Privacy notice for survey respondents

Kanga Health Limited (“Kanga”) would like to thank you for taking part in the market research survey we are conducting on behalf of our client. We take protecting your privacy and security seriously and will not use your information you provide for any purpose other than research and you will in no way be adversely affected by taking part.

It is not our aim to sell or promote anything. This is a market research survey using scientific methods and we commit, in obtaining your co-operation, not to mislead you about the nature of the research or how the findings will be used. Your responses will be treated as confidential unless you consent to being identified.

Kanga is a Data Processor and our commissioning client (the “Sponsor”) is the Data Controller as defined by the Data Protection Act 2018 and the EU General Data Protection Regulation. The identity of the Sponsor will be confidential during the survey to maintain the integrity of the market research; however, you may request the identity of the Sponsor at the conclusion of the market research by contacting us as provided below.

To contact you: As Data Processor, we may hold information about you that can specifically identify you such as your name, email address, correspondence address and telephone number which may have been provided by the Sponsor, by you, or may have been acquired as part of a list purchased by us or the Sponsor.

Kanga will use this information to contact you for the purpose of this research study. We rely on the consent you provided either to our Sponsor or us for purposes of contacting you.

To conduct the market research: We rely on your consent in order for us to collect and use any information about you [for patient surveys in the EU: and your explicit consent for any personal information related to your health or mental health], which includes your contact information, demographic information like age and gender, [for patients-only: and information about your health] and, in particular, your experience with your disease, and your opinions. We will only collect or process data that is necessary to conduct the study. In conjunction with the market research study, the data we collect about you may be transferred to third parties assisting with the study, such as a moderator or transcriptionist. In addition, we will de-identify/pseudonymise your information and share that de-identified/pseudonymised information with the sponsor of the study.

Online collection: We use session cookies and other similar devices sparingly and only for quality control, validation and to prevent bothersome repeat surveying. It is possible to configure your browser to notify you when cookies are being placed on your computer, and to delete cookies by adjusting your browser settings.

We do not do any invisible processing of data from your computer. We will only collect and use personal information in accordance with this policy to the extent deemed reasonably necessary to serve our legitimate business purposes, and we will maintain appropriate safeguards to ensure the security, integrity, accuracy and privacy of the information you have provided. In addition, we will take reasonable steps to ensure that third parties to whom we transfer any personal information provide sufficient protection of that information.

Additional uses: Please be aware we may need to retain your information on our files beyond our standard retention period, or disclose your information in order to resolve disputes, enforce our user agreement, or for technical and legal requirements and constraints related to the security, integrity and operation of our surveys, which may include, but is not limited to comply with the Sponsor’s legal obligations related to patient safety and pharmacovigilence and answering correspondence from you.

If you successfully completed one of our surveys, it is possible that you are entitled to receive an incentive (also referred to as honorarium or payment). The value of this incentive will vary depending on the length, complexity, and topic of the survey. We will tell you upfront what the value, currency and method of this incentive payment will be.

For you to receive an incentive, we will need either:

i) your email address, to send you an Amazon voucher / PayPal payment / other digital voucher, or
ii) name, address and bank account details to make a bank transfer to you.

You will not be asked to provide any financial or bank details online when completing a survey. If there is any honoraria payment linked to survey completion, this will be dealt with and verified separately.

Unless you previously consented to other purposes, your personal information will only be used to send you this payment and will be deleted once we have confirmation that the payment was received successfully and to your satisfaction.

As with all forms of marketing and opinion research, your co-operation is voluntary at all times. No personal information is sought from or about you without your prior knowledge and agreement.

Our Company policy is to securely retain any personally identifiable information for a 12-month period following completion of work, unless you request that we keep it. In the relatively few instances where we ask permission to share your data with additional recipients, which would allow you to be personally identified, this use is done in accordance with your consent and, we will ensure that the information is only used for the stated purposes. We will not send you unsolicited mail or pass on your email addresses to others for this purpose without your explicit permission for this.

We will not disclose your data without adequate organizational and technical measures in place in order to protect your data and will only share your data with the following:
1. Vendors and service providers who assist Kanga and the Sponsor with conducting market research;
2. Third parties in connection with the sale, assignment or other transfer of the Sponsor’s business;
3. Third parties to respond to requests of government or law enforcement agencies or where required or permitted by applicable laws, court orders, or government regulations;
4. When needed for corporate audits or to investigate or respond to a complaint or security threat;
5. Any affiliated entity, vendor or service provider, or other third party who has permitted access to or to whom we transfer Personal Data is required to keep it confidential and secure, as well as to process it only for the purposes we have informed you of in this privacy statement or for which you have consented.

The information we collect about you will be kept in the United Kingdom. For all disclosures, we will take the necessary measures to ensure the safety of your data in accordance with applicable data protection laws. Our Sponsor is an international organization with affiliates and subsidiaries worldwide. Some of these have their registered offices or are located in countries not providing for the same level of data protection as the country where you reside (including in other countries that do not provide for the same level of regulatory data protection). In order to protect your privacy, where the pseudonymised personal data are transferred by or on behalf of our Sponsor to other countries or organizations that have not been recognized as providing regulatory protection similar to your country, the Sponsor contractually obliges its international entities, affiliates and service providers to comply with the applicable data protection laws and principles through standard clauses that have been approved or recognized by the relevant regulators.

You have the right under the Data Protection Act 2018 and the EU General Data Protection Regulation to access any information held about you. You also have the right to the following:

• Object to processing of your data
• To port data (if from automated data collection)
• To request erasure of any personal data made public
• To request restrictions on processing
• To rectify data held

We will be happy to respond to any of these requests or any issues you may have. You can make a request by emailing info@kangahealth.com . You can also contact our Data Protection Officers at this email address. For the contact information of the Sponsor’s Data Protection Officer, please also contact this email address.

Online surveys: Kanga policy is to use industry standard secure online survey software in order to operate the survey questionnaire and data collection process. The data from the survey will be held in a secure database and only the Data Processor and Data Controller may access this data.

It is not our intent or design to interview children without gaining prior parental consent or without a parent or responsible adult being present. Online surveys relating to children should be completed by a responsible adult. We will not knowingly collect, use or disclose Personal Data from minors without the prior written consent from his/her parents and/or legal guardian.

Kanga has security measures in place to protect the loss, misuse, and alteration of the information under their control. Only certain employees have access to the information you provide us and are only granted access for data analysis and quality control purposes. By participating in this survey, you consent to this policy. If you do not agree to this policy, please do not complete or take part in the survey.

Our policy will indicate the date it was last updated, but if there is a substantive change in the way that we use your personal information, we will notify you via email of the relevant changes. If you choose to opt out of our changed practice, then please email info@kangahealth.com. Your continued participation in our survey(s) will signify your acceptance of the changes to our policy.

You have the right to lodge a complaint with the way your data has been handled by Kanga with the Information Commissioners Office (https://ico.org.uk) or with your local data protection authority.

Kanga is registered as a Data Controller with the Information Commissioner’s Office. The details of our registration are:

Data Controller Name: Kanga Health Ltd

Registration Number: ZA093781

Date Registered: 9th January 2015

Kanga is certified with the British Healthcare Business Intelligence Association (www.bhbia.org.uk) URN #VWQYXO3A.