Privacy Policy – Report Sales & Customer Data

1. Who We Are (Data Controller)

We act as the data controller for the personal data we collect in connection with report sales.

2. What Personal Data We Collect

Depending on how you interact with us (purchase, enquiry, invoice request, email exchange), we may collect:

A. Identity & Contact Details

• Name
• Job title
• Company name
• Business email address
• Phone number
• Country
• Billing address

B. Transaction & Purchase Information

• Details of the report(s) or service(s) ordered
• Purchase amount and currency
• VAT / tax information
• Purchase order numbers
• Invoicing details
• Delivery preferences (e.g., digital download email, file access permissions)

C. Payment Information

• We do not store full payment card information.
• Payments may be processed through third-party providers (e.g., Stripe, bank transfer).
• We may store transaction IDs, payment confirmation, and billing metadata.

D. Communication Data

• Emails, messages, and correspondence related to your purchase
• Support and customer-service interactions

E. Technical Data

• IP address, device type, and minimal log data for fraud prevention
• Download logs for digital products to ensure licensing compliance

We do not collect special category data (health, beliefs, biometric, etc.) for report sales.

3. Why We Use Your Data (Purposes & Legal Bases)

We process your data only for legitimate business purposes and always in line with UK GDPR.

1. To process your order and deliver your report

Includes:

• Issuing invoices
• Processing payments
• Providing download links or digital files
• Enabling access to password-protected portals

Legal basis: Contract performance (Article 6(1)(b)), Legitimate interests (fulfilling and protecting our business operations)

2. To verify licensing and usage rights

Our reports are licensed products. We may use your data to:

• Confirm authorised users
• Detect unauthorised sharing or distribution
• Enforce our report licensing terms

Legal basis: Legitimate interests (protecting intellectual property)

3. To communicate with you

• Sending order confirmations
• Providing receipts, invoices, and delivery details
• Responding to your enquiries
• Sending important service updates (e.g., updated files, corrections)

Legal basis: Contract performance

4. To manage our internal sales, accounting, and compliance obligations

• Record keeping
• Tax and VAT compliance
• Fraud prevention
• Audit requirements

Legal basis: Legal obligation, Legitimate interests

5. To offer related or relevant report updates

We may send you:

• Information about updated versions of the report you purchased
• Related regional or category reports (e.g., East/West Europe if you purchased individual markets)

Legal basis: Legitimate interests (reasonable expectation of updates to products you purchased)

You may unsubscribe at any time. We do not add you to general marketing lists without your consent.

4. How We Share Your Personal Data

We do not sell your data.

We may share your data with:

Internal Teams

• Sales, research, and operations staff processing your order
• Finance teams handling invoicing and payments

Trusted Service Providers (Processors)

Such as:

• Payment processors (e.g., Stripe, banks)
• Cloud storage providers
• Digital delivery and file-sharing platforms
• Email service providers
• CRM and invoicing systems
• Analytics and security tools (minimal data only)

All service providers operate under strict confidentiality and data-processing agreements.

Legal and Regulatory Bodies

Where required to:

• Respond to lawful requests
• Comply with tax, regulatory, or court obligations

5. International Data Transfers

Some service providers may be located outside the UK/EEA.

Where international transfers occur, we ensure appropriate safeguards such as:

• Adequacy decisions
• Standard Contractual Clauses (SCCs)
• Other legally recognised mechanisms

6. How Long We Keep Your Data

We retain your data only as long as necessary for the purposes above.

Typical retention periods:

• Invoices, transactions, and VAT documentation: up to 7 years (legal requirement)
• Customer correspondence and purchase history: 5–7 years
• Digital delivery logs: 3–5 years
• Email communication: up to 3 years, unless required longer for legal purposes

When no longer required, data is securely deleted or anonymised.

7. How We Protect Your Data

We implement appropriate organisational and technical security measures, including:

• Controlled access to customer files
• Encryption of stored and transmitted data
• Secure payment gateways
• Regular security reviews
• Monitoring for unauthorised access or distribution

No online service can be completely secure, but we take reasonable steps to protect your data at all times.

8. Your Rights Under UK GDPR

You have the right to request:

• Access to your personal data
• Correction of inaccurate data
• Deletion of data (subject to legal retention requirements)
• Restriction of processing
• Objection to processing based on legitimate interests
• Data portability where applicable

You also have the right to lodge a complaint with the ICO (Information Commissioner's Office).

We may need to verify your identity before responding.

9. Children's Data

Our reports and services are intended for business professionals. We do not knowingly collect data from children.

10. Updates to This Privacy Policy

We may update this Privacy Policy from time to time.

When we do, we will update the "Last updated" date at the top of this page.

11. Contact Us

If you have questions about this Privacy Policy or how we process your data, contact: