Privacy Policy
As a Data Processor ↟
What We Do↟
JudgeService Research Limited (JudgeService) are an organisation that offers Software as a Service (SaaS) and conducts customer service and satisfaction surveys on behalf of clients, gathers and publishes testimonials and provides feedback to clients on the customer experience and benchmarking across groups or a global average.
Personal information is provided by each of the clients at the point of enquiry and/or sale and passed to JudgeService for processing.
JudgeService uses this information to conduct surveys online, by voice call and by post depending on what personal information has been provided and any permissions to use any of the communication channels.
All Clients have entered into agreements with JudgeService and additional information on the products we supply them may be obtained from the address provided at the end of this policy. The agreements in place with all our clients identify us as a Data Processor and the client as the Data Controller.
What Information We Collect From You↟
We receive data that contains personal information including:
Title, name, address, post code, telephone number, mobile number, e-mail address, car registration number, car make and model.
Not all records will contain all data but the name and any combination of address, telephone, mobile and email address will be included as a minimum.
We do not collect or process any special categories of data from individuals.
What We Do With Your Data↟
Any data received from our clients is used for contacting you, asking you to participate in market research to determine your level of satisfaction with services provided by our client, and then feedback of that information to the dealership to allow them to measure, and where necessary, improve their services.
Where you provide explicit permission during the survey, your testimonial may be published online at www.judgeservice.com or on other websites that we work with, in agreement with our clients. You may, when asked to provide permission for publishing, request anonymous publishing or reject the option to publish and these instructions will be respected.
JudgeService will not transfer Personal Data to any third parties for further use or processing unless required under rule of law.
Lawful Basis for Processing↟
As a Data Processor, JudgeService has undertaken Privacy impact assessments to understand the impact of our processing on the individual rights of the data subject (you) and have identified two different categories of data processing:
Pre-transactional
-
Pre-transactional surveys occur at the point where you may have made an enquiry with a service or product provider (service provider). For us to contact you, the service provider will have provided you with information on how they will use your data and which lawful reason for processing they are using.
Post-transactional
-
Post transactional surveys occur once you have entered into an agreement to purchase a product or service, such as buy a car, rent a house, stay in a hotel. As a part of that process, the provider has contracted JudgeService to evaluate their performance by surveying you to determine your insight into the experience. This is classed as a legitimate interest and is a lawful basis for processing as it is reasonably expected during part of the buying process to be contacted to understand your feelings on the experience.
Data Processing and Collection of Further Data↟
By agreeing to complete a survey and submitting the survey answers, you are providing personal opinions, which under the GDPR is considered as personal data. These opinions will be published by JudgeService and may be anonymised if required.
All feedback that you provide will be returned to the JudgeService client that controls the data for their use and improvement programs.
Any data provided will not be transferred to third parties for further processing and in all cases, no data will be transferred outside of the UK and EU or your country of domicile if you are located outside of the EU.
Data Security↟
All data we collect or are provided, is stored in a secure environment using advanced technology to prevent breaches and is not transferred outside of the country of domicile.
We take the security of your data seriously and treat your data as if it were our own. JudgeService Research Ltd. is certified as compliant with ISO 27001:2013 for Information Security Management Systems that provides an additional level of confirmation that our security systems operate to the highest levels.
Data Retention↟
All data is stored and retained for 3 years to allow for the process of customer satisfaction feedback and improvement to have occurred and allow data controllers to utilise the data for services that may be independently identified and advised to data subjects. We also retain the data for analysis of patterns and trends in markets but will never utilise personal data or transfer it to any unauthorised third party.
As a Data Controller↟
What Information We Collect From You↟
In General↟
We receive and store any information you enter on our Web site or give us in any other way. This includes information that can identify you (personal information), including your first and last name, telephone number, postal and e-mail addresses, user name and password. We will also request information about your experience with our clients or 3rd parties. You can choose not to provide information to us, but in general some information about you is required to enjoy the benefits of our service and incentives. In addition, some information is also required for you to interact with our site.
Information About Others↟
You will have the opportunity to provide contact information for other people through our Web site.
Information About Other Sources↟
We will often obtain both personal and non-personal information about you from our clients affiliated entities, business partners and other independent third-party sources and add it to other information about you. For example, if you visit JudgeService by clicking-throughfrom a site operated by one of our business partners, and you have registered with that partner, then information about you that you have provided to that partner may be shared with us. Examples of other information we may receive includes contact information and demographic information.
