The Thriving Company Limited Privacy Policy

Description of The Thriving Company:

The Thriving Company is a market research and consultancy provider. It is a company registered in England and Wales with registered number 5680165 and its registered office is 82 Gurney Court Road, St Albans AL1 4RJ.

Contact responsible for the Privacy Policy

Name and Role: Robin Dicks, Director

Address: The Thriving Company, 82 Gurney Court Road, St Albans, AL1 4RJ

Phone Number: +44 7940 886677

E-mail:

This privacy policy covers two aspects:

1. The type of personal information we collect in the course of our work
2. Cookies policy and information relevant to when you visit the Thriving Company website

1. The types of personal information we collect in the course of our work.

We currently collect and process the following information:

• Name
• Job Title
• Organisation
• Work email address
• Main work telephone number
• Mobile telephone number
• Work responsibilities
• Other information pertaining to your opinion and role, for example your work aims or your opinion on the performance of professional service suppliers, and what you or your organisation requires from such providers.

How we get the personal information and why we have it

Much of the personal information we process is provided to us directly by you as the result of an interview, focus group or other data gathering exercise. This is to help our clients improve their services to their customers.

We also receive personal information indirectly, from the following sources in the following scenarios:

• Our client organisations where they need us to make contact with you as part of market research processes
• Third party sources (such as data list providers) on an occasional basis, in order to find appropriate participants in market research programmes

We use the information that you have given us in order to help understand your needs and how suppliers may provide services with you

We may share this information with our client organizations. However this is only done with your explicit verbal or written permission.

We do not share or sell your personal information to third parties for marketing purposes. The only other circumstances in which we may disclose your personal data to a third-party is when we are legally required to do so.

Under the UK General Data Protection Regulation (UK GDPR), the other lawful bases we may rely on, as appropriate, for processing this information are:

(a) Your consent. You are able to remove your consent at any time. You can do this by contacting Robin Dicks as shown elsewhere in this document

(b) We have a contractual obligation. We work for organisations that service you and are commissioned by them to help them understand how to improve service to you

(c) We have a legitimate interest.

However, as stated above in the normal course of business we only share information with your explicit consent.

How we store your personal information

Your information is securely stored, either on:

• Encrypted documents which are solely secured on protected computers and devices which are the property of The Thriving Company and associates, and which follow appropriate security protocols which are available for viewing at The Thriving Company Information Security Policy (available on request)
• Hard copy documents which are securely stored in locked filing systems

We typically keep the results of interviews, focus groups, or other research programmes in a live environment for no more than three years.

We may keep contact data for up to seven years.

We may keep your contact data for longer to establish, exercise or defend our legal rights and yours. Where such a need exists, your personal data will be securely archived with restricted access and appropriate safeguards applied to ensure the security and confidentiality of your information,

We will then dispose of your information by

• Removing all electronic files from the Thriving Company devices
• Shredding and disposing of all hard copy documents in a secure manner

Security of your personal data

The Thriving Company respects the privacy of individuals and is committed to protecting your personal data. Accordingly, in accordance with the Data Protection Act 2018 and UK GDPR, we have implemented appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing and against accidental loss, destruction, or damage. These measures include having clear internal policies and procedures and maintaining the physical security to our premises.

Your personal data will not be sold or disclosed (other than as specified under this Privacy Notice) to another company or organisation.

Additionally, we put in place appropriate IT security technologies and procedures to prevent the unauthorised access, damage, and loss of your data and our access controls ensure the confidentiality of the data we process.

More details of this, including The Thriving Company Information Security Plan, and The Thriving Company Information Classification Policy, are available on request from the contact point noted in this document.

Please note that the transmission of information via the Internet is not completely secure, and while we do our best to protect your personal data, we cannot guarantee the security of any data sent to our site; such transmissions are at your own risk.

Locations of Processing

The data The Thriving Company directly collects from you is processed on servers located in the UK. We will ensure that your personal data is provided with adequate protection in the unlikely event it becomes necessary to transfer your personal data to a country that has not been granted a finding of adequacy by the European Commission (EC). If there is any need to transfer personal data outside of the European Economic Area (EEA), to a country that has not been granted a finding of adequacy by the EC, we will seek your consent to do so.

Where we use online survey tools we commit to always use third party providers where

• data is stored on servers located in the UK or other locations granted a finding of adequacy by the European Commission
• they are fully compliant with UK GDPR regulation or any other appropriate regulation pertaining to the security of personal data at that time

Your data protection rights

Under data protection law, you have rights including:

Your right of access – You have the right to ask us for copies of your personal information.

Your right to rectification – You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.

Your right to restriction of processing – You have the right to ask us to restrict the processing of your personal information in certain circumstances.

Your right to object to processing – You have the the right to object to the processing of your personal information in certain circumstances.

Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

Please contact Robin Dicks, Director at , or +44 7940886677, or at The Thriving Company, 82 Gurney Court Road, St Albans, AL1 4RJ if you wish to make a request.

How to complain

If you have any concerns about our use of your personal information, you can make a complaint to us at

The Thriving Company

82 Gurney Court Road

St Albans

AL1 4RJ

You can also complain to the ICO if you are unhappy with how we have used your data.

The ICO’s address:

Information Commissioner’s Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

Helpline number: 0303 123 1113

ICO website: https://www.ico.org.uk

2. Cookies policy and information relevant to when you visit the Thriving Company website

What are cookies?

A cookie is a small text file that is stored on your computer or device when you visit a website. Cookies are used by all websites, and have several different functions. At a basic level cookies will:

• Allow a site to work properly, and help keep it secure.
• Help understand how people use the website.
• Make a site easier to use by remembering information that you’ve entered
• (Potentially) improve your experience by showing you information that’s relevant to you.

Cookies provide information regarding the computer used by a visitor. The Thriving Company does not generally utilise information generated by Cookies in our normal course of business. However, you should read the following as we may occasionally use the data collected as follows.

We may use cookies where appropriate to gather information about your computer in order to assist us in improving our website.

We may gather information about your general internet use by using the cookie.  Where used, these cookies are downloaded to your computer and stored on the computer’s hard drive. Such information will not identify you personally. It is statistical data. This statistical data does not identify any personal details whatsoever.

Google analytics is enabled on www.thrivingcompany.co.uk. In running and maintaining our website we may collect and process information about your use of our site including details of your visits such as pages viewed and the resources that you access. Such information includes traffic data, location data and other communication data.

Aside from this, we only utilise information provided voluntarily by you. For example, when you register for information or our newsletters. 

Changing your cookie settings:

You can do this through your browser. A useful resource to help you do this if desired is at: https://www.cdrl.org.uk/how-to-change-my-cookie-settings/

Links to other websites 
Our website contains links to other websites. The processing of personal data through those websites is not covered by this Privacy Notice, and we encourage you to review the privacy notices / privacy policies on the third-party website to discover more about how they process your information.