Privacy Policy of InsightBridge Analytics Ltd
Effective date: 13 July 2026
1. Introduction and company information
This Privacy Policy explains how InsightBridge Analytics Ltd (“we”, “us”, “our”) collects, uses, stores, shares, and protects personal data in connection with our consumer-insights activities and related services.
Data controller: InsightBridge Analytics Ltd
Registered / business address: InsightBridge Consumer Insights, 14 Bristol Gardens, London W9 2JQ, United Kingdom
Email: [email protected]
Phone: +44 20 7946 8372
This Privacy Policy applies to personal data processed by InsightBridge Analytics Ltd when individuals interact with our website, respond to research invitations, participate in surveys, interviews, panels, feedback studies, consumer research projects, or otherwise engage with our services and communications.
2. Data collection and processing
We may collect and process the following categories of personal data, depending on the context of your interaction with us:
- Identity data: name, title, age range, gender, and similar identifiers where relevant to research participation.
- Contact data: email address, telephone number, postal address, and communication preferences.
- Demographic and profiling data: household composition, occupation, income band, location, preferences, interests, lifestyle indicators, and other consumer profile information.
- Research participation data: survey responses, interview recordings, focus group contributions, feedback, rankings, opinions, and observations.
- Technical data: IP address, device identifiers, browser type, operating system, pages visited, cookies, log files, and usage analytics.
- Transactional and correspondence data: records of communications with us, consent records, opt-in/opt-out choices, and participation confirmations.
- Sensitive data: only where necessary and with appropriate safeguards, for example certain information that may be inferred or disclosed during research. We will process sensitive personal data only where permitted by applicable law and, where required, with your explicit consent.
We typically collect data directly from you, through research platforms, from our clients or research partners where they lawfully share participant information with us, and through website technologies such as cookies and similar tools.
3. Purpose of data processing
We process personal data for the following purposes:
- to conduct consumer research, analytics, and insight generation;
- to recruit, screen, verify, and manage participants for research activities;
- to administer surveys, interviews, panels, and feedback studies;
- to analyse consumer trends, preferences, behaviours, and market patterns;
- to communicate with participants about research opportunities and related matters;
- to provide reports, insights, and aggregated outputs to our clients;
- to manage our business operations, accounting, recordkeeping, and compliance obligations;
- to protect the security and integrity of our systems, networks, and services;
- to improve our services, methodologies, and user experience; and
- to defend or establish legal claims and to comply with applicable legal and regulatory requirements.
Where possible, we seek to use aggregated, anonymised, or pseudonymised data for analysis and reporting.
4. Legal basis for processing
We process personal data only where we have a lawful basis to do so. Depending on the specific activity, the legal bases may include:
- Consent: where you have given clear consent, for example for research participation, marketing communications, cookies where required, or processing of special category data.
- Contract: where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract.
- Legal obligation: where processing is necessary to comply with applicable laws, regulations, or lawful requests from authorities.
- Legitimate interests: where processing is necessary for our legitimate business interests, such as conducting research, improving our services, securing our systems, and managing our operations, provided those interests are not overridden by your rights and freedoms.
- Vital interests: in rare cases, where processing is necessary to protect someone’s vital interests.
Where we process special category data or other sensitive information, we will do so only where a valid condition under applicable law applies, such as your explicit consent or another lawful basis where permitted.
5. Data sharing and third parties
We may share personal data with the following categories of recipients, where necessary and appropriate for the purposes described in this Privacy Policy:
- Service providers: IT hosting providers, cloud services, survey platforms, analytics tools, communications providers, recruitment platforms, and administrative support suppliers.
- Research clients: business clients who commission consumer-insights projects, typically receiving only anonymised, aggregated, or otherwise minimised data, unless individual-level disclosure is necessary and lawful.
- Professional advisers: lawyers, accountants, auditors, insurers, and consultants.
