Guidance

Companies House user benefits survey: privacy notice

Published 11 February 2019

This privacy notice specifically refers to our use of data collected through the user benefits survey.

There is only survey data collected by the survey.

Survey data

This consists almost entirely of answers to multiple-choice questions, none of which contain personally identifiable data. A small number of questions provide free-text options for written answers. We ask participants not to use these fields to provide any personal information.

Purpose of processing

The survey data will be used to gain insight into the behaviour, preferences and opinions of participants. These insights will be used to inform the design of new services and improvements to existing services, and to set benchmark satisfaction scores allowing us to compare past levels of satisfaction in future research.

To be included in the free draw, you will need to click in a tick box to say you want be considered to win the prize.

Lawful basis for processing

By opting in to the free draw and/or participation in future research, individuals are providing consent to our processing of their personal data for the purpose specified.

Who we share data with

The data is stored by our survey service supplier, Toluna. This information is stored in the USA, and is EU-US Privacy Shield certified.

Retention period and criteria

Survey data will be kept for the purposes of analysing the data for an indeterminate amount of time (until we no longer need it).

Rights

The GDPR provides certain rights that individuals may exercise in respect of their own personal data. If you would like to exercise any of the rights in the GDPR, in respect of personal data you have submitted to Companies House, please contact the Data Protection Officer using the contact details below. Please note that there may be some circumstances in which your request cannot be complied with – for instance if we have a legal obligation to keep data, or to process it in a particular way. All requests to exercise GDPR rights will be handled on a case by case basis.

Identity and contact details of controller and representative

The registrar is the controller of your personal data. This means that it is the registrar who decides how and why your personal data is processed. The Companies Act 2006 requires the registrar to collect and publish information, including the personal data of officers of companies and other entities, on the register.

Contact details of the DPO

The Data Protection Officer can be contacted at dpo@companieshouse.gov.uk.

Right to lodge a complaint

If you are dissatisfied with the way we are managing your personal data, please let us know in the first instance by writing to dpo@companieshouse.gov.uk. If you remain dissatisfied, you are entitled to raise your concerns with the Information Commissioner’s Office.

The contact details are:

The Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF