Lightspeed Panels Privacy Policy
Last updated: October 1st 2025
Introduction
This Privacy Policy (“Privacy Policy”) describes how Lightspeed LLC, 3 World Trade Center, 175 Greenwich St, 35th Floor, New York, NY 10007, USA and its affiliate Kantar Group companies, including Lightspeed Research Limited, South Bank Central, 30 Stamford Street, London, England, SE1 9LQ, UK (altogether "Lightspeed" or “we”), a Kantar group company ("Kantar") collects, uses, and discloses information relating to panel members ("Panelists"), website visitors, and mobile application users. This Privacy Policy applies to all operations related to the website and mobile applications of our panels including LifePoints, Qmee and MobiWorkX (the "Panels").
Roles and Responsibilities
Lightspeed maintains its panels for its own independent purposes and is responsible for the collection and use of your Personal Data (as defined below) in this context. In this case, Lightspeed is the “controller,” “business,” or similar term for the purposes of applicable data protection laws. Lightspeed provides survey results to its clients. To the extent such results include Personal Data, the client is responsible for its use of such results, and will inform you separately about how they process your Personal Data (e.g., via their own privacy policy).
Sometimes, a client instructs Lightspeed to conduct a specific survey outside of Lightspeed’s panels, using a set of potential respondents identified by the client. In relation to these surveys, the client provides your contact details to Lightspeed, Lightspeed’s client is the “controller,” “business,” or similar term for the purposes of applicable data protection laws, and Lightspeed is the “processor” or “service provider” and is responsible for the processing of your personal data. Where our client is the responsible party, their identity and a link to the client’s privacy policy is displayed along with the survey. In certain cases, it is important to the integrity of the survey that respondents do not know who the client is before they provide their input. In these circumstances, providing you with this information before or during the survey would seriously impair the objective of the survey, so we provide this information once you have completed the survey.
1. Lawful Collection and Use of Personal Data
For the purpose of this Privacy Policy, "Personal Data" means any information which relates to or can reasonably be associated with an identified or identifiable living individual or household (or the equivalent applicable term in your jurisdiction).
We collect your Personal Data in several ways such as through our website(s) (for example our panel portal), our mobile applications and other activities such as social media, apps and online, face-to-face or telephone studies, third party websites that you visit or other research activities.
We have set out below more detailed information about how we use your Personal Data. We are also required by law to explain the legal basis for processing your Personal Data. The legal bases we commonly use are listed below and could be different for each use case:we have your consent for the use of your Personal Data;
we need to use your Personal Data in order to perform a contract with you;
we need to process your data to comply with a legal obligation; or
the use of your Personal Data is necessary for our (or our clients') legitimate interests (in which case we will explain what those interests are).
If you receive an email that concerns you in the way your Personal Data is managed, purporting to be from us, please let us know as shown below in "How to Contact Us".
Use Case |
Purpose |
Data collected/processed |
Source |
Legal basis |
|---|---|---|---|---|
Operating, analyzing, and managing our website(s), mobile applications, and other services |
Ensure that content from our site is presented effectively, according to the device you are accessing it on. Analyze statistical data about user(s') browsing actions and their patterns. See our website cookies policy for more information. |
IP address, operating system information, browser type, browser specifications, device specifications, site use data (such as clicks, page visits and time spent). |
We obtain this data from you directly during your browsing such as browsing on our sites and mobile applications. |
It is our legitimate interest to ensure that our site is presented to you in the most effective way possible and to detect fraudulent behavior (including out-of-country behavior). However, we always rely on your consent for the purpose of analyzing your use of our website(s), which you provide to us through our cookie preferences (you can change this on our site at any time; please refer to our cookie policy). |
Advertising our panel |
To advertise and remind you of our panel offers on third-party websites, pages and apps. See our website cookies policy for more information. |
IP address, operating system information, browser type, browser specifications, device specifications, panel membership status, third-party website/apps use data. |
We obtain this data from you directly or obtain this data from a third-party website/app. |
We always rely on your consent, which you provide to us through our cookie preferences (you can change this on our site at any time; please refer to our cookie policy). |
Panel registration, communications and management |
To administer your panel profile and to communicate with you, including informing you about the panel, providing you with support in relation to your panel participation, selecting you for future surveys, contacting you to participate in our surveys and other research activities, issuing your incentives, helping when you contact our panel support, etc. In certain cases, we will use artificial intelligence (AI) tools or chatbots to interact with you. When we do so, we will take appropriate measures to ensure that you know that you are interacting with such a smart tool or chatbot. |
Name, email address, postal address, mobile device ID, demographics (including sensitive data such as data related to your race, ethnicity, health or your religion) and any detail you share with us about yourself and your household. |
We obtain this data from you directly. |
We seek your consent as part of your registration as a Panelist or we have determined that we have a legitimate interest in using your details to provide you with relevant information or to select you for the right surveys. |
Market Research |
To understand your views about certain products and services or to understand your behavior in various situations. As a member of our Panels, we invite you to research surveys for this purpose. Some of these surveys are hosted by us, but most surveys are hosted by our clients who will serve you their own privacy information at the start of the surveys. For most surveys, your survey responses will be associated with an identification number that links to your panel account information. |
Identifier (including persistent identifier), contact details, email address, voice, image, opinion and any information you submit in a survey, including sensitive data such as health, race, ethnicity, or religious beliefs asked by our clients in the surveys. |
We obtain this data from you directly. |
Voluntary participation in surveys whereby we ask for your consent to collect and use your Personal Data. |
Safety monitoring (Pharmacovigilance Adverse Events Reporting) |
Report Adverse Events during our studies to our pharmaceutical clients, who may then report to competent authorities. |
Identifier, contact details, email address, disease, treatment, product taken and adverse events. |
We obtain this data from you directly, or combined with other secondary databases. |
Voluntary participation in survey whereby we ask for your consent to collect and use your Personal Data. This is done on instruction from our pharmaceutical client(s) for specific health-related surveys. |
Public Disclosure |
To share or disclose pursuant to judicial or other government subpoenas, warrants, orders or pursuant to other similar legal or regulatory requirements, we will provide such information to the appropriate authorities. |
Identifier, name, contact details, email address, incentive received, and any other data requested by the appropriate authorities. |
We obtain this data from you directly, or combined with other secondary databases. |
We only do this where we have a strict legal obligation. |
Panel Monitoring |
To monitor and analyze the Panels, their performance and Panelist participation, and manage our commercial performance indicators and targets. We may use artificial intelligence (AI) tools for this purpose, for example to understand what may cause panel members to leave the panel or become inactive. |
anelist activities (i.e., survey participation, login activity, registration and consent data, demographics, etc.). For this purpose of analysis, we will aggregate and anonymize your Personal Data. |
We obtain this data from you directly. |
Legitimate interest – we and/or our clients have a legitimate interest in analyzing our business performance. |
Fraud Protection and Quality Assurance |
Prevent fraudulent behavior and ensuring the quality of panel participation (e.g., to ensure Survey Participation Uniqueness); maintenance of an internal list of individuals committing fraudulent activities in the Panels. Our Terms and Conditions include our expectation that Panelists will act lawfully, sincerely, in good faith and meet reasonable quality standards. This may involve automated decision-making, as described in section 10 below. |
IP address, browser specifications, device specifications, mailing addresses, email addresses, official identification number or ID, Panelist activities, and any information you submit in a survey. |
We obtain this data from you directly, or combined with other secondary databases (i.e., we may work with third-party fraud specialists to protect our Panels) |
Necessary for the performance of a contract – in order to enter and perform the agreement between us and our Panelists (the Terms and Conditions), we and/or our clients must ensure that those terms are being adhered to, in particular that no fraudulent, illegal or prohibited behavior is being conducted by Panelists. |
Survey Participation Uniqueness |
Prevention of multiple entries in surveys by the same individuals in line with our Terms and Conditions. |
IP address, browser specifications, device specifications. |
We obtain this data from you directly. |
Legitimate interest – we and/or our client(s) have a legitimate interest in preventing multiple entries by the same individual. |
Survey responses linked to your panel profile |
When you participate in our surveys, we typically use a persistent ID which links your answers in the survey with your panel account and profile. Your survey responses will be considered as Personal Data and you will have the right to access them. Surveys will contain a notice on the very first screen, informing you about the way your data will be processed. |
Persistent unique project-specific identifier. |
We obtain this data from you directly. |
Voluntary participation in survey whereby we ask for your consent to collect and use your Personal Data. |
Use Case |
Purpose |
Data collected/processed |
Source |
Legal basis |
Data Matching, Enrichment, and Generation |
We enrich the data we hold on file about you by matching your Personal Data with third parties. This will help us to improve your panel profile and ensure that we select relevant surveys for you. We may also generate synthetic data, by analyzing information that you have previously provided to us and using smart tools to predict and infer new information about you (e.g., what your likely response to a survey would be) – this is referred to as ‘synthetic data’. In some scenarios, where we use AI to predict how you would answer a market research survey, this is also referred to as your ‘avatar.’ We utilize matching services (i.e. third parties who are specialized in data management) to acquire additional information about you from public and private data sources (such as social networks, retailers and content subscription services with whom you have an account) or to use your Personal Data as an aid to develop additional or new types of anonymous data sets (i.e. we compile your aggregate data with data from other consumers to create a new lifestyle segment). The matching service (our data partner) holds the Personal Data we share for a short time, uses it to assemble the additional information, and then returns the combined information to us. Data partners are contractually bound to delete the data we share with them and/or are not authorized to use it in any way other than for this specific purpose. |
