Privacy Notice

Registered name: Submission Technology Ltd
Registered address: East Wing, The Beater House, Turkey Mill, Ashford Road, Maidstone, ME14 5PP
Companies House Registration Number: 04456811
Information Commissioners Office Registration Number: Z7981900

What information we collect, use, and why

We collect or use the following information to provide the service:

  • gender
  • first name
  • date of birth
  • last name
  • email
  • address                     

We collect or use the following information for service updates or marketing purposes:

  • gender
  • first name
  • date of birth
  • last name
  • email

We collect or use the following personal information for dealing with queries, complaints or claims:

  • first name
  • last name
  • email

We collect or use the following information to enhance user experience:

  • gender
  • first name
  • date of birth
  • email
  • address

We collect or use the following information for analytics and performance measurement

  • first name
  • last name
  • email address
  • IP addresses
  • website user information (including user journeys and cookie tracking)

Lawful bases and data protection rights

Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website.

Which lawful basis we rely on may affect your data protection rights which are in brief set out below. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website:

  • Your right of access - You have the right to ask us for copies of your personal information. You can request other information such as details about where we get personal information from and who we share personal information with. There are some exemptions which means you may not receive all the information you ask for. You can read more about this right here .
  • Your right to rectification - You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete. You can read more about this right here .
  • Your right to erasure - You have the right to ask us to delete your personal information. You can read more about this right here .
  • Your right to restriction of processing - You have the right to ask us to limit how we can use your personal information. You can read more about this right here .
  • Your right to object to processing - You have the right to object to the processing of your personal data. You can read more about this right here .
  • Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you. You can read more about this right here .
  • Your right to withdraw consent – When we use consent as our lawful basis you have the right to withdraw your consent at any time. You can read more about this right here .

If you make a request, we must respond to you without undue delay and in any event within one month.

To make a data protection rights request, please email our customer support team at info@paidsurveys.uk.com. To access the data we process about you, please visit our MyData Portal. If you are unhappy with how we use your personal information, you can make a complaint by emailing our Data Protection Officer at dpo@submissiontechnology.co.uk. We will acknowledge your complaint within 30 days and respond without undue delay, in line with the Data (Use and Access) Act 2025.

Our lawful bases for the collection and use of your data

Our lawful bases for collecting or using personal information to provide the service are:

  • Consent - we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time

Our lawful bases for collecting or using personal information for service updates or marketing purposes are:

  • Consent - we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.

·        Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:

o   We may send marketing communications to users who we believe would be interested in our services or similar third party services based on their interaction with our services.

Our lawful bases for collecting or using personal information for dealing with queries, complaints or claims are:

  • Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are: We process user data to respond fully to queries and complaints, and ensure our users are treated fairly.

Our lawful bases for collecting or using personal information to enhance user experience are:

  • Consent - we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
  • Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are: To improve website functionality, optimise user journeys, and personalise your experience.

Our lawful bases for collecting or using personal information for analytics and performance measurement are:

  • Consent - we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
  • Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are: To analyse website traffic, user behaviour, and performance to optimise the website and improve your user experience.

Where we get personal information from

  • Directly from you, for example from: Contact forms: when you fill out a form to make enquiries, sign up for newsletters or request support Account creation: when you register for our service and provide us with your details Feedback and surveys: when you provide information through surveys, reviews or feedback forms Support request: when you communicate with us via email or other support systems
  • Automatically via our technology, for example from: Cookies and tracking technologies: personal data such as IP address, browsing history and preferences gathered via cookies or analytics tools Device information: data about your device (e.g. browser type, operating system, or screen resolution) Usage data: behavioural information such as pages visited, time spent on the site, and actions performed
  • From third parties, for example from: Referral sources: data about users who were referred from other websites, affiliates or social media platforms Advertising platforms: information from platforms like Google Ads or Facebook Ads about user interactions with ads.

How long we keep information

We only hold your data for as long as it is required for the purposes for which it was collected; for as long as it remains accurate and up-to-date; and most importantly, for as long as you are happy for us to do so. The length of time we keep your data will also depend on any legal obligations we may have.

Data

Retention Period

Rationale

  • gender
  • first name
  • DOB
  • last name
  • email
  • address
  • marketing preferences
  • IP addresses
  • website and app user journey information
  • correspondence

For as long as you use our services plus 12 months unless you decide otherwise. You may request earlier deletion by exercising your right to erasure.

