UK Customer Privacy Policy

Privacy Policy For Kadence International Ltd UK– Market Research Company, United Kingdom

Effective Date: 08 April 2026

Review Date: 01 July 2027

Version No. CPP-UK-V1.0

This Privacy Policy (the “Policy”) is established to ensure strict compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 (DPA 2018), and the guidance issued by the Information Commissioner’s Office (ICO).

--------------------------------------------------------------------------------

1. Introduction and Compliance Statement

Kadence International (“we”, “us”, “our”) is a market research company registered in the United Kingdom. We are fully committed to protecting and respecting your privacy and personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and all relevant guidance issued by the Information Commissioner’s Office (ICO).

We act as the Data Controller, meaning we determine the purpose and means of processing your Personal Data. We adhere to the seven principles of personal data protection, including Legality, Transparency, Fairness, and Accountability.

2. Scope and Definitions

This Policy applies to all Personal Data (PI) and Sensitive Personal Data processed by us, covering our customers, clients, research participants ("you" or "Data Subject"), and website users.

  • Personal Data (PI)
    • Data relating to a living individual who can be identified from that data, or from that data and other information likely to come into our possession.
  • Sensitive Personal Data
    • PI concerning health, political opinions, race, ethnic origin, religious beliefs, or criminal convictions.
  • Processing
    • Any operation performed on personal data, including collection, use, storage, disclosure, erasure, or destruction of data.

3. Types of Personal Data Collected

We collect and process data necessary for market research activities.

  • Identification & Contact
    • Name, address, email address, phone number.
  • Demographic Information
    • Age, gender, occupation, location, education, income band.
  • Research Data
    • Responses to surveys or questionnaires, opinions, views, interview recordings, and customer feedback.
  • Technical Data
    • IP address, browser type, device information, and pages accessed (information about your use of our website or services).

 

We only collect Sensitive Personal Data (such as health or political opinions) when strictly necessary and with your explicit consent. We comply with Applicable Laws regarding the collection of data about children, and for individuals under 16, this is done with parental consent.

4. Lawful Basis and Purpose of Processing

We must have a valid legal basis for processing your personal data. Processing must be for specified legitimate and explicit purposes.

4.1 Lawful Bases (UK GDPR Article 6)

We rely on the following lawful bases:

  • Consent:
    • For voluntary participation in research. This is also the basis for collecting Sensitive Data (Explicit Consent, Article 9(2)(a)).
  • Performance of a Contract:
    • If you are engaged as a research participant or customer, necessary to fulfil our contractual obligations.
  • Compliance with Legal Obligations:
    • To comply with UK laws and regulatory obligations (e.g., auditing or tax purposes).
  • Legitimate Interests:
    • For conducting and improving our market research, provided these interests are balanced by strong privacy protections and do not override your rights and interests.

4.2 Purposes of Use

Your data is used solely for:

  • Conducting Market Research:
    • To gather opinions and analyze results.
  • Participant Management:
    • To communicate with you regarding participation and manage incentives/compensation.
  • Service Improvement:
    • To improve our services, methodologies, and platforms.
  • Reporting:
    • To generate anonymous, aggregated research findings for our clients.

We do not use personal data for automated decision-making that produces legal or similarly significant effects concerning you.

5. Data Sharing, Disclosure, and Security

5.1 Sharing and Disclosure

We do not sell or rent your personal data to third parties. We may share data with:

  • Clients:
    • Research findings provided to clients are primarily in an anonymised and aggregated form. Identifiable data is only shared with a client if we have obtained your explicit and specific consent.
  • Sub-processors/Service Providers:
    • Third parties (e.g., IT support, survey platforms) who process data on our behalf are bound by strict contractual confidentiality and data protection obligations.
  • Regulatory Authorities:
    • If disclosure is required by law or regulatory bodies.

5.2 Data Security and Protection Measures

We implement appropriate technical and organisational security measures to protect your personal data against unauthorized access, loss, or misuse. These safeguards include:

  • Encryption of data (in transit and at rest).
  • Access controls and strong authentication mechanisms.
  • Secure storage systems and regular security assessments.
  • Employee training and confidentiality agreements.

5.3 Data Retention

We retain your personal data only for as long as necessary to fulfil the stated purposes or as required by legal or reporting requirements. Once the data is no longer necessary, it is securely deleted or anonymised. Anonymised data may be kept indefinitely for trend analysis.

5.4 International Data Transfers

If your personal data is transferred outside the UK or the European Economic Area (EEA), we ensure appropriate safeguards are in place. This typically involves using Standard Contractual Clauses (SCCs), ICO-approved international data transfer agreements (IDTAs), or transferring data only to countries with UK adequacy decisions.

6. Your Rights Under UK GDPR (Data Subject Rights)

Under the UK GDPR, you have the following rights, which you may exercise at any time by contacting our DPO:

  • Right to be informed:
    • The right to be informed about how your personal data is being used
  • Right of Access:
    • Request a copy of the personal data we hold about you (Subject Access Request - SAR).
  • Right to Rectification:
    • Request correction of inaccurate or incomplete data.
  • Right to Erasure (Right to be Forgotten):
    • Request deletion of your data when it is no longer necessary or upon withdrawal of consent.
  • Right to Restrict Processing:
    • Temporarily block our processing of your personal data.
  • Right to Object:
    • Object to processing based on legitimate interests or for direct marketing purposes.
  • Right to Data Portability:
    • Receive your data in a structured, commonly used, machine-readable format.
  • Right to Withdraw Consent:
    • Withdraw previously given consent at any time.

7. Grievance and Contact Information

If you have concerns about how we handle your data or believe your rights have been infringed, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

For all privacy-related queries, requests, or complaints, please contact our Data Protection Officer:

 

Data Protection Officer:

Karl Wagner

Kadence International Ltd

2 Valentine Place, London, SE1 8QH

kwagner@kadence.com

 

8. Approval and Implementation

 

Document Approval and Review Log

Review/Approval Date

Version no.

Approved By

Job Title

08/04/2026

CPP-UK-V1.0

Cindi Collett

Managing Director UK

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

--------------------------------------------------------------------------------

This Policy is effective as of 08/04/2026 and is subject to change as required by law or business needs.