CIG Research Privacy Policy

1. Introduction and Definitions

This policy covers the processing of Personal Data by “CIG Research” which is a trading name of Communications International Group Limited (registered in England & Wales; Company No 01241120) (VAT number GB 735 5539 15) whose registered address (and principal place of business) is at 239 Linen Hall, 162-168 Regent Street, London, W1B 5TB, United Kingdom and its subsidiary and associated group companies and services (“CIG Research, “We”, “Our” or “Us”).

Under Data Protection legislation, We have a legal duty to protect the Personal Data We collect from you. If you have any concerns, questions or comments about this Privacy Policy you can contact Us using the contact details in paragraph 11 of this Policy. It is important that you read this document in conjunction with Our Site’s Terms and Conditions.

By providing us with your Personal Data, you consent to Us processing your information as set out in this Privacy Policy and in any other manner you expressly consent to.
In this Policy the following terms shall have the following meanings:
“Data Protection Legislation” means all laws relating to data protection and/or information security in force from time to time which are applicable to the CIG Research Programmes including, but without limitation, the Data Protection Act 2018 and (if applicable) the General Data Protection Regulations 2016, in each case as amended or supplemented from time to time and any successor legislation.
“Panellist” means any individual who registers an account to participate in one or more CIG Research Programme(s).
“Personal Data" means any data that relates to an identifiable person who can be directly or indirectly identified from that data. In this case it means collectively all the Personal Data you submit or provide to Us.
“CIG Research Programmes” means the research programmes to be conducted by CIG Research to which Panellists may be invited to participate.

“Rewards” mean the vouchers or services that Panellists can receive in exchange for reward points.

“Site” means www.pharmacyresearch.questionpro.com or www.pharmacy-research.co.uk

2 Your Rights
2.1 As a data subject, you have the following rights under the Data Protection Legislation, which this Policy and Our use of Personal Data have been designed to uphold:
2.1.1 the right to be informed about Our collection and use of Personal Data;
2.1.2 the right of access to the Personal Data We hold about you;
2.1.3 the right to rectification if any Personal Data We hold about you is inaccurate or incomplete (please contact Us using the details in paragraph 11);
2.1.4 the right to be forgotten – the right to ask Us to delete any Personal Data We hold about you;
2.1.5 the right to restrict (i.e. prevent) the processing of your Personal Data;
2.1.6 the right to data portability (obtaining a copy of your Personal Data to re-use with another service or organisation);
2.1.7 the right to object to Us using your Personal Data for particular purposes; and
2.1.8 rights with respect to automated decision making and profiling.
2.2 If you have any cause for complaint about Our use of your Personal Data please contact Us using the details provided in paragraph 11 and We will do our utmost to solve the problem for you. If We are unable to resolve the matter, you also have the right to lodge a complaint with the UK’s supervisory authority, the Information Commissioner’s Office.
2.3 If you need further information about your rights, please contact the Information Commissioner’s Office (https://ico.org.uk) or your local Citizens Advice Bureau.
3. The types of Data We collect and how We collect it

3.1 The Data We collect
We may collect some or all of the following personal and non-personal Data
3.1.1 name;
3.1.2 date of birth;
3.1.3 gender;
3.1.4 job title/profession;
3.1.5 company/business name;
3.1.6 contact information such as e-mail addresses and telephone numbers;
3.1.7 IP address;
3.1.8 demographic information such as post code, preferences and interests;
3.1.9 web browser type and version;
3.1.10 operating system and a list of URLs starting with a referring site; and
3.1.11 your activity on Our Site and the website you exit to.

