Privacy Notice
This privacy notice will help you understand how Assured Data Services Ltd (company no. 11861499), also known as Assured Insights, uses and protects your personal data.
Your privacy is protected by law, and it is also protected by our data security and protection policies. This page gives you an idea of how we use your data and the safeguards we put in place to protect it.
You can contact our voluntarily appointed Data Protection Officer, Simon Ghent at Simon Ghent Simon.Ghent@assuredinsights.com if you have any concerns or wish to exercise your rights.
If you prefer you can write to us at 31 Church Road, Manchester, M22 4NN.
Our Promises:
Assured Insights never forget it’s your right to total transparency and control on how we use your data. As such we give you these promises:
- We will only collect data about you that is relevant and necessary;
- Your data will only be held on systems that meet compliance standards;
- Your data will only be accessed by those who need it and we will minimise the amount of data that is processed, wherever possible;
- We won’t share except for the marketing of our own services to you, where we are required to share it by law, if we need to inform a regulatory body or need to fulfil our service commitments to you through a third party that meets our own privacy standards;
- We will always remember that it is your personal data, not ours. As such we will ensure complete transparency and openness with you wherever possible.
- We respect your rights as outlined in the next section and will respond to all requests promptly
Your Rights:
You have the following rights over any data we hold about you:
- Your right of access – You have the right to ask us for copies of your personal information.
- Your right to rectification – You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
- Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.
- Your right to restriction of processing – You have the right to ask us to restrict the processing of your personal information in certain circumstances.
- Your right to object to processing – You have the right to object to the processing of your personal information in certain circumstances.
- Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
You can read more about your rights here.
If you would like to uphold your rights then please contact our Data Protection Officer at Simon.Ghent@assuredinsights.com
If you are in dissatisfied with our response you also have the right to lodge a complaint with the Data Protection Authority. This can be done at https://ico.org.uk/concerns/
How we Collect your Data
We collect information about you in the following ways:
- Direct Contact – you give us information on our website, email us, call us, post a comment on our blog, send us a CV, meet one of us at events or meetings or approach us on social media.
- Third Parties – this is data about you that we may hold from referrals, resellers, purchasing data lists where we have Legitimate Interests or proactive marketing activity. Your personal data may also be provided to us by your employer.
What Data we Collect
We try and minimise the data held and the exact data elements we hold will be dependent on your journey with us. Typically, data elements we collect are restricted to:
- Your personal contact details – email address, IP Address, phone numbers, business related social media page such as LinkedIn and source of your data;
- Your company details – as above but also address, website and other public held information including credit rating and invoicing details if relevant;
- Transmitted information – such as emails, texts, messaging, phone call information and recordings, voice mails, email, meeting notes and CVs.
- Passively processed data – data that we process as part of our contract with clients where they use our systems for data storage. This will typically include employee and client data that we do not control.
Calls may also be recorded for information holding, quality and training purposes.
If you want to know what data about you, we have and how we obtained your data then please contact us.
Our website and other materials sent to you may contain links to other third-party websites. We may also offer buttons to social media that link to third party services. We’re not responsible for the content or the data privacy these sites provide through their tools or sites.
Why we Process your Data
The primary legal basis that we process your data is for the fulfilment of Contract. Normally this means an Contract with your employer.
The information that we collect is essential for us to be able to carry out the services that you require from us effectively.
Data gained from marketing our services or other business activities are processed for our Legitimate Interests.
How we Process your Data:
We process information about you to provide you with the services for which you or your employee engages us.
In general terms our marketing activity is exclusively “Business to Business.”
If we believe you will benefit from our services, we may use your data to market to you if you have consented us to or if we believe we have a legitimate interest in doing so, fulfil contractual arrangements or for other agreed purposes. Every email sent from us allows you to opt out of receiving marketing emails from us, except for the purposes of fulfilling any contractual arrangements.
Calls may be recorded for information holding, quality and training purposes. Our email, document management and website analytics are used for information purposes.
All our processes are mapped and are subject to various internal policies, procedures and governance, ensuring your data privacy and security remains central to all we do.
Data is processed/stored mainly on encrypted cloud services such Microsoft 365 including Azure and platforms for CRM and marketing. We only store “special categories of data” on our platforms that demonstrate high standards of security. In addition, we may use Large Language Models (LLM) to help us fulfil some of our services. A full list of our systems can be provided on request.
