The TCH Platform is owned and operated by SBL Ideas Ltd, a company registered in England and Wales with company number 11026007 and having its registered office at 19-20 Bourne Court Southend Road, Woodford Green, Essex IG8 8HD, trading as “This Can Happen” or “TCH”.
TCH is registered as a data controller with the Information Commissioner’s Office under data protection registration number ZB139431.
Contact us
If you have any questions about our Privacy Notice or your information, or wish to exercise any of your rights as described in this Privacy Notice or under data protection laws, you can contact us:
By post at: 19-20 Bourne Court Southend Road, Woodford Green, Essex IG8 8HD
By email at: hello@thiscanhappenglobal.com
Scope
This Privacy Notice refers to data collected by TCH in the course of provision of its services. TCH’s practices and policies surrounding this data are governed by a Client Services Agreement (“CSA”) between your employer and TCH.
Under the CSA, your employer is the “controller” (i.e. decision-maker) of your personal data, while TCH is the “processor” of such personal data when providing its services to your employer.
However, we may also act as a “controller” of your personal data in limited situations in connection with your use of the Platform. This is the case where we are processing your personal data for our own purposes outside the context of providing services to your employer under the CSA (e.g. to improve your experience of the Platform).
Confidentiality of your information
TCH treats in strict confidence your responses to our surveys and questionnaires and your employer is not entitled to have access to such responses other than in an aggregated and anonymized form as prepared by TCH.
TCH as processor
Where we are acting as a processor, we process your personal data on behalf of and in accordance with the instructions of your employer. We are not responsible for our customers’ (i.e. your employer’s) policies and practices surrounding data privacy and security.
Your employer retains full responsibility for responding to requests regarding personal data processed through the Platform. We encourage you to refer to your employer’s staff privacy policy.
TCH as controller
In the limited situations where we act as a controller of your personal data, we are directly responsible to you in respect of our handling of your data. We have set out below details of the types of your personal data we collect as a controller and the purposes for this (among other matters).
Personal Information We Collect
We collect the following limited information regarding your use of the Platform as a controller:
- Technical Data: including the Internet protocol (IP) address, browser type, internet service provider, device identifier, your login information, time zone setting, browser plug-in types and versions, preferred language, activities, operating system and platform, and geographical location; and
- Usage Data: including the full Uniform Resource Locators (URL), clickstream to, through and from the Platform, pages you viewed and searched for, page response times, length of visits to certain pages, referral source/exit pages, page interaction information (such as scrolling, clicks and mouse-overs), date and time pages are accessed, website navigation and search terms used, and whether you have opened our marketing newsletters.
We may also collect, use and share “Aggregated Data” such as statistical or demographic data for any purpose. Aggregated Data could be derived from your personal information but is anonymised and is not considered personal information as it will not directly or indirectly reveal your identity.
What We Do with Your Personal Information
When acting as a data controller, we will only use your personal information if we have a legal basis for doing so. The purposes for which we use and process your information and the legal basis on which we carry out each type of processing is explained below:
- To administer the Platform, including resolving technical issues, troubleshooting, data analysis, testing, research, statistical and survey purposes.
Lawful basis: It is in our legitimate interests to ensure that the Platform functions properly and to resolve issues with it where required.
- To improve the Platform to ensure that content is presented in the most effective manner for you and your computer, mobile device or other item of hardware through which you access the Platform.
Lawful basis: Your consent.
- To anonymise and aggregate the data we collect through the Platform in the course of providing the services to our customers for statistical and research purposes.
Lawful basis: It is in our legitimate interests to anonymise the personal data we collect in the course of providing our services in order that we can carry out research, prepare reports and promote our services.
Disclosure of Your Personal Information to Third Parties
We may share your personal information with third party vendors and other service providers that perform services for us or on our behalf as required to achieve the purposes described above, which may include providing web hosting or analytics services.
International transfers
As detailed above, we may share your data with our service providers and some of these may be based outside of the United Kingdom (“UK”) and European Economic Area (“EEA”). This may involve transferring your personal data internationally outside the UK and the EEA.
Where personal information is transferred to and stored in a country not determined by the UK or European Commission as providing adequate levels of protection for personal information, we take steps to provide appropriate safeguards to protect your personal information, including entering into standard contractual clauses approved by the UK or the European Commission, obliging recipients to protect your personal information.
If you would like further information on the specific mechanism used by us when transferring your personal information outside of the UK or the EEA, please contact us using the details set out in the Contact Us section above.
Security of Your Personal Information
We use appropriate technical and organisational security measures (including encryption) to protect personal information from unauthorised use, loss, alteration or destruction. Where data processing is carried out on our behalf by a third party, we take steps to ensure that appropriate security measures are in place to prevent unauthorised disclosure of personal information.
Despite these precautions, however, we cannot guarantee the security of information transmitted over the Internet or that unauthorised persons will not obtain access to personal information.
How Long We Keep Your Personal Information
We will only retain your personal information for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal information for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.
Your Rights
In accordance with applicable privacy law, you have the following rights in respect of your personal information that we hold:
- Right of access. You have the right to obtain access to your personal information.