Persistent unique identifier, contact details, email address, social login, cookie, mobile device ID |
We obtain this data from you directly or combined with other secondary databases. |
Legitimate interest – we and/or our client(s) have a legitimate interest in complementing your panel profile, to select you for appropriate surveys or to complement the data set collected through our market research. In some specific cases, we may obtain consent specific to our (and/or our clients’) research objectives. |
Advertising Targeting and Media Buying Research |
We use your Personal Data to help our clients and data partners enrich their data by using lookalike modeling techniques. Thanks to your participation in our surveys and your profile data, we can help our clients to improve their advertising targeting, and to create better online advertising models, through lookalike modeling or similar research methodologies. We will use your Personal Data we collect about you through profile building, participation in research surveys or data matching to match with third-parties and platforms (our data partners). We include contractual safeguards to ensure that you will not automatically be targeted for commercial purposes, as a result of your data being used to help create a lookalike audience, and that our data partners cannot use your data for any other purpose. |
Persistent unique identifier, contact details, email address, social login, cookie, IP address, mobile device ID |
We obtain this data from you directly or combined with other secondary databases. |
Legitimate interest – we and/or our client(s) have a legitimate interest in complementing your survey responses, to help our clients meet their research needs. In some specific cases, we may obtain consent specific to our (and/or our clients’) research objectives. |
Ad Exposure and Measurement |
In addition to cookie-based matching (which you can control and consent to via your panel account), we will use Personal Data you provide to us, such as an email address, in a direct matching process with third parties (i.e. our clients and publishers) to determine if you are a user of that service (such as social networks, websites, mobile apps) for advertising measurement research purposes. We will identify what advertisements you may have been exposed to on those sites and platforms and measure how brand attitudes or brand recall have impacted sales. The third parties that we work with are not permitted to use the data for any other purpose. |
Persistent unique identifier, contact details, email address, social login, cookie, IP address, mobile device ID |
We obtain this data from you directly or combined with other secondary databases. |
Voluntary participation in our Ad-Related Research program, whereby we ask for your consent to collect and use your Personal Data. You can withdraw your consent at any time and continue as a Panelist. |
Business Transactions |
We may need to transfer our panel data to other organizations to manage a business transition or financial transaction, such as a merger, acquisition, divestiture, restructuring, reorganization, dissolution or sale of all or some of our assets. |
All of your Personal Data that we process for the panel as described above, such as your name, email address, mailing address, mobile device ID, demographics, and any detail you share with us about yourself and your household. |
We obtain this data from you directly or from the sources described above. |
Where necessary to comply with a legal obligation, or legitimate interest – we have a legitimate interest to conduct and manage Kantar business transactions. |
2. Incentives and Rewards
From time to time, we, or our clients, may reward you with prize draws, vouchers and other incentives which may be considered "financial incentives" provided in exchange for the collection and retention of your Personal Data. While we do not assign a monetary value to the data that we collect, based on our reasonable estimate, the value received from the program is reasonably equal to or greater than the value we receive from any data. Any incentive program is subject to the applicable terms and conditions of the Panels and relevant survey. In such cases, we will process your Personal Data to work with our third-party incentive partners to manage the incentive process. We or our partners may also use the data to improve products, services and customer experiences.
The financial incentive we offer to you depends on your participation in, and completion of, the relevant survey. The details of the incentive (and its value) will be made available to you before participation in a survey. If you wish to no longer receive incentives or rewards for your participation, please contact us via the "How to Contact Us" section of this Privacy Policy.
Residents of certain jurisdictions may have additional rights respecting these programs, as described in the jurisdiction-specific sections below.
3. Third Parties (Clients and Suppliers)
We may share your Personal Data for the following purposes:
We may share your Personal Data with vendors and service providers who perform services on our behalf, such as identity verification, quality and fraud checking, incentive management, payment processing, data analysis, email and hosting services, or customer services and support. These vendors may access your Personal Data and are required to use it solely as we direct, to provide our requested service. Some vendors will specifically work with us on enriching your panel profile, allowing us to select you for surveys, such as vendors specialized in, but not limited to, data matching, online ad effectiveness measurement, and social media data interactions.
We may share Personal Data with companies within the Kantar Group in order to deliver panel services and activities to you.
We may share Personal Data with our clients for their market research purposes as part of the delivery of our services. Where we act as data processor / service provider on our client’s behalf, our client will be identified in the market research survey as you provide consent.
We may share the Personal Data we collect with marketing and advertising vendors to design our panel marketing campaigns, render meaningful advertisements, and connect with you through social media networking.
We may disclose or transfer information, including Personal Data, as part of any merger, sale, and transfer of our assets, acquisition or restructuring of all or part of our business, bankruptcy, or similar event, including related to due diligence conducted prior to such event, where permitted by law.
We use the Personal Data we collect for panel marketing or advertising purposes. For example, we might send you promotional messages about products, services, programs, or events that may be of interest to you as a Panelist. We may also use the insights we gain about how you use our panel services to improve the effectiveness of our panel marketing campaigns and ability to attract new Panelists.
Our collection, use, and disclosure of Sensitive Personal Data is limited to what is reasonable and proportionate to provide you our services, including complying with our legal, regulatory, and reporting obligations.
We may disclose Personal Data to the following categories of recipients:
We may disclose your Personal Data with our affiliates and business partners where it is necessary to provide the services.
We may disclose Personal Data to our service providers who perform services on our behalf. Our service providers are required to take appropriate security measures to protect your Personal Data in line with our policies and are not permitted to use Personal Data for their own purposes.
With other parties to comply with our legal obligations and where otherwise required by law. When voluntarily participating in a survey, we will collect directly from you or other secondary databases the product taken and adverse events to report Adverse Events during our studies to competent authorities.
As part of our advertising and marketing efforts, we may disclose the following categories of Personal Data with third-party advertising companies, marketing companies, social media platforms, and analytics partners for targeted advertising, marketing, and campaign management purposes: identifiers, internet, and network activity information, and other information about how you interact with our websites or mobile applications.
4. Data Transfers
Your Personal Data may be collected, stored, transferred or processed by companies within the Kantar Group, or third-party service providers for panel or market research related purposes, such as data processing and enrichment, both within and outside your territory.
Unless the survey or the data processing activity requires it, your identity will not in practice be discoverable by the third parties. All parties are contractually bound to keep any information they collect and disclose to us, or we collect and disclose to them, confidential and must protect it with appropriate security standards and practices.
If your Personal Data is transferred to, stored at or otherwise processed outside your country or territory, and that country or territory has not been recognized as providing an adequate level of data protection, we will put in place additional safeguards to protect your Personal Data, as required by applicable law. For example, if you are in the EEA, standard contractual clauses issued by the European Commission and further appropriate supplementary protective measures would be used if we process your data outside the EEA. This includes transfers described above to the United States, where we agree standard contractual clauses between Lightspeed and third-party service providers processing your Personal Data in this country location. Where required by law, we will also request your consent for these transfers in accordance with this Privacy Policy and any other necessary information that we provide to you separately.
Supplementary protective measures include security and storage controls that integrate our data and network security policies and procedures with the security requirements of our clients and in line with the requirements of local data protection laws. All Lightspeed personnel laptops are encrypted, include network protection, and storage/processing on removable media/devices is prohibited. Removable media and mobile devices are stored in locked cabinets/drawers/rooms with restricted access together with secure building access. Lightspeed has also invested in endpoint protection (including anti-malware), threat intelligence, and response services. These measures are deployed across all workstations and servers covering the Lightspeed and Kantar Group estate. Industry/government standard encryption in place - AES128 (Mac) or AES256 (PC), used as standard across the business. We impose the same or similar protective standards on our third-party service providers.
5. Cookie Disclosure
We and our service providers use cookies, pixels, software applications, and other tracking mechanisms (collectively, "Cookies") to automatically collect information about browsing activity, type of device and similar information within our services.
For behavioral tracking research (as part of the relevant panel's Ad-Related Research program), we use optional Cookies, but only if you have given your consent to these Cookies. You can find out more about the Ad-Related Research program and relevant tracking technologies used on our cookies policy page, and you can opt in and out of the program on the preferences page.
As is true of most online surveys, we also gather certain information automatically and store it in survey data files. This information may include the following: Internet Protocol addresses (IP address), browser type, Internet service provider ("ISP"); referring/exit pages, operating system and date/time stamp.