- Authorities and regulators: courts, law enforcement, tax authorities, and other public bodies where required by law or where disclosure is necessary to protect rights and safety.
- Business transferees: in connection with a merger, acquisition, restructuring, sale of assets, financing, or similar transaction.
We require third parties to handle personal data in accordance with applicable data protection laws and appropriate confidentiality and security obligations. We do not sell personal data in the ordinary sense of that term unless expressly stated and lawfully permitted in a specific context.
6. Data transfer to third countries
Where personal data is transferred outside the United Kingdom and/or the European Economic Area, we will take appropriate safeguards to protect the data. These safeguards may include:
- transfers to countries recognised as providing an adequate level of protection;
- standard contractual clauses or equivalent contractual safeguards;
- supplementary technical and organisational measures where necessary; and
- reliance on other lawful transfer mechanisms permitted by applicable law.
By using our services or participating in our research, you acknowledge that your personal data may be processed in jurisdictions that may have different data protection laws than those in your home country, and we will apply appropriate safeguards as required.
7. Storage duration
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, reporting, and compliance requirements.
- Research and participant records: retained for the period required for project administration, audit, quality assurance, and dispute handling.
- Consent records and opt-out records: retained for as long as necessary to demonstrate compliance with applicable legal obligations and your preferences.
- Contractual and financial records: retained for the periods required under tax, accounting, and commercial laws.
- Technical logs and security records: retained for a limited period necessary for security, operational, and diagnostic purposes.
When data is no longer required, we will delete it, anonymise it, or securely archive it in accordance with our retention procedures and applicable law.
8. User rights
Depending on your location and applicable law, you may have the following rights regarding your personal data:
- Access: to request confirmation of whether we process your personal data and obtain a copy of it.
- Rectification: to request correction of inaccurate or incomplete data.
- Erasure: to request deletion of your personal data in certain circumstances.
- Restriction: to request that we limit processing in certain circumstances.
- Data portability: to receive certain data in a structured, commonly used, machine-readable format and, where technically feasible, to have it transferred to another controller.
- Objection: to object to processing based on legitimate interests or for direct marketing purposes.
To exercise your rights, please contact us using the details provided in Section 12. We may need to verify your identity before responding. We will respond within the time limits required by applicable law.
9. Withdrawal of consent
Where we rely on your consent to process personal data, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
If you withdraw consent, we will stop processing the relevant data for the consent-based purpose unless another lawful basis applies or we are required to retain the data by law.
You may withdraw consent by contacting us using the details in Section 12 or by using any unsubscribe or preference-management mechanism we provide.
10. Right to complain
If you have concerns about how we process your personal data, we encourage you to contact us first so that we can try to resolve the matter.
You also have the right to lodge a complaint with the relevant data protection supervisory authority in your country of residence, place of work, or the location where an alleged infringement occurred, as applicable.
In the United Kingdom, the relevant authority is the Information Commissioner’s Office (ICO). More information is available from the ICO’s website.
11. Data security
We implement appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures may include:
- access controls and role-based permissions;
- encryption in transit and, where appropriate, at rest;
- network and endpoint security measures;
- staff training and confidentiality obligations;
- backup and recovery procedures;
- data minimisation and pseudonymisation where feasible; and
- incident response and breach management procedures.
However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a personal data breach affecting your rights and freedoms, we will take appropriate action in accordance with applicable law.
12. Contact information
If you have questions about this Privacy Policy or our processing of your personal data, or if you wish to exercise your rights, please contact:
InsightBridge Analytics Ltd
InsightBridge Consumer Insights, 14 Bristol Gardens, London W9 2JQ, United Kingdom
Email: [email protected]
Phone: +44 20 7946 8372
13. Changes to privacy policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. When we do, we will revise the “Effective date” above and, where appropriate, provide additional notice.
We encourage you to review this Privacy Policy periodically to stay informed about how InsightBridge Analytics Ltd processes personal data.