3.2 How We collect the Data
3.2.1 In order to participate in CIG Research Programmes, you need to register an account with Us to be a Panellist. When you do so, you will provide Us with information about yourself. We will only use your Data in accordance with your instructions and as set out in this Privacy Policy.
3.2.2 Information you provide when taking part in a CIG Research Programme: if you take part in a CIG Research Programme you will provide certain Personal Data to Us which We will use in accordance with the terms of the relevant CIG Research Programme.
4. How We use the Data that We collect
4.1 All Personal Data is processed and stored securely for no longer than is necessary in light of the reason(s) for which it was collected. We will comply with Our obligations and safeguard your rights under the Data Protection Legislation at all times.
4.2 Our use of your Personal Data will always have a lawful basis, either because you have consented to Our use of your Personal Data (e.g. by registering an account with Us, because it is necessary for Our performance of a contract with you, or because it is in Our legitimate interests.
4.3 Specifically the Data may be used for the following purposes:
• to contact you regarding your registered account with Us
• to invite you to participate in CIG Research Programmes
• Aggregate and analyse the results market research surveys
• to inform you about Rewards earned by taking part in CIG Research Programmes
• For client services, research and statistical analyses.
• to monitor or improve the performance of our services available
• to monitor compliance with Our Terms and Conditions of Use
• to provide details of your training record to your current employer
• for internal record keeping and to manage your account
• replying to e-mails from you
• providing and managing your access to Our Site
• for any purpose if we are required to do so by any law or other regulatory or government authority.
4.4 Your personal (disaggregated) information will at no time be made available to anyone other than CIG Research staff in their administration of market research surveys.
4.5 By providing us with your Personal Data, you consent to Us: (a) processing your information as set out in this Privacy Policy and in any other manner you expressly consent to.
4.6 You have the right to withdraw your consent to Us using your Personal Data at any time and to request that We delete it.
4.7 We will not keep your Personal Data for any longer than is necessary in light of the reason for which it was collected.
5. Sharing of Personal Data
5.1 We may share your Data with other companies in our Group (this means our subsidiaries and associated companies) insofar as reasonably necessary for the purposes and on the legal bases set out in this Policy.
5.2 We may use third parties to perform certain functions on Our behalf including fulfilling orders, sending emails, surveys or polls, removing repetitive information from customer lists, comment hosting, traffic analysis, data analysis, translation services and audience auditing. These third parties may have access to your Data to perform their services, but any Data used by such parties is used only to the extent required by them to perform the services that CIG Research request (unless you give consent to further use). Further, any Data that is processed by third parties shall be processed within the terms of this Policy and in accordance with the Data Protection Legislation. To request a list of these third parties please contact Us using the details in paragraph 11.
5.3 Aggregate Information: We may share aggregate, non-personally identifiable information with our clients.
5.4 Audience and Traffic Measurement Services: We may use third party services that allow Us to collect anonymous traffic and behavioural information by monitoring anonymous visitor activity.
5.5 In specific circumstances We may have to share your Data with other third parties for their own purposes.

Such specific circumstances include, but are not limited to:
• For fraud management, We may share information about fraudulent or potentially fraudulent activity on Our Site. This may include sharing Data with law enforcement bodies.
• We may be required to disclose your Personal Data to the police or other enforcement, regulatory or Government body, in your country of origin or elsewhere, upon a valid request to do so. These requests are assessed on a case-by-case basis and take your privacy into consideration.
• We may, from time to time, expand, reduce or sell CIG Research and this may involve the transfer of divisions of CIG Research, or the whole business, to new owners. Any Personal Data that you have provided will, where it is relevant to any part of CIG Research’s business that is being transferred, be transferred along with that part and the new owner or controlling party will, under the terms of this Privacy Policy, be permitted to use that Data only for the same purposes for which it was originally collected by Us.
6. How and where We store your Data
6.1 We only keep your Personal Data for as long as We need and/or for as long as We have your permission to keep it.
6.2 We primarily store and process your Personal Data in the UK and the EU/European Economic Area (“the EEA”) (The EEA consists of all EU member states plus Norway, Iceland and Lichtenstein) (together referred to as “the UK and the EEA”). If we do transfer your Personal Data outside the UK and the EEA it will be because you have consented or because we have a legal reason to do so. Some examples of reasons your data may be processed outside of the UK and the EEA include:
• Survey processing
• Technical support services
If your Personal Data is not processed within the UK and the EEA, we will:
• Comply with all other data protection principles
• Where possible, process in a country that is on the list of the EU Commissions’ countries that provide adequate protections for the rights and freedoms of data subjects
• If the transfer is to the United States of America, use reasonable endeavours to make sure they participate in the Privacy Shield program
• Make sure we have assessed the adequacy of protections in all other cases.
6.3 To protect your Data We have taken suitable measures to safeguard and secure Data collected through Our Site.
7. Security/Transmission
In accordance with Our responsibilities under the Data Protection Legislation, We adopt appropriate security procedures (suitable physical, electronic and managerial procedures) to seek to safeguard against unauthorised access to your information. Please be aware, however, that the transmission of data via the internet is never completely secure. Whilst CIG Research has taken all reasonable steps to ensure that the Data you provide will be kept secure from unauthorised access We cannot guarantee the security of your Data as it is transmitted to and from Our Site.
8. Policy changes
By registering an account and participating in CIG Research Programmes, you agree to the terms of this Privacy Policy and Our Terms and Conditions of Use. We may amend this Privacy Policy from time to time or as may be required by law. If we do so, we will post an updated version on Our Site and you are deemed to have accepted the revised terms on your first use of Our Site following the alterations.
9. Your right to withhold information
9.1 You may access certain areas of Our Site without providing any data at all. However, to use all features and functions available on Our Site you may be required to submit or allow for the collection of certain Data.
10. Accessing your own Data
You have the right to ask for a copy of any of your Personal Data held by CIG (where such data is held) by contacting our Data Protection Compliance Manager at the address given in paragraph 11. Under the Data Protection Legislation, no fee is payable and We will provide any and all information in response to your request free of charge.
11. Questions about CIG Research and the information We hold about you:
If you have any general questions about CIG Research or the information We have collected about you and how We use it, you can contact our Data Protection Compliance Manager, Tim Langford, at Communications International Group Limited, 2nd Floor, Linen Hall, 162-168 Regent Street, London W1B 5TB, United Kingdom. He can also be contacted by e-mail at [email protected] and by telephone on +44(0) 20 7434 1530.

This Privacy Policy is dated 20 April 2021