Privacy Policy

Name: Performance in People Ltd
Address: The Observatory, Ryde, Isle of Wight, PO33
Phone: 01983 568080
E-mail: [email protected]

Introduction

Performance in People Ltd takes your privacy seriously. We are committed to protecting the security and privacy of all data in line with Data Protection legislation and our own internal Information Security Management System.

This policy has been created to help you understand how we use, share, store and protect your data. Due to legislation changes and evolution of technology, this policy is subject to change occasionally. Therefore, please ensure you check this policy frequently.

By providing your information, we will process it in line with the lawful bases outlined in this policy. In cases where we rely on consent, you will be given clear options to opt in or out.

This policy applies to all users of the Performance in People websites and related services.

The type of personal information we collect:

We may collect the following types of personal information:

During the application process to become a mystery shopper: We may collect your name, date of birth, gender, email address, home address (including postcode), and phone number(s). This information is provided directly by you and is used to assess your suitability and process your application.

After registration as a mystery shopper: Once registered, we may collect additional information such as payment details, demographic data, accent, marital status, and availability. This information is provided directly by you and is used to assign appropriate mystery shopping tasks, manage your account, and facilitate payment processing. We may share your data with:

🔵Cloud hosting providers (e.g. AWS, Microsoft Azure) for secure data storage

🔵Clients for assignment validation (limited data only)

🔵HMRC or other regulators where legally required

When contacting us via the ‘Contact Us’ page: We may collect your name, email address, and contact number. This information is provided directly by you and is used to respond to your enquiry, provide any requested information or support, and maintain a record of the correspondence for administrative or customer service purposes.

When applying through the ‘Careers’ page: We may collect your name, email address, phone number, and any additional information you provide in your CV. This information is provided directly by you and is used to assess your suitability for current or future job opportunities, to contact you about your application, and to manage the recruitment process. We may also retain your CV on file for a limited period in case other relevant roles become available, unless you request otherwise. We may also receive limited personal information indirectly, such as your IP address.

Marketing: We may collect business contact information (such as name, job title, company, and email address) from publicly available sources or licensed data providers (such as LinkedIn or Lusha) for the purpose of sending relevant B2B marketing communications. We rely on our legitimate interests in promoting our services to professionals who may benefit from them. You can opt out of these communications at any time by using the unsubscribe link in our emails or by contacting us directly.

Processing Purpose & Lawful Basis:

🔵 Onboarding mystery shoppers - Legitimate interest

🔵 Verifying identity - Legitimate Interest

🔵 Sending available assignments - Legitimate Interest

🔵 Storing accounting data - Legal Obligation

🔵 Sending marketing emails - Legitimate Interest

You are able to remove your consent for us to process your data at any time. You can do this by contacting [email protected].

Data Security, Google reCAPTCHA and International Transfers

We take the security of your information seriously and implement appropriate measures to protect it. All personal data is stored securely, with robust physical security measures in place at our premises and controlled access to our computer systems.

We use Google reCAPTCHA to protect our website from spam, fraud, and automated abuse. reCAPTCHA helps us distinguish between legitimate human users and automated systems.

When you interact with pages protected by reCAPTCHA, certain information may be collected and analysed, including your IP address, browser type, device information, operating system, mouse movements, keystroke patterns, and other behavioural signals. This information is used solely for the purpose of website security and fraud prevention.

We act as the data controller in relation to this processing. Google LLC acts as the data processor and processes this information on our behalf in accordance with its Cloud Data Processing Addendum.

The legal basis for this processing is our legitimate interests in ensuring the security of our website, preventing fraud, and protecting our services from misuse.

As Google LLC is based in the United States, personal data may be transferred outside the UK and the European Economic Area (EEA). Where such transfers occur, we ensure appropriate safeguards are in place in accordance with applicable data protection laws. These safeguards include the use of Standard Contractual Clauses (SCCs), the UK International Data Transfer Addendum where applicable, and/or reliance on certification under the EU–U.S. or UK–U.S. Data Privacy Framework, as appropriate.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law.

If you contact us via our Contact Us page, we will retain your information for as long as necessary to respond to your enquiry and manage any follow-up communication. For job applications submitted through our Careers page, we will retain applicant data for up to 12 months following the end of the recruitment process, unless you request otherwise or we are required to retain it for longer in compliance with legal obligations.

If you are a registered mystery shopper, we will retain your personal data while you remain active or until you request removal from our database. Upon such a request, we will delete your data within 30 days. However, certain information that is required for legal, tax, or accounting purposes may be retained for longer periods in accordance with applicable laws and regulatory requirements.

As part of the mystery shopper application process, you may have given consent for your home address to be used for the purposes of mystery shopping assignments. If you agree to this, we will retain your address for that purpose even if you become inactive, unless you ask us to remove it. You can withdraw your consent or request we remove your address at any time.

If we collect your information for B2B marketing communications, we will retain your contact details for as long as we believe our communications are relevant to your role or interests. You may opt out at any time by using the unsubscribe option in our emails or by contacting us directly.

All personal data scheduled for deletion is securely and permanently removed from our systems.

Cookies

We use cookies to enhance your experience. Non-essential cookies, such as those used for analytics, will only be set if you consent via our cookie banner. You can manage your preferences at any time.

Your data protection rights

Under data protection law, you have rights including:

Your right of access – You have the right to ask us for copies of your personal information.

Your right to rectification – You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.

Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.

Your right to object to processing - You have the right to object to the processing of your personal information in certain circumstances.

Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

Contact & Complaints

This Privacy Policy is issued by Performance in People Ltd, registered in the United Kingdom with company number 3871085 and registered address at The Observatory, Westridge Business Park, Ryde, Isle of Wight, PO331FX

For all data protection matters, including any questions about this Privacy Policy or concerns about how we process your personal data, you can contact us using the details below:

🔵 [email protected]

🔵 The Observatory, Westridge Business Park, Ryde, Isle of Wight, PO331FX

🔵 01983 568080

If you wish to make a complaint, please contact us using the details above. We will acknowledge your complaint and aim to respond within 30 days.

If you are not satisfied with our response, or believe we are processing your personal data unlawfully, you have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection matters: www.ico.org.uk.