·        provide our service

·        improve our service

·        answer customer queries

·        comply with our advertiser’s contractual requirements for proof of your consent to third party advertising

 

 

Who we share information with

Third-Party Advertisers

If you choose to opt-in, we may share your personal data with third-party advertisers that have been presented to you on our platform. These advertisers may use your information to send you surveys, information about their services or marketing communications in line with the consent you have provided.

You are under no obligation to opt-in, and you may withdraw your consent at any time. To opt-out, you can:

  • Follow the instructions set out in the section of this Privacy Notice titled “Lawful Bases and Data Protection Rights”, or
  • Contact the relevant advertiser directly using the details provided in their own privacy notice.

We only share your data with third-party advertisers where you have provided explicit consent.

Data processors

Get Response

We use GetResponse to manage and send our email communications, including marketing emails and transactional messages. If you subscribe to our emails or use our services, your contact details may be processed by GetResponse for this purpose. For more information, see GetResponse’s Privacy Policy.

One Signal

We use OneSignal to send push notifications for both service updates and marketing purposes. OneSignal sets cookies and begins collecting certain technical data (such as IP address, device type, language, and session activity) as soon as it is loaded. To ensure compliance, OneSignal is only activated after you consent to marketing cookies via our cookie banner. Separately, you may also be asked by your browser to allow push notifications - this is a second opt-in managed by OneSignal which you can opt-out of at anytime. For more details, see OneSignal’s Privacy Policy.

CAKE

We use CAKE to manage and track performance marketing campaigns, including attribution and analytics. CAKE may process device and browser data when you interact with our marketing links. For more information, see CAKE’s Privacy Policy.

Google Analytics

We use Google Analytics to collect and analyse information about how visitors use our website. This includes data such as pages visited, time spent on the site, and interactions with content. Google Analytics helps us understand user behaviour so we can improve our services and website performance. Google may also process your IP address and other technical data for this purpose. For more information, see Google’s Privacy Policy.

Use of Data for Audience Matching

We may securely share limited personal information (such as your email address, first name, and last name) with trusted advertising platforms, including Google Ads, to help deliver more relevant ads to you and others with similar interests. This process is known as Customer Match or audience matching.

Your information is hashed and encrypted before being shared, and is only used to match against existing platform users. This does not allow the advertising platform to identify you personally or to access your full data.

We rely on your consent and/or our legitimate interest in promoting our services in a privacy-conscious and relevant way. You can opt out of personalised advertising at any time by adjusting your cookie preferences or visiting YourAdChoices or Google’s Ads Settings.

Sharing information outside the UK

Some of the third-party service providers we use are located outside the United Kingdom or the European Economic Area (EEA). Where personal data is transferred internationally, we ensure appropriate safeguards are in place to protect your information.

We rely on the UK Addendum to the EU Standard Contractual Clauses (SCCs), as approved by the UK Information Commissioner’s Office, to ensure data protection rights are upheld in these transfers.

Below is a list of our key international recipients and the applicable safeguards:

Organisation Name

Category of Recipient

Country

Safeguard

GetResponse

Email Service Provider

Poland

UK Addendum to the EU Standard Contractual Clauses (SCCs)

OneSignal

Push Notification Provider

United States

UK Addendum to the EU Standard Contractual Clauses (SCCs)

CAKE

Marketing Attribution Platform

United States

UK Addendum to the EU Standard Contractual Clauses (SCCs)

Google Analytics

Web Analytics Provider

United States

UK Addendum to the EU Standard Contractual Clauses (SCCs)

 

Automated Decision Making

In some cases, we use automated tools to make decisions about your access to features and what surveys are served to you. This may include:

·        Using the information you provide to us (such as your gender, date of birth, and address) to determine which surveys or advertisers you are eligible for, based on the participation criteria supplied by our advertising partners.

These decisions are made using predefined rules, and we do not use profiling or AI for high-risk decisions without human involvement.

If you believe an automated decision has affected you unfairly, you can request a human review at any time by contacting dpo@submissiontechnology.co.uk.

How to complain

If you have any concerns about our use of your personal data, you can make a complaint by emailing our Data Protection Officer at dpo@submissiontechnology.co.uk. We will acknowledge your complaint within 30 days and respond without undue delay, in line with the Data (Use and Access) Act 2025.

If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the Information Commissioner’s Office (ICO), the UK regulator for data protection.

The ICO’s address:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113

Website: Make a complaint about how an organisation has used your personal information

Contact details

Email

dpo@submissiontechnology.co.uk

Last updated

19/09/2025