Typically, the services we provide utilise our client’s data infrastructure whenever possible. We will typically not export this data outside of client’s instances unless this is sent to us or we need to carry out testing or resolve technical issues.
Data will be processed in either the UK, EEA/EU data centres or on US based servers that have demonstrated strong data security safeguards. We may also process your data in countries outside the UK or European Union from time to time in other aspects of our business.
Further to Section 119A of the Data Protection Act 2018 and noting Case C-311/18 in the European Court of Justice, if your data is transferred or processed outside of the UK or EEA, we ensure the safeguards of International Data Transfer Agreements (IDTAs) or Addendums are enforced. Where this is not possible, we ensure that European Standard Contractual Clauses are entered. For data transfer between the USA, we may rely on the Data Privacy Framework or the UK Extension Data Bridge.
We regularly review suppliers for data security compliance to ensure your data is safe and track where your data is held.
All our processes are subject to various internal policies to ensure that your data privacy and security is upheld.
What we use your Data for:
We process your data for several reasons:
- To fulfil a contractual obligation or service to you
- To better understand your needs.
- To improve our services and products.
- To send invitations to events and follow these up if you have signed up to them.
- To send you promotional emails containing the information we think you will find interesting.
We always ensure we have a “legal basis” to use your data for the purpose we have collected it for.
Third Parties:
We only share data with Third Parties (sometimes known as Sub Processors) when required to.
These Third Parties include:
- Suppliers, contractors and other sub-processors for the performance of any contract we enter into;
- Sub processors we use for data management processes, such our CRM and Marketing platforms. Primarily this is Microsoft (365 and Azure).
- Marketing and Re-Marketing services. These may rely on the use of cookies. You can read more about these in our Cookies Policy.
Please note that we may need to disclose your personal information where we:
- are under a legal duty to comply with any legal obligation or to enforce or apply our terms and conditions
- need to disclose it to protect our rights, property or safety of our customers or others, including the exchange for information with other companies, organisation and/or governmental bodies for the purpose of fraud protection and credit risk reduction and health and safety.
Our website and other materials sent to you may contain links to other third-party websites. We may also offer buttons to social media that link to third party services. We’re not responsible for the content or your data privacy these sites provide through their tools or sites.
Data Retention
Dependant on the data you provide us and for what purpose it is provided we may need to retain your data based on your journey with us. Typically, we will retain data for 6 years following the last engagement with us.
If we are processing data as part of working on client’s data, we will delete the data we hold no more than 90 days from completion of the project or end of contract, whichever happens later.
If you wish to find out more about your specific data retention, please contact us.
Data Permissions:
Every marketing email sent from Us allows you to opt out of receiving emails from us, except for the purposes of fulfilling any contractual arrangements.
You can also contact us at the email address above and request to opt out, view, export or delete your data. If you request for your data to be deleted, your name and email address will be added to an exceptions list and all other data removed to the extent possible.
Data Protection Complaints
We always try to meet the highest standards of Data Privacy when collecting and using personal information. For this reason, we take any complaints we receive very seriously. We encourage people to bring it to our attention if they think that our collection or use of information is unfair, misleading or inappropriate.
You have the right to complain about how we use your personal data. If you are unhappy or have concerns, please contact us first using the details in the “Our Contact Details” section above, so we can try to resolve the issue.
You also have the right to make a complaint to the UK Information Commission (IC). However, the law now requires you to raise your complaint with us before complaining to the IC. If you do complain to us, we will acknowledge your complaint within 30 days, investigate it fairly and promptly, and write to you with our response.
You have the right to complain to the UK IC at any time, using the contact information below:
Please ensure that you state ‘Data Protection Complaint’ in the subject field.
The Information Commission’s address:
Information Commission
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk
Under the UK Data (Use and Access) Act 2025, the IC typically requires you to have completed our internal complaints process, before they will investigate.
Legal Compliance:
We seek to uphold our legal obligations as covered by the Data Protection Act 2018, General Data Protection Regulation 2016 and the Privacy and Electronic Communications Regulations. Our Data Protection Authority is designated as the Information Commissioners Office (UK) (Registration ZA828834).
Due to our global reach, we do not warrant compliance with all legal obligations in countries that we operate in outside of the UK.
This Privacy Policy is reviewed on a regular basis and was last reviewed in June 2026. We will post the most current version on our website.