Automatic Collection of Information↟
We automatically collect some information about your computer when you visit JudgeService. For example, we will collect session data, including your IP address, Web browser software, and referring Web site. We also may collect information about your online activity, such as content viewed, and pages visited. One of our goals in collecting this automatic information is to help us understand the interests of our users and customise your user experience.
Cookies and Other Web Technologies↟
Cookies are small data text files and can be stored on your computers hard drive (if your Web browser permits). JudgeService.com and its affiliated websites use cookies for the following general purposes:
To help us recognise your browser as a previous visitor and save and remember any preferences that may have been set while your browser was visiting our site. For example, if you register on our site, we may use cookies to remember your registration information, so you do not need to log into our site each time you visit. We also may record your password in a cookie, if you checked the box entitled Keep me signed in on this computer unless I sign out.Please note that member IDs, passwords, and any other account-related data included in such cookies are encrypted for security purposes.
To help us customise the content, website experience, and advertisements provided to you on our websites and on other websites across the Internet, for example, when you access a web page, a cookie is automatically set by us, our service providers, or our partners to recognise your browser as you navigate on the Internet and to present you with information and advertising based on your apparent interests.
To help measure and research the effectiveness of website features and offerings, advertisements, and e-mail communications (by determining which e-mails you open and act upon).
The Help portion of the toolbar on most browsers should tell you how to prevent your browser from accepting new cookies, how to have the browser notify you when you receive a new cookie, or how to disable non-essential types of cookies. Please note that if you refuse to accept cookies, you may not be able to access many of the tools offered on our sites.
Our sites also may use Web beacons (also known as clear gifs, pixel tags or Web bugs), which are tiny graphics with a unique identifier, similar in function to cookies, that are placed in the code of a Web page. We use Web beacons to monitor the traffic patterns of users from one page within our sites to another, to deliver or communicate with cookies, to understand whether you have come to our site from an online advertisement displayed on a third-party Web site, and to improve site performance. We also may allow our service providers to use Web beacons to help us understand which e-mails have been opened by recipients and to track the visitor traffic and actions on our site. This helps us measure the effectiveness of our content and other offerings.
The Help portion of the toolbar on most browsers will tell you how to prevent your browser from accepting new cookies, how to have the browser notify you when you receive a new cookie, or how to disable cookies altogether.
Google Advertising Cookies↟
Google AdSense uses cookies to help serve the ads it displays on the websites of its partners, such as websites displaying Google ads or participating in Google certified ad networks. When users visit a Google partner's website, a cookie may be dropped on that end user's browser.
Google Analytics↟
This website uses Google Analytics to help analyse how users use the site. The tool uses cookies, which are text files placed on your computer, to collect standard Internet log information and visitor behaviour information in an anonymous form. The information generated by the cookie about your use of the website (including your IP address) is transmitted to Google. This information is then used to evaluate visitors use of the website and to compile statistical reports on website activity for JudgeService.
We will never use the statistical analytics tool to track or to collect any Personally Identifiable Information of visitors to our site. We will not link, or seek to link, an IP address with the identity of a computer user. We will not associate any data gathered from this site with any Personally Identifiable Information from any source unless you explicitly submit that information via a fill-in form on our website.
-
Cookies Set by Google Analytics: __utma, __utmb, __utmc, __utmz, __utmv
For more information about Google Analytics, view their terms of service here:
-
Cookies Set by AddThis:
This website uses AddThis which helps us analyse how users are using our website in real time.
Cookies set by AddThis: uid, uvc, uit, psc
Data Collected↟
We do not share your personal contact information (such as email addresses) with third parties.
How We Use Your Information↟
JudgeService uses the information we collect about you for the following general purposes: for registration and to manage your account, including to facilitate your access to and use of our site; to communicate with you in general, including to provide information about JudgeService and our clients and the JudgeService community; to enable us to publish your reviews, forum posts, and other content to the JudgeService community; to respond to your questions and comments; to measure interest in and improve our products, services, and Web site; to notify you about special offers and products or services available from us or our partners that may be of interest to you; to otherwise customize your experience with JudgeService; to solicit information from you, including through surveys; to resolve disputes or troubleshoot problems; to prevent potentially prohibited or illegal activities; to enforce our Terms of Use; and as otherwise described to you at the point of collection.
