that not all surveys are anonymous and some Account Holders may ask you to put in your personal data.

Information which the Account Holder has shared with us for the purposes of administering the survey: Sometimes Account Holders list their Survey Respondents for us to contact to take the survey, or to ensure that certain data is not duplicated by the same Survey Respondent. Because of this you may find that the Account Holder has shared your email address so that we can contact you about responding to the survey, or has allowed for your IP address to be recorded and linked to your survey responses when you complete the survey responses. Please contact the Account Holder for further help on this issue.

SmartSurvey’s Use of the information we collect about you

We do not use your survey responses other than carrying out the service for the Account Holder. Your survey responses are owned and managed by the Account Holder who will have its own policy on data handling and would decide on whether your survey responses are kept private, disclosed to third parties, or provided to the public.

We do however employ a high standard of security, so if the Account Holder keeps your survey responses private, it will be stored in a highly secured environment – for more information please see our security section below and our security policy.

We do not sell your survey data to other parties nor do we store it to contact you for a purpose other than under the direction of Account Holder.

We only share your data with third parties if necessary to carry out the service(s) that the Account Holder has requested and as mentioned in this Privacy Policy & Notice.

If an Account Holder does not select the “Anonymous Survey” feature, then your IP address will be stored along with your responses.

Your rights to the personal data we process on behalf of the Account Holder

If you want to access your personal data, rectify your personal data, erase your personal data, object to the processing of your personal data, or for any other enquiries regarding the handling of your personal data, please contact the Account Holder directly. The Account Holder is able to amend, erase and access all the survey data and responses from its account.

If you believe that the Account Holder is not complying with its legal obligation(s) regarding your personal data, please contact our legal team for a resolution: legal@smartsurvey.co.uk.

You can opt out of receiving survey requests by contacting the Account Holder directly. Alternatively, you can also click on the link supplied in an invitation email to opt out of receiving survey requests.

Data Retention

Please note that as the Account Holders control their own survey data, if you are a Survey Respondent to an Account Holder’s survey you will need to contact them directly to amend or delete anything in your survey responses.

Part 3: Privacy of All Site Visitors

A “Site Visitor” is anyone who visits our site.

Cookies

We use both session ID cookies and persistent cookies. For the session ID cookie, once users close the browser, the cookie simply terminates. A persistent cookie is a small text file stored on the Site Visitor’s hard drive for an extended period of time. Persistent cookies can be removed by following Internet browser help file directions (see below). With session cookies we are able to ensure that only people who have entered in correct login details are able to use password-protected areas, and only areas that they are authorised to use. Persistent cookies enable us to track and target the interests of our users to enhance the experience on our site.

When you visit our site, we use cookies to store data on your device. This is so that we can:

• Distinguish you from other users of our website.>
• Helps us to improve our website’s performance and your experience of using our website.
• Make it easier and more convenient for you to log in to our site, by storing the username and password on your device.
• For ensuring secure login.
• In certain surveys under the Account Holder’s direction, to ensure that a survey respondent can’t retake the same survey more than once.
• To track referral data and see how you got to our site.
• To measure your usage of our services.

Third Party cookies

Third parties we work with also place cookies on your device when you visit our website to provide you with marketing content which is tailored according to you, and in order to determine if such content is useful or effective. If you don’t want to view targeted ads please visit https://youradchoices.com/ to opt out. We use Google Analytics on our website to support display advertising. If you wish to find out more about this, please visit: https://www.google.com/intl/en/policies/technologies/ads/

To learn more about the cookies we use, please visit our cookies page: https://www.smartsurvey.co.uk/company/how-we-use-cookies

Some third party cookies may transfer your personal data outside of the EEA, for example, where your IP address is collected and anonymised. Where this happens we ensure that we comply with Chapter 5 of the GDPR, which ensures that the transfer is subject to appropriate safeguards if it is not transferred to a country that has been conferred an adequacy decision by the EU Commission.

Cloudflare

It is used for security and for load balancing/speeding up loading pages. This is a strictly necessary cookie. For more information please visit: support.cloudflare.com

Expiration: 1 year

Google Analytics & Google Tag Manager

This cookie helps us measure how you interact with our website. It does this by recording what a Site Visitor has done on pages and interactions with our website and is used to collect and analyse information about how Site Visitors use our site. We use Google Analytics and the Google Tag Manager platforms to collect and compile reports that help us improve our services. The cookies collect information in an anonymous form, including the number of visitors to the site, where visitors have come to the site from and the pages they visited. A unique User ID number is assigned to users who sign up with SmartSurvey in order to better understand their use of our service while logged in, no personally identifiable information is collected by this process.

Google Analytics also helps to stop you from seeing the same ad over and over again, to detect and stop click fraud and to show ads that are likely to be more relevant (such as ads based on websites you have visited).

Google stores a record of the ads we serve in our logs which include your web request, IP address (which can also be used to infer general location), browser type, browser language, the date and time of your request, and one or more cookies that may uniquely identify your browser. This data is anonymised by removing part of the IP address (after 9 months) and cookie information (after 18 months). This data is stored with Google not SmartSurvey. SmartSurvey receives anonymised data of this so we cannot identify whom the individuals are.

