How Goodform manages privacy

---

We believe in communicating in an open, transparent manner about the ways in which user data is collected and used, particularly any personal data relating to an identifiable person, and respecting customers’ choice and control over their Personal Data.

Scope of this Notice

---

This Goodform Privacy Notice addresses how Personal Data is processed by Goodform and its third parties in the context of its Goodform Insights platform.

If your organisation has a written agreement with Goodform governing Goodform’s processing of Data containing Personal Data, such as the Goodform Terms and Conditions, then that agreement applies with regard to its subject matter (as this is a privacy notice about our practices and does not affect your contractual arrangements with Goodform).

For privacy information relating to Goodform’s other activities, such as our website, please see the Privacy Policy.

Our contact details

---

You can contact us by email or post.

Goodform Ltd
1 Mill Street
Leamington Spa
CV31 1ES
Email: hello@goodformgroup.co.uk

Our Data Protection Officer is

Data Protection People Ltd Email: dpo@goodformgroup.co.uk

Please state “Data Protection Officer” in the subject line.

The type of personal information we collect

---

We currently collect and process the following information:

• Personal identifiers and contact information (for example, name and contact details);
• Authentication data such as usernames and passwords; and
• Information regarding user activity on the platform.

Such data may be Personal Data where it is associated with or contains your name or other identifiers. You may also provide contact details (e.g., name, work email, work phone number, employer organisation, job title), for example when you contact us.

The following sub contractor is a Data Controller of user Personal Data collected in the creation and management of user licenses within the Goodform Insights platform and their Privacy Notice and Terms of use can be found at.

1. Amazon Web Services (AWS) AWS Privacy Notice

We also use AWS hosting services within the UK for the hosting of our Goodform Insights platform and the Personal Data contained within the Goodform Insights platform, which would include your Personal Data. Such hosting service provider is our processor of such Personal Data.

How we get personal information and why we have it

---

Most of the personal data we process is provided to us directly by you for one of the following reasons:

• In order to create a licensed user account with our approved sub-contractors as part of our Goodform Insights Platform
• To deliver and manage services under a signed Order Form

We use the information that you have given us in order to manage the relationship with your organisation, such as account creation, customer relationship management, reporting and invoicing.

Under the UK General Data Protection Regulation (UK GDPR), the lawful basis we rely on for processing this information is our legitimate interest in providing our services to our customers.

How we store your personal information

---

Your information is securely stored.

We keep name and contact details for the duration of our contract with your organisation and where necessary for 7 years afterwards to deal with any contractual or legal issues. We will then delete your information by following our decommissioning process and deleting your data.

Your data protection rights

---

Under data protection law, you have rights including (subject to any exemptions or exceptions which may apply):

• Your right of access - You have the right to ask us for copies of your personal information.
• Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
• Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.
• Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.
• Your right to object to processing - You have the the right to object to the processing of your personal information in certain circumstances.
• Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

Except where an exception applies: you are not required to pay any charge for exercising your rights; and we have one month to respond to you.

Please contact us at dpo@goodformgroup.co.uk if you wish to make a request.

How to complain

---

If you have any concerns about our use of your personal information, you can make a complaint to us at hello@goodformgroup.co.uk.

You can also complain to the ICO if you are unhappy with how we have used your data.

The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk