Privacy Policy

1. Who We Are

DataWave provides anonymised survey data and benchmarking reports for UK businesses. We are the data controller for the personal data described in this policy. You can contact us at hello@datawave.best.

2. What Data We Collect

We may collect the following personal data:

• Contact information: name, email address, job title, company name
• Survey responses: answers you provide to our business surveys
• Technical data: IP address, browser type, pages visited
• Communication data: records of correspondence with us

3. How We Use Your Data

We use your personal data for the following purposes:

• To provide and improve our services, including generating benchmarking reports
• To send you survey invitations, reports, and service updates
• To create anonymised, aggregate datasets and reports (individual responses are never identifiable)
• To comply with legal obligations

4. Legal Basis for Processing

We process your data under the following legal bases (UK GDPR):

• Consent: when you voluntarily complete a survey or subscribe to communications
• Legitimate interests: to improve our services, conduct research, and contact businesses about relevant offerings
• Legal obligation: where required to comply with applicable laws

5. Data Sharing

We do not sell your personal data. We may share data with:

• Service providers: hosting (Supabase), email delivery (Brevo), and analytics tools that process data on our behalf
• Aggregate reports: anonymised, non-identifiable data may be included in published benchmarking reports
• Legal requirements: where required by law, regulation, or legal process

6. Data Retention

We retain your personal data for as long as necessary to provide our services and fulfil the purposes described in this policy. Survey response data is retained indefinitely in anonymised form. Contact information is retained until you request deletion or unsubscribe.

7. Your Rights

Under UK GDPR, you have the right to:

• Access: request a copy of the personal data we hold about you
• Rectification: ask us to correct inaccurate data
• Erasure: ask us to delete your personal data
• Restriction: ask us to limit how we use your data
• Portability: receive your data in a portable format
• Objection: object to processing based on legitimate interests
• Withdraw consent: where processing is based on consent, you can withdraw at any time

To exercise any of these rights, contact us at hello@datawave.best. We will respond within 30 days.

8. Email Communications & Unsubscribe

You can unsubscribe from our emails at any time by clicking the unsubscribe link in any email we send, or by contacting us directly. We maintain a global suppression list to ensure unsubscribed addresses never receive further communications. We comply with the UK Privacy and Electronic Communications Regulations (PECR).

9. Cookies

Our website uses essential cookies required for the site to function. We do not use advertising or tracking cookies. Analytics, where used, rely on anonymised, aggregate data only.

10. Data Security

We use industry-standard security measures to protect your data, including encrypted connections (TLS/SSL), secure hosting infrastructure, and access controls. However, no method of transmission over the internet is 100% secure.

11. Changes to This Policy

We may update this policy from time to time. We will update the date at the top of this page when changes are made. We encourage you to review this policy periodically.

12. Complaints

If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint.

13. Contact

For any questions about this privacy policy or your personal data, contact us at hello@datawave.best.