We use this automatically collected information to analyze trends such as browser usage and to administer the site, e.g., to optimize the survey experience depending on your browser type. We may also use your IP address to check whether there have been multiple participations in the survey from this IP address and to protect our business against fraudulent behavior.
For our Panel websites, Lightspeed defines Cookies within 4 categories:
Required to use and protect the Panel site (strictly necessary Cookies);
Measuring how the site is used (analytics and performance Cookies);
Advertising our panel on other websites (marketing Cookies); and
(for Panelists only) Ad-Related Research program tracking and ad delivery, as described above.
For more information, you can access the relevant panel cookie privacy policy and cookie preferences page, where you can find out more information and are able to adjust your cookie settings. Panelists can separately configure their preferences for the Ad-Related Research program here.
6. Accuracy
We take reasonable steps to keep Personal Data in our possession or control accurate, complete and current, based on the most recent information made available to us by you and/or by our client. We rely on you to help us keep your Personal Data accurate.
7. Children's Data
We never knowingly invite children under the legal age set by the authorities in the country in which you reside to participate in research studies without parental permission. If it is necessary and appropriate to a particular project to directly involve children under the legal age, we take measures to ensure we have obtained permission from a parent and/or legal guardian. Lightspeed will provide parents and/or a legal guardian information about the survey topic, any personal or sensitive information which may be collected from the children, the way the data will be used and whether and with whom Lightspeed may share such information.
While the child is completing the survey, it is the responsibility of the parent and/or guardian to supervise them.
8. Sensitive Data
From time to time, Lightspeed may collect Personal Data that is classified as "special categories" of Personal Data. The meaning of this type of Personal Data varies under data protection laws of different countries. Taking this into account, we treat sensitive Personal Data as Personal Data that, if misused or leaked, could potentially endanger an individual's safety, damage their reputation or health, or lead to discriminatory treatment. This includes racial or ethnic origin, citizenship or immigration status, political opinions, religious or philosophical beliefs, trade union membership, data concerning health or data concerning a natural person's sex life or sexual orientation. You can always choose whether to provide this data to us.
9. Rights of Individuals
To request access to Personal Data that we hold about you, please submit your request in writing to the email address or mailing address shown below in the "How to Contact Us" section. When you make a request, you should provide your first and last name, your email address and your mailing address, so we can identify you sufficiently.
Depending on your location and the data protection laws that apply to Kantar’s processing of your Personal Data, you may have one or more of the following rights in relation to your Personal Data:
Right to change your mind and to withdraw your consent;
Right to access your Personal Data;
Right to rectify your Personal Data;
Right to erase your Personal Data from our systems, unless we have legitimate interest reasons for continuing to process the information;
Right to port your Personal Data (portability right) in certain circumstances;
Right to restrict processing of your Personal Data, including the right to restrict/limit the processing of your sensitive Personal Data;
Right to object to the processing of your Personal Data;
Right to opt out of the sale of your Personal Data (if we sell your data);
Rights in relation to any significant automated decisions made about you (see the 'Automated Decision-making' section below);
Right to de-register from the panel and no longer receive survey invitations and/or other panel communications; and
Right to not be discriminated against for exercising any of the rights available to you under applicable data protection laws.
Where our client is the data controller (or equivalent responsible business under applicable data protection laws) for your Personal Data, we will always co-operate and take instructions from them in respect of your data rights. They may have contacted you separately to inform you of these rights.
Your rights may be limited — for example, if fulfilling your request would reveal Personal Data about another person, where it would infringe the rights of a third party (including our rights) or if you ask us to delete data which we are required by law to keep or have compelling legitimate interests in keeping. We will inform you of relevant exemptions we rely upon when responding to any request you make.
If necessary, we shall also notify third parties to whom we have transferred your Personal Data of any changes that we make on your request. Note that while Lightspeed communicates to these third parties, Lightspeed is not responsible for the actions taken by these third parties to answer your request. You may be able to access your Personal Data held by these third parties and correct, amend or delete it where it is inaccurate.
Accessing Personal Data Rights
To request access to Personal Data that we hold about you, please see the contact details in the "How to Contact Us" section. When you make a request, you should provide your first and last name, your email address and your mailing address or any other relevant identifiers to the survey, such as the name and date of the relevant survey(s). If you contact us using an email address or contact details for which we do not hold a record, we may also request that you provide a copy of a valid government-issued or official identification (such as driver's license or passport) to verify your request and your relationship with the panel account owner you are inquiring about.
