Lunar Data Privacy Policy
How Lunar will handle your data
We will protect all data that is entrusted to us. Lunar process all data in accordance with the data protection principles outlined by the UK General Data Protection Regulation (UK GDPR), the Data Processing categories agreed between the Market Research Society (MRS) and the Information Commissioner, and in line with the MRS Code of Conduct. Lunar is registered with the Information Commissioner’s Office.
We will collect, store, and manage data in an unbiased and secure way.
We will only use personal data for purposes that are advised to data subjects and received consent for that use.
We will always be transparent about the personal data collected and how it is used.
Obtaining your Personal Data
The method we use to obtain your personal data may vary but would be one of the following ways:
· From you if you participate in any of our research projects
· From a client/third party with whom you have an existing relationship and they have your consent to pass this information on to us
Below sets out our legal grounds for collecting or processing your data:
· Consent. This is our main legal ground, here you will provide the consent for us to collect and use your personal data. The main purpose being the participation in studies. You will be asked to provide that consent after reading and agreeing to why it is required, this may include the provision of consent for minors, where you are the parent or legal guardian – noted as participants under 16.
· Legitimate interest, we will use or process your data for any consent audit checks, quality checks such as validity or if we cannot obtain direct consent.
· Legal obligationif we are required to collect/use or pass on under a legal obligation. If possible we will advise you of this.
How long do we keep your personal data?
· Any collected personal data will be kept for 6 months following the end of the project or as stated at the consent stage.
· Any use by clients will be advised to you, it will be for use by them or us for research purposes and requiring them/us holding your data for longer
· Quality control records such as participation, attendance or payment details may be kept for 2 years.
How do we protect your data?
Lunar is committed to ensuring the security of its data and information systems to protect against breaches of confidentiality, failures of integrity or interruptions to the availability of that information and to ensuring compliance with contractual and legal obligations. Data held by Lunar is protected from unauthorised access, disclosure, modification, loss, or malicious damage or deletion.
Lunar adheres to the concept of data protection by design and by default. Our default requires us to ensure that data subject’s privacy is considered from the outset of each new project, processing activity or the development of new products, services, or applications.
Only the minimum amounts of personal data, as necessary for the specific purpose, are collected, or processed and retained for the minimum time to for fill the purpose.
Who do we share personal data with?
We may work with partners under strict contractual terms. These may include use of
· Recruiters who recruit you to our projects.
· Research analysis tools for the processing of the collected data
· Any filming and/or transcription services to be able conduct our research
· IT advisers for the expert storage and control or your data.
Transfer of personal data
We do not transfer data outside the UK/EU without your knowledge or consent. Lunar also creates, receives, and controls data for marketing purposes. Lunar ensure that all marketing activity is compliant with UK GDPR and the MRS Code of Conduct. Where people give us data for research purposes, we do not use it for marketing purposes.
Your rights at any time:
· You may withdraw your consent at any time
· You may request deletion, correction of mistakes, or restriction of the use of your personal data, where practical to do so.
· You may have access to the personal data held, so long as we still hold it
· You may request the data is sent to you in a practical format
· You may complain to us, or other parties as may be necessary, such a data controller, or authority.
Please contact: lydia@lunarinsight.co.uk
We adhere to the standards of the following:
The UK’s Information Commissioner's Office (ICO)
The MRS code of conduct is followed.
Policy history
This privacy policy may be updated from time to time, please check for the latest version.
This is - Policy Version: v1.0 Oct 2025 – Date: 19/10/2025.