To opt out of google Analytics, please visit https://tools.google.com/dlpage/gaoptout/

VWO

Used on www.smartsurvey.co.uk pages to display new optimised content to Site visitors and collect information on Site Visitor’s interaction with features that appear on those pages. This helps us better understand and support Site Visitors with content more relevant to their interests.

To opt out please follow the instructions on this link: https://vwo.com/opt-out/

Hubspot

Used on www.smartsurvey.co.uk to track visitors, recognise you and your chat history with us, track visitor and visitor sessions, obtain information about your computer and your visits to our site, information includes: your IP address, geographical location, browser type, referral source, length of visit and pages viewed. For full details, please visit: https://knowledge.hubspot.com/reports/what-cookies-does-hubspot-set-in-a-visitor-s-browser.

If you would like to restrict any cookies, you may do so from your browser settings by following the instructions below, depending on the browser you use:

If you would like to restrict any cookies, you may do so from your browser settings by following the instructions below, depending on the browser you use:

Google Chrome: https://support.google.com/chrome/answer/95647?hl=en-GB&p=cpn_cookies

Microsoft Internet Explorer: https://support.microsoft.com/en-us/topic/delete-and-manage-cookies-168dab11-0753-043d-7c16-ede5947fc64d

Microsoft Edge: https://support.microsoft.com/en-us/windows/microsoft-edge-browsing-data-and-privacy-bb8174ba-9d73-dcf2-9b4a-c582b4e640dd

Mozilla Firefox: https://support.mozilla.org/en-US/kb/block-websites-storing-cookies-site-data-firefox?redirectslug=Blocking+cookies&redirectlocale=en-US

How to control cookies from your web browser

Web browsers general accept cookies. You can however change your setting to decline cookies. To learn more about this, please visit this link: https://www.aboutcookies.org/how-to-control-cookies/

Do note that changing the setting on your browser to reject cookies means that you may not have access to important features on our site.

As the legal basis of using cookies, it is necessary for the purposes of the legitimate interests pursued by SmartSurvey and other parties as applicable (including Google). Our legitimate interests are:

• Distinguish you from other users of our website.
• Helps us to improve our website’s performance and your experience of using our website.
• Make it easier and more convenient for you to log in to our site, by storing the username and password on your device.
• For ensuring secure login.
• In certain surveys under the Account Holder’s direction, to ensure that a survey respondent can’t retake the same survey more than once.
• To track referral data and see how you got to our site.
• To measure your usage of our services.

However, if you believe that such interests are overridden by the interests or fundamental rights and freedoms of you as the data subject and that those require protection of your personal data, please contact us at support@smartsurvey.co.uk.

We will block access to your personal data or give you the means to quickly do so, while we make a decision as to your request.

Source Data

SmartSurvey records the source of how you got to our site, including for example from another website or from a link to our website.

Log Files

We collect information about you when you visit our site including which webpages you visit, when you have visited them etc. We may also keep log files which contain data about the device you’re using, the IP address, internet service provider, operating system, timestamps and files you view from our site.

IP Addresses

By visiting our site, your IP address will be recorded by our servers and stored in log files. These log files are used for record keeping, tracking referring websites, inferring your general location, and for security purposes to avoid SPAM, abuse and DDOS attacks.

Device Data

We collect data about the device and system you use to access our site. In particular, we collection your IP address, operating system, device type, browser type and your general location of accessing the site.

Security

SmartSurvey has active security measures to ensure that we are compliant with all data we process in accordance to data privacy legislation as applicable to the UK. Our technical and organisational security measures mean that we comply with our obligations to ensure that data stored with us is stored safely and securely.

Our security measures include:

• ISO27001 certified
• Cyber Essentials Plus certified
• Access controls
• Firewalls
• McAfee Secure Security Scan
• Online Security (TLS Encryption) – with the exception of our Basic Account (free).
• Encryption at rest

For more information on our security measures, please visit: https://www.smartsurvey.co.uk/security

Our website takes every precaution to protect our users’ information. When users browse or submit information via the website, their information is protected both online and off-line. Our website is encrypted and is protected by HTTPS (with the exception of our Basic Account (free). The lock icon displayed on your web browser signifies that HTTPS protection is active, as opposed to un-locked (or open). While we use HTTPS encryption to our website, we also do everything in our power to protect user information offline. All of our users’ information is restricted. Only employees who need the information to perform a specific job are granted access to personally identifiable information. Furthermore, all employees are kept up-to-date on our security and privacy practices. Every quarter, as well as any time new policies are added, our employees are notified and/or reminded about the importance we place on privacy, and what they can do to ensure our users’ information is protected. Finally, the servers that store personally identifiable information are in a secure environment, in a locked facility.

Regarding our accounts, HTTPS encryption for surveys is available for all accounts and surveys administered by those accounts, except for surveys that are administered by our Basic Account. When using one of our Paid Accounts please ensure that the “SSL Encryption” option is switched when you create and send surveys to your survey respondents.