You may be entitled to use a third party to submit a request to us on your behalf (sometimes referred to as an 'authorized agent' or similar). For this purpose, we will require proof that you gave that third party signed permission to submit the request, which may be in the form of a power of attorney. We may also require additional verification, such as the identity of the third-party individual.
We aim to respond to your requests regarding Personal Data rights as soon as possible, and we will respond within the timeframes determined by the applicable data protection law. In some countries, that is one calendar month or 30 days from receipt of the request. Timeframes under data protection laws may be paused whilst we collect essential information from you, such as verification of your identity.
Subject to instructions from our client (where applicable), we will not charge you for your reasonable requests in principle. However, where permissible under application laws, a fee to reflect the cost will be imposed as appropriate on repeated requests beyond reasonable scope. As for repeated requests that are groundless and need excessive technological means (e.g., developing a new system or fundamentally changing the current practices) to fulfil, involve risks to others' legitimate rights and interests or are impractical (e.g., involving information stored on a backup disk), we may reject your request, subject to applicable data protection laws.
Some data protection laws also prevent us from granting your access to your Personal Data rights, such as where this affects national, defense or public security; major public interests; criminal investigations, prosecutions, trials or enforcement of judicial decisions; life, property or other important legal rights and interests, or those of other individuals; and trade secrets.
10. Automated Decision-making
You will not be subject to decisions that will have a significant impact on you based solely on automated decision-making unless you have given your consent, the automated decision is necessary for performing or entering into a contract with you, or the automated decision is authorized by law.
We apply automated decision-making for fraud protection and quality assurance purposes, because this is necessary for performing our contract with you. This involves collecting Personal Data directly from you at panel recruitment and in surveys, matching your Personal Data with data from our third-party fraud specialist partners (i.e., checking your IP address against known fraudulent actors), and identifying fraudulent or prohibited activity, such as persistent inauthentic survey responses or activity (i.e., via the use of bots). See further details on prohibited user content/activity in our Terms and Conditions. These processing activities may lead to a decision to deny or terminate panel membership, not to allocate incentives to you or to withdraw them from you. We take reasonable steps to ensure such a decision is not taken lightly, including testing and monitoring our AI technology to ensure a sufficient level of accuracy and reliability.
If you become subject to automated decision-making, we will provide you in advance with meaningful information about the logic involved, the significance and the envisaged consequences. After such decision, you will have the right to obtain human intervention, express your own point of view, obtain an explanation of the decision, and challenge the decision in accordance with the “right of second review” process described in our Panels terms and conditions.
11. Data Storage and Retention
Personal Data shall be retained only for such period as is appropriate for its intended and lawful use. Lightspeed shall retain your Personal Data for as long as you are a member of the Panels. In the event that you unsubscribe from the Panels, we shall retain your data for no longer than 3 months after you unsubscribe, unless otherwise required by law. Personal Data that is no longer required shall be disposed of in a manner that ensures that the confidential nature is not compromised.
As part of the Company Business Continuity Plan and as required by ISO 27001, ISO 9001, ISO 20252 and in certain instances the law, our electronic systems are backed up and archived. These archives are retained for a defined period of time in a strictly controlled environment. Once expired, the data is deleted and destroyed to ensure the data is erased completely.
12. Additional Information for Residents of Colorado, Connecticut, Delaware, Iowa, Maryland, Montana, Minnesota, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, and Virginia
Residents of some U.S. states, including Colorado, Connecticut, Delaware, Iowa, Montana, Minnesota, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah or Virginia may have rights under applicable privacy laws, subject to certain limitations. Residents of California should refer to the "California Privacy Rights" section below. Rights under the applicable laws of these states include:
Access. To confirm whether we are processing your Personal Information and to obtain a copy of your Personal Information in a portable and, to the extent technically feasible, readily usable format.
Deletion. To delete your Personal Information provided to or obtained by us.
Correction. To correct inaccuracies in your Personal Information, taking into account the nature and purposes of the processing of the Personal Information.
Opt-Out. To opt out of certain types of processing, including:
To opt out of the "sale" of your Personal Information;
To opt out of targeted advertising by us; and
To opt out of any automated processing of Personal Information for purposes of making decisions that produce legal or similarly significant effects.