If you have signed up as the owner or manager of an organisation we have an agreement with, we will send you e-mail messages at the email address you provide to us.
Email Communications↟
We want to make it easy for you to take advantage of client related opportunities on our website. One way we do this is by sending you email messages that contain information about your apparent car related interests.
With Whom We Share Your Information↟
JudgeService may share your information with the following entities:
Our Clients With Whom We Are Contracted↟
Business partners with whom we may offer products or services in conjunction. You can tell when a third party is involved in a product or service you have requested because their name will appear either with ours or separately. Please note that we do not control the privacy practices of these third-party business partners.
In some situations, we MAY share your information:
- In response to subpoenas, court orders, or other legal process; to establish or exercise our legal rights; to defend against legal claims; or as otherwise required by law. In such cases we reserve the right to raise or waive any legal objection or right available to us.
- When we believe it is necessary to investigate, prevent, or act regarding illegal or suspected illegal activities; to protect and defend the rights, property, or safety of JudgeService, our customers, or others; and in connection with our Terms of Service and other agreements.
- In connection with a corporate transaction, such as a divestiture, merger, consolidation, or asset sale, or in the unlikely event of bankruptcy.
Other than as set out above, you will be notified when personal information about you will be shared with third parties, and you will have an opportunity to choose not to have us share such information.
We also may share aggregate or anonymous information with third parties, including advertisers and investors. For example, we may tell our advertisers the number of visitors our Web site receives or the most popular hotels and vacation destinations. This information does not contain any personal information and is used to develop content and services we hope you will find of interest.
How You Can Access Your Information↟
We endeavour to ensure that your information is relevant to its intended use, accurate, and complete. You can close your JudgeService account by contacting us at the email address listed below. We will send you an e-mail to confirm your request. Please note that after you close an account, you will not be able to sign in or access any of your personal information. However, you can open a new account at any time. Please also note that we may retain certain information associated with your account in our archives, including for analytical purposes as well as for record-keeping integrity.
If you do not hold an account with us or wish to contact us in relation to any personal information, you may ask us to access, delete, modify, restrict processing or object to processing the information that we hold about you by e-mailing us at the email address listed below.
Your Choices With Respect to the Collection and Use of Your Information↟
As discussed above, you can choose not to provide us with any information, although it may be needed to take advantage of certain features offered on JudgeService.
You also can add or update information and close your account as described above.
Whether registered as a JudgeService member or not, you also will be given the opportunity to unsubscribe from promotional messages in any such e-mail we send.
How We Protect Your Information↟
We want you to feel confident about using JudgeService, and we are committed to protecting the information we collect. We have implemented appropriate administrative, technical, and physical security procedures to help protect the personal information you provide to us. Only authorised employees are permitted to access personal information, and they only may do so for permitted business functions. In addition, we use encryption when transmitting your personal information between your system and ours, and we employ firewalls and intrusion detection systems to help prevent unauthorised persons from gaining access to your information.
We take the security of your data seriously and treat your data as if it were our own. JudgeService Research Ltd. is certified as compliant with ISO 27001:2013 for Information Security Management Systems that provides an additional level of confirmation that our security systems operate to the highest levels.
Individual Rights↟
As per the requirements of the General Data Protection Regulation, each data subject has specific rights that must be allowed.
Right to be Informed
All data subjects should have access to information on how their data is to be used. This policy is designed to provide information on what data we collect and how we process it on behalf of our clients.
This information is readily available, regularly reviewed and updated as and when necessary.
Right of Access
All individuals have the right to:
- confirmation that you are processing their personal data;
- a copy of their personal data; and
- other supplementary information – this corresponds to the information that you is contained in this privacy policy.
Any request for data subject access must be addressed to dpo@judgeservice.com and will be responded to within the requirements of the latest legislation.
Right to Rectification
All individuals have the right to rectification of data. This may be done verbally or in writing.
To request rectification verbally, contact JudgeService Research Limited on the numbers provided at the end of this policy or write to support@judgeservice.com.
