Privacy Policy

Gobby Limited is a Private Limited Company, based in 61a High Street South, Rushden, England, NN10 0RA. It is a company registered in England and Wales, registered company number: 11776608.

Gobby Limited is registered as a controller for the processing of personal data with registration reference ZA510042.

Most of the personal information that we process, including processing relating to survey responses, is as a processor for our customers. This means that our customers are responsible for how that personal information is processed.

If you are using the Gobby platform to complete a survey, the administrator of that survey (our customer) should have provided you with a copy of their privacy notice. You should make sure that you are happy with that privacy notice, and refer any questions about it to the administrator of that survey

The only personal information that Gobby process about you as a controller is in relation to your use of the platform for security, business efficacy and development purposes.

This privacy notice also covers other processing of personal information that we do as a controller, for example in relation to our customers, suppliers, website users and members of the public who contact us directly.

We collect:

• contact information
• social media identifiers
• contents of your communications with us
• any other information you or others provide to us voluntarily
• website usage information
• feedback about our products or services

Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website. The purposes for which we use your personal data are:

Why we collect your personal information‍ and our lawful basis:

Respond and deal with your enquiry if you contact us
‍For our legitimate interests in being responsive to customers and potential customers, so that we can deliver the best service to you.

Perform our obligations under our contract with you or your organisation 
‍To perform our contract with you or to take steps at your request before entering into a contract.

‍Create and manage your account, including contacting you about it if you (or your organisation) purchase our services
To perform our contract with you or to take steps at your request before entering into a contract.

‍Send you marketing
Where you have consented to receive marketing.

Process financial transactions
‍To perform our contract with you or to take steps at your request before entering into a contract.

Make sure your experience using our website is as good as it can be
To perform our contract with you or to take steps at your request before entering into a contract, or in other cases, for our legitimate interests in developing our service to improve the experience of our customers, and to protect, realise or grow our business.

Monitor (including automated monitoring of) the use of the Gobby platform, including:

• collecting tracking and analytical data to improve your experience
• monitoring for issues using third party applications
• maintaining the security of the platform
• ensuring use of the platform is in accordance with our contract

To perform our contract with you or to take steps at your request before entering into a contract, or in other cases, for our legitimate interests in developing our service to improve the experience of our customers, and to protect, realise or grow our business.

Develop and market the Gobby platform and services
‍For our legitimate interests in developing our service to improve the experience of our customers, and to protect, realise or grow our business.

Monitor our business activities
To comply with our legal and regulatory obligations, or in other cases, for our legitimate interests, ie to protect, realise or grow our business.

Maintain appropriate records
To comply with our legal and regulatory obligations, or in other cases, for our legitimate interests, ie to protect, realise or grow our business.

Gobby does not share your personal information with third parties, other than to the extent required with service providers who act as processors on our behalf. These include IT service providers such as hosting providers, and machine learning/AI/natural language processors to support with data analysis.

Your personal information is stored on third party servers and devices in the UK and EU. Where any of our service providers transfer personal information outside the UK and EU (for example for the provision of support services), we require that they do so in compliance with data protection legislation.

In most cases, any transfer is protected using model contract terms as approved by the ICO. If you would like any further information regarding transfers, please contact data@gobby.io.

Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website.

• Your right of access – You may ask us for copies of your personal information. Read more about the right of access.
• Your right to rectification – You may ask us to correct or delete personal information you think is inaccurate or incomplete. Read more about the right to rectification.
• Your right to erasure – You may ask us to delete your personal information. Read more about the right to erasure.
• Your right to restriction of processing – You may ask us to limit how we can use your personal information. Read more about the right to restriction of processing.
• Your right to object to processing – You may object to the processing of your personal data, in particular where it is used for marketing purposes. Read more about the right to object to processing.
• Your right to data portability – You may ask that we transfer the personal information you gave us to another organisation, or to you. Read more about the right to data portability.
• Your right to withdraw consent – When we use consent as our lawful basis you have the right to withdraw your consent at any time. Read more about the right to withdraw consent.

Which lawful basis we rely on may affect these rights, and there are some exemptions which might limit your exercise of them. 

You can ask to exercise these rights at any time by contacting us at data@gobby.io and where they apply, we will action them as soon as we can, within a month where possible.

Where we are processing personal information on behalf of our customers, we keep your data for as long as is appropriate under our contract with them.

Where we are a controller, we retain personal information for as long as is necessary for the purposes it was collected, and for us to retain appropriate business records, including in relation to legal protection. In most cases, this will mean that your personal information is not retained by us for longer than 6 years after we have our last communication with you, but it may be deleted sooner if it is no longer required.

If you have any questions about how we use your personal information or you would like to exercise any of our rights, you can contact us:

By post to Data Protection, Gobby, 61a High Street South, Rushden, England, NN10 0RA

By email to data@gobby.io using the subject line “Data Protection Enquiry”

If you are unhappy with how your Personal Data is processed by Gobby Limited, please let us know. The easiest way to do that is to email us at data@gobby.io.

If you’re still not happy following our response, you have the right to lodge a further compliant with the Information Commissioner’s Office (ICO). The ICO’s address is:

Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

You can also contact them by telephone on 0303 123 1113 or via their website at

www.ico.org.uk.

No element of this: words, images, concepts, narratives, themes, motifs; may be used, inclusive but not restricted to being also reproduced, stored, or anonymously analysed; in any manner for the purpose of training technology commonly described as artificial intelligence, machine learning or algorithm training, its associated technologies or systems.

In accordance with relevant copyright, digital directives, and legislation protecting digital ownership and derivatives of copyrighted works, we expressly reserve this work from any text and data mining exceptions.