How to Exercise Your Privacy Rights
To submit a request to exercise these rights, you may contact us as described below:
by email at kantarprofilesprivacy@kantar.com
by post to: Lightspeed, Privacy Office, South Bank Central, 30 Stamford Street, London, England, SE1 9LQ, UK
by calling the 1800 toll free number +18664711399 (only if you are in the USA)
For all requests, please clearly state that the request is related to "Your [State] Privacy Rights," and indicate which type of request you are making. Please provide us with the following information: (1) first and last name; (2) email address; and (3) zip code or your mailing address. We will take steps to verify your request by matching the information provided by you with the information we have in our records. If we are unable to adequately verify a request, we will notify the requestor.
We may deny your request if (1) we are not reasonably capable of associating your request with the Personal Information or it would be unreasonably burdensome for us to associate your request with the Personal Information; (2) we do not use the Personal Information to recognize or respond to you specifically or associate the Personal Information with other Personal Information about you; and (3) we do not sell the Personal Information to any third party or otherwise voluntarily disclose the Personal Information to any third party other than a processor, except as otherwise permitted under applicable law.
To opt out of sales and targeted advertising by us, you can adjust your cookies settings by clicking the "Do Not Sell or Share My Personal Information" link at the bottom of our website homepage. We will respond to your request as required under the applicable privacy law(s).
If we decline to take action regarding your request, you may have the right to appeal. We will notify you providing our reasons and instructions for how you can appeal the decision.
13. California Privacy Rights
If you are a California Resident, you may have additional rights under the California Consumer Protection Act of 2018, as amended by the California Privacy Rights Act of 2020 (CCPA). For purposes of this section, capitalized terms have the definitions used in the CCPA.
If we collected Personal Information about you in your role as an applicant, employee, or independent contractor, this section does not apply to you.
What Personal Information We Collect
As described in the table above under section 1 above, we collect Personal Information that identifies, describes, or is reasonably capable of being associated with you or your household. Personal Information does not include information that is publicly available, de-identified, or aggregate, as defined in the CCPA.
In the past 12 months, we have collected the following categories of Personal Information from California residents:
Identifiers. Name, email address, mailing address, mobile device ID, medical education number, IP addresses, and persistent unique project-specific identifier for the tracking of the answers of recurring panel respondents.
Internet or other Electronic Network Activity Information. Operating system information, browser type, browser specifications, device specifications, and site usage data (such as clicks, page visits and time spent).
Customer Records and Account Details. Panelist activities, and any information you submit in a survey. Website panel membership status and third-party website use data to advertise and remind you of our panel offers on third-party websites and pages.
Characteristics of Protected Classifications under California Law. Racial or ethnic origin, citizenship or immigration status, religious or philosophical beliefs, union membership, and data concerning health or data concerning a natural person's sex life or sexual orientation.
Health Information. If you are a Panelist, we may collect health data, e.g., disease, health status, diagnoses, treatment patterns, and unmet needs.
Sources of Personal Information
As also described in Section 1 (Lawful Collection and Use of Personal Data) above, we generally collect Personal Information identified above from the following categories of sources:
Directly from you, such as when you visit our website or mobile app, sign up as a Panelist or otherwise use our services, or communicate with us by email, phone, our website chat feature, or any other means.
Automatically, when you visit our website or mobile app. This includes our use of cookies and other online tracking technologies. For more information, see section 9 above.
From service providers and other third parties, pursuant to our agreements with these parties.
We may collect health information directly from you in combination with other secondary databases for clinical studies, health economics and outcomes research (HEOR), non-interventional studies (NIS), real-world research (RWR), observational studies, epidemiology research.
How We Use Your Information
See Section 1 (Lawful Collection and Use of Personal Data) above in respect to how we use your Personal Information, including your Sensitive Personal Information. Our collection, use, and disclosure of sensitive Personal Information is limited to what is reasonable and proportionate to provide you our Services, including complying with our legal, regulatory, and reporting obligations.
Who We Disclose Your Information To
See Section 3 (Third Parties (Clients and Suppliers)) above in respect to how we share your Personal Information.
Selling and Sharing of Personal Information
Under the CCPA, "sales" of Personal Information are broadly defined. As part of the services that we provide to you as a Panelist, you have agreed to participate in market research which may necessarily involve sharing your Personal Information with our relevant client that sponsored the research. For example, we will share your survey responses with a relevant client where we have collected them directly or other relevant information we hold about you. We consider that this is not a 'sale' of your Personal Information, as you have joined the panel to intentionally disclose your Personal Information as part of the service (i.e., for panel incentives). In any event, your participation in a survey is always voluntary and we seek your consent.
