We care about your privacy

Cookies

We use a small number of cookies on this portal.

Necessary cookies keep you signed in for up to seven days and remember the cookie choice you have made. A few short-lived cookies are set for five minutes while you are signing in, and are cleared as soon as sign-in completes. These cookies are required for the portal to work and cannot be switched off.

Statistics cookies are set by Google Analytics and are only placed if you consent to them.

You can change your choices at any time using the Cookie settings link in the footer. The full list of cookies in use is below.

Necessary

Statistics — set only if you consent

The type of personal information we collect

We currently collect and process the following information:

• Your name(s)
• Your email(s)
• The organisation(s) you work for
• Your job position
• Which sign-in method you used, and an identifier issued by our authentication provider
• Your notification preferences, and the date you last used the portal
• Your survey answers, where you gave us your email address
• Technical information recorded in our server logs when you use the portal

We do not store your password. Sign-in is handled by Zitadel, our authentication provider, either through Google, Microsoft or LinkedIn, or by email. We receive your name and email address from that provider and an identifier that links your account to it.

Our surveys are hosted on SurveyMonkey. You can complete them anonymously. If you do not give us an email address, your answers are held with no identifier attached and we cannot link them back to you.

How we get the personal information and why we have it

Most of the personal information we process is provided to us directly by you for one of the following reasons:

• Registering on this portal to read our published reports
• Completing one of our surveys on SurveyMonkey and giving us your email address
• Activating a benchmarking code
• Asking us to re-send a code you have lost
• Contacting us about a report or about your data

We also receive personal information indirectly from the following sources in the following scenarios:

• When you consent to share your details with us at the end of a survey hosted on SurveyMonkey
• When you sign in using a third-party identity provider, which passes us your name and email address
• When you subscribe to our mailing list(s) through third-party services

We use the information that you have given us to:

• Create and secure your portal account and give you access to our reports
• Issue, deliver and validate benchmarking codes
• Show your own answers alongside the market averages, where you have activated a code
• Tell you when a report is published
• Detect duplicate survey submissions
• Produce and publish aggregated industry research
• Improve the quality of our services and support our marketing activities

We may use this information on third-party services we use to provide our services to you:

• SurveyMonkey, our survey platform
• Zitadel, our authentication provider
• Resend, our email delivery service
• Our hosting and database providers
• Website analytics services, where you have consented to analytics cookies

Under the General Data Protection Regulation (GDPR), the lawful bases we rely on for processing this information are:

• (a) Your consent. You can remove your consent at any time. You can do this by contacting us at ask@samexpert.com or by using unsubscribe links where present.
• (b) We have a contractual obligation.
• (c) We have a legal obligation.
• (d) We have a legitimate interest.

How we store your personal information

Your information shared with us is stored securely in a digital form. Measures are taken to prevent unauthorised access.

Unless otherwise required by law, we will keep your data as long as it is necessary to provide you with our services outlined above. We may retain your data afterwards for legitimate marketing and service improvement purposes but not longer than five years.

We keep survey answers linked to you for five years. Before that period ends we will ask whether you want us to continue holding them. If you do not reply, we remove the link between the answers and you. The answers themselves are kept in de-identified form so that we can show trends across survey cycles.

We will then dispose of your information by completely deleting relevant records.

Your data protection rights

Under data protection law, you have rights including:

You can exercise two of these rights yourself, without contacting us. From your account settings you can download a copy of everything we hold about you, including your survey answers. You can also delete your account. Deleting your account removes your profile and your sign-in record, cancels your benchmarking code, and strips your email address and your name from your survey response. The answers themselves remain in the dataset, but we can no longer connect them to you.

Where a survey response was submitted anonymously, we hold no identifier for it, cannot connect it to you and cannot act on these rights in respect of that response.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

Please contact us at ask@samexpert.com if you wish to make a request.

How to complain

If you have any concerns about our use of your personal information, you can make a complaint to us at the address below. You can also complain to the ICO if you are unhappy with how we have used your data.