For ensuring security of data at rest, we use Microsoft SQL Server Transparent Data Encryption (TDE) using AES encryption algorithm.

If you have any further queries about security, please contact security@smartsurvey.co.uk.

Right to complain

If you feel that we have mistreated the handling of your data, you have the right to complain to us in which case we will rush to resolve the matter as quickly as possible and prevent any further mishandling.

You also have the right to complain to the Information Commissioner’s Office.

Necessary Disclosure by law

Though we make every effort to preserve user privacy, we may need to disclose personal information when required by law wherein we have a good-faith belief that such action is necessary to comply with a current judicial proceeding, a court order or legal process served on our website.

Links

This website contains links to other sites. Please be aware that we, SmartSurvey, are not responsible for the privacy practices of such other site. We encourage our users to be aware when they leave our site and to read the privacy statements of each and every website that collects personally identifiable information. This privacy statement applies solely to information collected by this website.

General Statement

For this section, the following definitions apply:

Controller: the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.

Personal data: any information relating to an identified or identifiable natural person (“Data Subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Data subject: any identified or identifiable natural person, whose personal data is processed by the controller responsible for the processing.

Processor: a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

Recipient: a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing.

Third Party: a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.

Restriction of processing: the marking of stored personal data with the aim of limiting their processing in the future.

Processing: any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Profiling: any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.

Consent: Consent of the data subject is any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

Legal Basis

In addition to the legal basis mentioned above, we may also possess the following legal basis for processing the data subject’s personal data where:

• the data subject has given consent to the processing of his or her personal data for one or more specific purposes;
• processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
• processing is necessary for compliance with a legal obligation to which the controller is subject;
• processing is necessary in order to protect the vital interests of the data subject or of another natural person;
• processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller; or,
• processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

Data Subject Rights

Certain regulations afford EU Data Subjects with rights. These rights are summarised below. In order to assert any of these rights please contact our DPO or another SmartSurvey employee at any time.

• Right to Confirmation: Each data subject has the right to obtain from SmartSurvey (acting as controller) confirmation as to whether or not his or her personal data is being processed. This includes the right to confirm whether his or her personal data is transferred to a third country or to an international organisation as well as the appropriate safeguards relating to the transfer.
• Right to Access: Each data subject has right to obtain from SmartSurvey (acting as controller), free information about his or her personal data stored at any time and a copy of this information, however, SmartSurvey reserves the right to charge a ‘reasonable fee’ when a request is manifestly unfounded or excessive, particularly if it is repetitive.
• Right to Rectification: Each data subject has the right to rectify inaccurate personal data concerning him or her that is being processed by SmartSurvey (acting as controller) without undue delay. Furthermore, the data subject has the right to complete any incomplete personal data and to provide supplementary statements to rectify that personal data.
• Right to Erasure: Each data subject has right to erase any personal data concerning him or her which is being processed by SmartSurvey (acting as controller) without undue delay. SmartSurvey may refuse to grant you this right if a statutory exemption applies.
• Right of Restriction of Processing: Each data subject has the right to restrict the processing of personal data from SmartSurvey (acting as controller) where a statutory ground applies.
• Right to Data Portability: Each data subject has the right to receive the personal data concerning him or her, which was provided to SmartSurvey (acting as controller), in a commonly used machine-readable format.
• Right to Object: Each data subject has the right to object to SmartSurvey (acting as controller) to the processing of his or her personal data if a statutory basis exists.
• Right not to be subject to automated individual decision-making, including profiling: Each data subject has the right not to be subject to a decision based solely on automated processing, including profiling.
• Right to Withdraw Consent: Where consent forms the basis for processing by SmartSurvey (acting as controller), the data subject has the right to withdraw his or her consent to the processing of his or her personal data at any time. Data Subjects can contact SmartSurvey’s Data Protection Officer or any other employee to withdraw consent at any time.
• Right to Complain to the Supervisory Authority (Information Commissioner’s Office (ICO)): Details of the ICO are provided at the top of this Privacy Policy & Notice.

Security of processing

SmartSurvey has implemented technical and organisational measures to ensure personal data processed remains secure, however, absolute security cannot be guaranteed. Please contact our DPO or Security Team (security@smartsurvey.co.uk) for further details.

Law & jurisdiction

This Privacy Policy & Notice is governed by and interpreted according to the law of England and Wales. All disputes arising out of this Privacy Policy & Notice will be subject to the exclusive jurisdiction of the English and Welsh courts.

Transfer of Rights

You may not transfer any of your rights under this Privacy Policy & Notice to any other person. We may transfer our rights under this privacy notice where we reasonably believe your rights will not be affected.

Invalid provisions

If any court or competent authority finds that any provision of this Privacy Policy & Notice (or part of any provision) is invalid, illegal or unenforceable, that provision or part-provision will, to the extent required, be deemed to be deleted, and the validity and enforceability of the other provisions of this Privacy Policy & Notice will not be affected.

‍