- Right of portability. You have the right, in certain circumstances, to receive a copy of the personal information you have provided to us in a structured, commonly used, machine-readable format that supports re-use, or to request the transfer of your personal data to another person.
- Right to rectification. You have the right to obtain rectification of any inaccurate or incomplete personal information we hold about you without undue delay.
- Right to erasure. You have the right, in some circumstances, to require us to erase your personal information without undue delay if the continued processing of that personal information is not justified.
- Right to restriction. You have the right, in some circumstances, to require us to limit the purposes for which we process your personal information if the continued processing of the personal information in this way is not justified, such as where the accuracy of the personal information is contested by you.
- Right to object. You have a right to object to any processing based on our legitimate interests in certain circumstances.
- Right to withdraw consent. If you have provided consent to any processing of your personal information, you have a right to withdraw that consent but without affecting the lawfulness of processing based on consent before its withdrawal.
Please note that not all of the above rights are absolute and we may be entitled to refuse requests, wholly or partly, where exceptions under the applicable law apply.
You can exercise any of your rights as described in this Privacy Notice and under data protection laws by contacting us as provided in the Contact Us section above.
Cookies and Other Tracking Technologies
We use cookies and similar technologies on the Platform for various purposes, including improving your experience of the Platform. For more information about cookies and why we use these, please refer to our Cookies Policy.
Complaints
If you have any questions or concerns regarding our Privacy Notice or practices, please contact us as provided in the Contact Us section above. You also have the right to complain to the UK Information Commissioner’s Office. We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.
Changes to our privacy policy
We reserve the right to change this Privacy Notice from time to time. Any changes will be posted on the Platform with an updated revision date. If we make any material changes to this Privacy Notice, we may notify you by email or by means of a prominent notice on the Platform prior to the change becoming effective.
- Privacy Notice for Prize Draws
Introduction and general terms
We are This Can Happen Insights, the Insight division of This Can Happen Limited., focused on insight services that support our clients in developing their services.
Our registered office is:
This Can Happen
26 Red Lion Square
London
WC1R 4HQ
This is our Privacy Notice in relation to prize draws associated with this market research study. Your privacy is important to us. This Can Happen is a controller of your data, that means we are trusted to look after and deal with your personal information in accordance with this policy. We determine the ways and means of processing and must therefore be accountable for it.
We will ensure that all personal information supplied is processed in accordance with applicable Data Protection legislation and industry guidance including:
The EU General Data Protection Regulation (GDPR) 2018
UK GDPR
Data Protection Act 2018
Market Research Society’s (MRS) Code of Conduct
ICC/ESOMAR (European Society for Opinion and Marketing Research) International Code on Market and Social Research
If you have any questions, please contact info@thiscanhappenglobal.com
What information will we collect?
In most cases, the only information collected for a prize draw is your name and email address. If any other contact information is required, the reason for this will be clearly explained in the survey.
All prize draws are optional. You are not obligated to enter a prize draw in order to participate in the research.
Who will retain and process the data?
Although some prize draws are run jointly with a university, we remain responsible for the management of all data collection and processing.
How will we use your contact information you provide for entering a prize draw:
Your contact information will be disassociated from the rest of your survey responses when the survey is closed and stored separately in a password protected area.
The required number of winners will be selected at random. In the event that winners cannot be contacted within two weeks, additional winner(s) will be drawn in the same manner as above.
Contact information gathered for a prize draw will not be used for any other purpose or shared with any third parties (other than the university offering the prize, if applicable).
How long will we keep your personal information?
On successful delivery of the prize, all personal data will be deleted, unless you have opted to be added to our database for future projects.
Where contact information has been transferred to a university for delivery of the prize, the university will also delete the data on completion or within three months of receipt (whichever comes first) and will advise us when this has taken place.
Prize draw terms and conditions:
The This Can Happen terms and conditions for the prize draw will apply. Full prize draw terms and conditions will be posted in the survey.
The following terms and conditions will apply to all prize draws and will be clearly referenced in the survey at the point of contact data collection.
Entrants must be aged 16 years or over.
Only those people completing the research survey are eligible to take part in the prize draw.
Only one entry per person is allowed.
Entry to the competition is free.
To enter, please include your email address in the prize draw entry form box in the survey. To enter you must include your email address at the time you complete the survey. The closing date for entries will be stated in the survey, along with the month in which winners will be notified. If winners cannot be contacted after two weeks, another name will be drawn, in the same manner as previously, to take the prize.
In certain circumstances (where a university is responsible for administering the prize), entering a prize draw constitutes consent to us sharing your contact information with the university in the event that you are the prize winner.
We will not link your name to any other data you have provided in the survey and will only send their name and email address as provided here to the university if you win the prize draw.
Prizes may not be exchanged or substituted for any other good or service, including cash.
The judge’s decision is final. No correspondence can be entered into.
Entry into the draw implies your acceptance of these rules as final and legally binding.
The promoter of this offer is This Can Happen Global Ltd
Your email address will not be used for any other purposes and will be deleted from our database in the time period set down within the General Data Privacy Policy.
Updated and effective as of 23 July 2021
