Privacy Policy
Effective Date: 1st November 2024
At Socialheads, we are committed to protecting your privacy and ensuring compliance with GDPR and other relevant data protection regulations. This Privacy Policy explains how we collect, use, and protect your personal data.
1. Data We Collect
- Name, email address, and phone number (only when you fill out our forms or contact us).
- Additional information (e.g., job role) may be collected during interviews but is solely used for research purposes related to Socialheads, not for marketing.
- Our consent form asks about any health, accessibility, or support needs to ensure we can properly accommodate you during research sessions.
- IP Address: For security, analytics, or geolocation purposes.
- Browser Type and Version: To optimise user experience.
- Device Information: Type of device, operating system, and screen resolution.
- Referrer URL: The page that linked the user to your site.
- Session Details: Time spent on the site, pages visited, and interactions (e.g., clicks, scrolls).
Note: We only collect health-related information when voluntarily provided through our consent form to ensure appropriate accommodations. We do not collect any other sensitive personal data (e.g., ethnicity, religious beliefs).
2. How We Collect Data
- Website forms (e.g., contact forms).
- Typeform surveys.
- Calendly bookings.
- Cookies (see our Cookies Policy for details).
3. Why We Collect Data
We collect personal data for the following purposes:
- Responding to inquiries.
- Improving our services and user experience.
- Conducting research related to Socialheads.
- Analytics to understand how users interact with our website.
Note: We do not use your data for automated decision-making, profiling, or unauthorized marketing purposes.
4. Sharing Your Data
We may share your data with trusted third parties to provide our services effectively:
- Google Analytics: For website usage analytics (data is anonymized).
- Typeform: For surveys and research.
- Google Workspace: For email and document management.
- Calendly: For scheduling meetings or interviews.
All third parties we work with are GDPR-compliant. We do not transfer data outside the UK/EU.
5. Your Rights
Under GDPR, you have the right to:
- Access the personal data we hold about you.
- Request corrections to inaccurate data.
- Request the deletion of your data.
- Object to the processing of your data.
- Request data portability.
To exercise these rights, please email us at [email protected].
If you believe we haven’t handled your data appropriately, please email us directly.
6. Data Retention
We retain personal data for a maximum of 12 months unless required longer for legal or contractual reasons. After this period, your data is securely deleted.
If you would like us to delete your data earlier, please contact us at [email protected].
7. Security Measures
We take the security of your data seriously and implement the following measures:
- Encryption of sensitive data.
- Access controls to restrict unauthorized access.
- Secure servers to store and process data.
We also ensure our third-party partners maintain high security standards.
8. Legal Basis for Processing
We collect and process your data based on:
- User Consent: Given explicitly when filling out forms or completing surveys.
- Legitimate Interests: To respond to inquiries and improve our services.
- Contractual Necessity: For tasks directly related to user requests or service delivery.
We record and store user consent using Typeform.
9. Cookies
We use cookies to understand website traffic and improve your browsing experience. See our Cookies Policy for more details.
10. Children’s Privacy
We do not knowingly collect data from anyone under the age of 16.
11. Contact Us
If you have any questions about this Privacy Policy or how we handle your data, please contact us:
- Email: [email protected]
We are here to address any concerns and ensure your privacy is respected.