Privacy Policy

--- 1. INTRODUCTION Insights for Improvement ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services. We are registered in England and Wales (Company Number: 15874664) with our registered office at Flat 1 24 Mahindra Way, London, England, E6 5AR. For the purposes of UK data protection law, we are the data controller of your personal data.

--- 2. INFORMATION WE COLLECT 2.1 Information You Provide - Contact information (name, email address, phone number) - Organisation details when you register for our services - Communication records when you contact us - Survey responses and feedback you provide through our platform 2.2 Information Collected Automatically - Device information (browser type, operating system) - IP address and approximate location - Pages visited and features used - Time and date of visits - Referring website addresses 2.3 Cookies and Similar Technologies We use cookies to analyse site usage and improve our services. See our Cookie Policy section below for details.

--- 3. HOW WE USE YOUR INFORMATION We use your information for the following purposes: - To provide and maintain our services - To process and analyse survey data on behalf of our clients - To communicate with you about our services - To improve our website and services - To comply with legal obligations - To detect and prevent fraud or abuse Legal Bases for Processing (UK GDPR): - Contract: To fulfil our contractual obligations to you - Legitimate Interests: To improve our services and communicate with you - Consent: For analytics cookies (which you can accept or reject) - Legal Obligation: To comply with applicable laws

--- 4. DATA SHARING AND DISCLOSURE We may share your information with: 4.1 Service Providers - Hosting providers (Microsoft Azure, UK/EU data centres) - Analytics services (PostHog, EU data centres) - only with your consent - Email service providers 4.2 Legal Requirements We may disclose information if required by law, court order, or government request. 4.3 Business Transfers In the event of a merger, acquisition, or sale of assets, your information may be transferred. We do NOT sell your personal information to third parties.

--- 5. DATA RETENTION We retain your personal data only for as long as necessary to: - Provide our services to you - Comply with legal obligations - Resolve disputes and enforce agreements Survey data is retained according to our agreements with clients, typically for the duration of the project plus a reasonable period for analysis and reporting.

--- 6. YOUR RIGHTS Under UK GDPR, you have the right to: - Access: Request a copy of your personal data - Rectification: Request correction of inaccurate data - Erasure: Request deletion of your data ("right to be forgotten") - Restriction: Request we limit processing of your data - Portability: Receive your data in a portable format - Object: Object to processing based on legitimate interests - Withdraw Consent: Withdraw consent at any time (for consent-based processing) To exercise these rights, contact us at: [Add contact email] We will respond to your request within one month.

--- 7. COOKIE POLICY 7.1 What Are Cookies? Cookies are small text files stored on your device when you visit websites. They help websites function properly and provide information to website owners. 7.2 Cookies We Use ESSENTIAL COOKIES (Always Active) - Session cookies: Required for the website to function - Security cookies: Help protect against security threats - These cannot be disabled as they are necessary for the site to work ANALYTICS COOKIES (Require Consent) - PostHog: We use PostHog for website analytics to understand how visitors use our site - Purpose: Page views, feature usage, user journeys - Data location: EU (PostHog EU servers) - Retention: Session data retained for 90 days 7.3 Managing Cookies - You can change your cookie preferences at any time by clicking "Cookie Settings" in our website footer - You can also control cookies through your browser settings - Blocking all cookies may impact website functionality 7.4 Third-Party Cookies We do not use third-party advertising cookies. Our analytics provider (PostHog) operates under a data processing agreement with us.

--- 8. INTERNATIONAL TRANSFERS Your data is primarily processed within the UK and European Economic Area (EEA). Where data is transferred outside these regions, we ensure appropriate safeguards are in place, such as: - Standard Contractual Clauses approved by the UK ICO - Adequacy decisions - Binding Corporate Rules

--- 9. DATA SECURITY We implement appropriate technical and organisational measures to protect your data, including: - Encryption in transit (TLS/SSL) - Encryption at rest - Access controls and authentication - Regular security assessments - Staff training on data protection

--- 10. CHILDREN'S PRIVACY Our services are not directed to individuals under 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

--- 11. CHANGES TO THIS POLICY We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date.

--- 12. CONTACT US If you have questions about this Privacy Policy or wish to exercise your rights, contact us at: Insights for Improvement Flat 1 24 Mahindra Way London, England, E6 5AR Email: info@insights4improvement.co.uk

--- 13. COMPLAINTS If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO): Website: https://ico.org.uk Phone: 0303 123 1113