Right to Erasure
All individuals have the right to erasure or be forgotten. A request may be made verbally or in writing. JudgeService will respond to all requests within 1 working day, and if it is found to be a valid request, will be actioned within 30 days of the request.
Right to Restrict Processing
All individuals have the right to restrict processing. Any request received by JudgeService will be considered alongside the reasons for restriction and will be restricted immediately while investigation of the reason for the restriction occurs. If the reason for restriction is resolved, the data may be utilised again, and you will be informed of the restriction being lifted.
Right to Data Portability
All individuals have the right to data portability, but as a data processor, there are no requirements to be followed. All requests for data portability will be passed to the data controller for their action and you will be informed of this.
Right to Object
All individuals have the right to object to the processing of their data in certain circumstances. As JudgeService values its customers and clients, we will stop processing data for an individual that objects immediately and advise the data controller. JudgeService will maintain a record of objections to ensure no further processing occurs in the future. An objection may be made verbally or in writing and will be processed within 1 calendar month.
Rights Related to Automated Decision Making & Profiling
The GDPR has several rights applicable to you in the area of automated decision making and profiling for marketing purposes. These rights apply where automated systems, with no human input are used, and as such JudgeService does not use any automated systems for decision making or profiling individuals.
Further Rights
All individuals have the right to opt-out or unsubscribe from communications with JudgeService. Any individual may unsubscribe using the links in e-mails, following instructions on any SMS, verbally responding to telephone calls, or by writing to support@judgeservice.com and including “Unsubscribe” in the subject line.
Complaints↟
If you have any complaints about the way in which we process data, we have a team of support specialists who may be able to help you rectify the situation. They can be contacted on the telephone number provided at the beginning and end of this document or by e-mailing or writing to the e-mail or physical address indicated.
If you would like to escalate your complaint, you can write directly to the data protection representative on dpo@judgeservice.com, who will assist you as much as is possible.
If you feel that your concerns have not been dealt with or handled sufficiently, you have the right to escalate your concern to the Information Commissioners Office (ICO) and further information can be found by using the website page https://ico.org.uk/for-the-public/raising-concerns/.
Please note that the ICO guidelines have time limits for raising concerns.
Children’s Privacy↟
JudgeService is a general audience site and does not offer services directed to children. Should an individual whom we know to be a child under age 18 send personal information to us, we will delete or destroy such information as soon as reasonably possible.
External Links↟
If any part of the JudgeService Web site links you to other Web sites, those external Web sites do not operate under this Privacy Policy. We recommend that you examine the privacy statements posted on those other Web sites to understand their procedures for collecting, using, and disclosing personal information.
Visiting Our Websites from Outside the United Kingdom↟
If you are visiting our Web site from outside the United Kingdom, please be aware that your information may be transferred to, stored, and processed in the United Kingdom where our servers are located, and our central database is operated. The data protection and other laws of the United Kingdom applies to all processing activities carried out by JudgeService and as such all applicable laws and regulations apply. By using our services, you understand that your information may be transferred to our facilities and those third parties with whom we share it as described in this Policy.
Snap ‘n’ Share↟
Information we may collect from you
When using Snap ‘n’ Share, we require your permission to opt-in and share your image. As part of the process, we collect certain data about you. This data is:
- E-mail address
- Unique identifier (including but not limited to Vehicle Registration Number or Post code)
How We Use Your Information↟
We use the data we collect from you to send you a copy of the image collected by the app on your e-mail address. We also maintain the data to cross-reference completed surveys in the future and attach a copy of the picture to any review you may choose to leave.
If you do not want us to use your data in this way, please contact us on support@judgeservice.com.
Third Parties↟
We may forward the information we collect from you to the client from where you purchased your product or service, who may use it for marketing purposes, which includes publication of the photograph on their own social media account pages.
You can exercise your right to change permissions at any time by contacting support@judgeservice.com.
Changes to This Privacy Policy↟
JudgeService may update this Privacy Policy in the future. We will notify all users about material changes to this Privacy Policy by placing a prominent notice on our Web site.
How You Can Contact Us↟
If you have questions about this Privacy Policy, please contact us using:
Email:
Address:
-
JudgeService Research Ltd.
11 Cardale Court
Cardale Park
Harrogate
HG3 1RY
United Kingdom
Telephone:
-
01423 649040
Revision 2; October 2021