Cross-context behavioral advertising refers to targeted advertising based on Personal Information collected from you when you interact with a website or other digital platforms. If you have consented to marketing cookies on our website or the Ad-Related Research program for our panel, we will share your Personal Information with third parties for this purpose. This is further described in our cookies policy, including a list of relevant third parties. You always have the right to opt out of this sharing of your Personal Information through your cookie or panel account settings, or by contacting us.
Our marketing cookies only involve the sharing of your Personal Information for advertisements about us on other websites or platforms. We do not share your Personal Information for the direct marketing purposes of third parties, except where you have consented to targeted advertising under the Ad-Related Research program, for which you can opt out separately at any time.
Otherwise, we do not sell your Personal Information and have not done so in the last 12 months, and we do not sell or share sensitive Personal Information, nor do we sell or share any Personal Information about individuals who we know are under sixteen (16) years old.
California Privacy Rights
To the extent you are a resident of California, you may have the following rights to your Personal Information:
Request to Access: you have the right to request from us (up to twice per year and subject to certain exemptions): (i) categories of Personal Information about you we have collected; (ii) the sources from which we have collected that Personal Information; (iii) our business or commercial purposes for collecting, selling, or disclosing that Personal Information; (iv) the categories of third parties to whom we have disclosed that Personal Information; and (v) a copy of the specific pieces of your Personal Information we have collected.
Request to Correct. You have the right to request that we correct inaccuracies in your Personal Information.
Request to Delete. Subject to certain conditions and exceptions, you may have the right to request deletion of Personal Information that we have collected about you.
Request to Opt-Out. You may have the right to opt out of the "sale" or "sharing" of your Personal Information. To opt out from the sharing or sale of information described above, please click on the "Do Not Sell or Share My Personal Information" link on the bottom of this webpage. If our Site detects that your browser or device is transmitting an opt-out preference signal, such as the "global privacy control" signal, we will opt that browser or device out of cookies on our Site that result in a "sale" or "sharing" of your Personal Information. If you come to our Site from a different device or from a different browser on the same device, you will need to opt out, or use an opt-out preference signal, for that browser and/or device as well.
We will not discriminate against you for exercising any of the rights described in this section. You may designate someone as an authorized agent to submit requests and act on your behalf. To do so, you must provide us with written permission to allow the authorized agent to act on your behalf.
To submit a request to exercise these rights, you may contact us as described below:
by email at kantarprofilesprivacy@kantar.com
by post to: Lightspeed, Privacy Office, South Bank Central, 30 Stamford Street, London, England, SE1 9LQ, UK
by calling the 1800 toll-free number 18664711399 (only if you are in the USA)
14. Updates to Our Privacy Policy
We keep our privacy policy under regular review, and it may be amended from time to time and at least every 12 months. We will always have the most up-to-date policy on our website, or within your panel portal. We will record when the policy was last revised. We will announce material changes to this Privacy Policy as required under applicable law. Your continued access to the Panels' sites and services after such changes conclusively demonstrates your consent to any changes.
15. How to Contact Us
If you have any questions or concerns relating to your privacy or to Lightspeed privacy practices (or for example you wish to unsubscribe), you can contact Lightspeed:
by email at kantarprofilesprivacy@kantar.com
by post to: Lightspeed, Privacy Office, South Bank Central, 30 Stamford Street, London, England, SE1 9LQ, UK
by calling the 1800 toll-free number 18664711399 (only if you are in the USA)
The Kantar Group Data Protection Officer is Ravinder Roopra who can be contacted as follows:
Relevant legal entity: The Kantar Group Limited
Email address: dataprotection@kantar.com
Mailing address: The Kantar Group Limited, Vivo Building, 30 Stamford St, London SE1 9LS, UK
16. Complaints & Country-Specific Disclosure
If you consider that our processing of your Personal Data infringes data protection laws, or you have a related complaint, you may have a legal right to lodge a complaint with a local authority, regulator or supervisory authority responsible for data protection in your country. However, we would appreciate the opportunity to address your concerns before you do this, so please contact our privacy team in the first instance at kantarprofilesprivacy@kantar.com.
EU residents can find the contact details of their country supervisory authority via the European Data Protection Board: https://edpb.europa.eu/about-edpb/board/members_en
UK residents can make complaints to the Information Commissioner's Office via: https://ico.org.uk/make-a-complaint/, by emailing: casework@ico.org.uk, or by post to: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
New Zealand residents can contact the Office of the New Zealand Privacy Commissioner via: https://www.privacy.org.nz/your-rights/making-a-complaint/complaint-self-assessment/, or be email: oia@privacy.org.nz, or be phone: 0800 803 909, or post to PO Box 10 094, Wellington 6143