Arneil Johnston Customer Privacy Notice
This privacy information notice explains what information Arneil Johnston will collect for research purposes and how it will be used. It explains what we will do with any personal information collected as part of our consultancy research. We have a joint controller relationship with Research Resource Limited for the purpose of delivering professional market research services to Arneil Johnston.
Contact details
If you have any questions about the data we hold and it is used, our contact details
are as follows:
Address: Arneil Johnston Limited, Falkirk Business Hub, 45 Vicar Street, FALKIRK, FK1 1LL.
Telephone: 07817715527
Email: dmilton@arneil-johnston.co.uk
What information we collect, use, and why.
In most cases, we will collect data from clients including local authorities and Housing Associations which is non-identifiable data. This means that the data will not hold any personal data or identifiable data.
We do collect or use the following information to provide consultancy research and services which could include identifiable data:
- Addresses
- Call recordings
- Records of meetings and decisions.
We work with Research Resource who provide market research services, including large scale households surveys, for some of our projects. If you do take part in a research study with Research Resource, they will collect the information you provide when you complete the research survey interview. Your participation in any research is completely voluntary and you do not have to take part.
You can also ask for your details to be removed from the contact list being used for the survey, but Research Resource will ask you to confirm your details to ensure that the correct records are removed from the database.
A copy of the Research Resource privacy notice can be accessed here:
http://www.researchresource.co.uk/privacy-notice/
Lawful bases
Where our projects do involve accessing personal data, our lawful bases for
collecting or using personal information to provide services and goods are:
- Consent
- Contract
- Public task
Where we get personal information from
Whilst generally, the data provided to us is non-identifiable data; if we do access information which holds personal details, this will come from:
- Publicly available sources
- Public sector organisations who are consultancy clients including local authorities and Registered Social Landlords.
How long we keep information
Whilst the data we collect from clients in most cases is non-identifiable, it will not be kept or reused by Arneil Johnston for any purpose other than the delivery of the research study and/or consultancy contract. At the conclusion of consultancy
contracts, any personal data will be returned to the client following the conclusion of the research and any personal data deleted from all Arneil Johnston systems leaving only non-identifiable data.
Research analysis arising from the data (which is non-identifiable data) will be archived electronically on the Arneil Johnston secure cloud storage system with encryption and password protection applied to the relevant files. Regular secure backup of the cloud storage is performed.
Non-identifiable data/research analysis will not be is kept longer than necessary and in most cases no longer than 5-years beyond the completion of the research.
Who we share information with
Only anonymous, statistical results of any research or consultancy work will be published or made available to our clients that use the research findings. Others we share personal information with include:
- Organisations we need to share information with for safeguarding reasons
- Relevant regulatory authorities
- Professional consultants
- Organisations we’re legally obliged to share personal information with
Your data protection rights
All data used by Arneil Johnston, is used in compliance with the Data Protection Act 2018 and, from 25 May 2018, with the General Data Protection Regulation (GDPR).
Once your personal information has been collected, you have certain rights in relation to that personal information that may be exercised. Your rights include:
Your right of access - You have the right to ask us for copies of your personal data.
Your right to rectification - You have the right to ask us to rectify personal data you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure - You have the right to ask us to erase your personal data in certain circumstances.
Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal data in certain circumstances.
Your right to object to processing - You have the right to object to the processing of your personal data in certain circumstances.
Your right to data portability - You have the right to ask that we transfer the personal data you gave us to another organisation, or to you, in certain circumstances.
Your right to withdraw consent – When we use consent as our lawful basis you have the right to withdraw your consent.
You don’t usually need to pay a fee to exercise your rights. If you make a request, we have one calendar month to respond to you.
To make a data protection rights request, please contact us using the contact details
at the top of this privacy notice.
How to complain
If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice.
If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the Information Commissioners Officers (ICO) using the following contact details:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
Website: https://www.ico.org.uk/make-a-complaint