Privacy Policy

Ready Steady understands and respects the importance of your privacy and we are committed to safeguarding your personal information. We regularly review our policies, systems and processes to achieve the best possible level of service to all our stakeholders.

In line with the EU General Data Protection Regulation (GDPR), effective from 25 May 2018, Ready Steady only holds personal information based on the following criteria:

Data is processed lawfully, fairly and in a transparent manner
Data is only processed for a specified, explicit and legitimate purpose
Any information held must be relevant to the specified purpose
Every effort is made to ensure all data must be accurate and up to date
No data is kept for longer than necessary
Information is handled and processed in a way that maintains security
There must be a ‘lawful basis’ for processing data

The purpose of this policy is to provide information regarding how and why Ready Steady collects, processes and stores data, as well as providing the appropriate contact information should an individual wish to request the information we hold about them, withdraw from processing, or request deletion of any data we hold.

This policy only applies to our website. If you leave our website via a link or otherwise, you will be subject to the policy of that website provider. We have no control over that policy or the terms of the website and you should check their policy before continuing to access the site.

How do we collect personal data?

If an individual has received correspondence from us, we will have procured their data in one of the following ways:

The individual has expressly shared their contact details with us to request information now and/or in the future.
We have previously met the individual at an event and their business card or contact details were willingly shared with us.
The individual has previously connected with a member of our team via a social media channel (such as Facebook, LinkedIn or Twitter) and discussed our services.
We have been introduced to a business colleague by a contact already in our database.
A media or event partner has shared the individual’s contact details with us after they indicated an interest in services provided by Ready Steady.
The individual or a business colleague has visited our website and we believe there is a genuine legitimate interest in our services.
A member of our team has found the individual’s contact details online, believing that their business would genuinely be interested in our services, based upon their job function and industry sector aligning with our typical customer profiles.
A member of our team has found the individual’s contact details via an aerospace industry association, directory or event, believing that their business would genuinely be interested in our services, based upon their job function and industry sector aligning with our typical customer profiles.

What personal data do we collect, and how do we use it?

We will only ever collect, process and store essential information required for contacting an individual within a business environment.
The personal data we collect is often limited to first name, last name, email address, company name, job title and country of residence. Other business-related data may also be processed including primary business activity, industry sector and business address. We will never collect further personal data such as those classed under ‘Sensitive Personal Data’.
Individuals’ personal information is treated responsibly and securely, and only used in their best interests. Data may be used to deliver something an individual has requested such as a report sample; to send them more information about related products which we think would support their business activities; to obtain feedback about our services; or to approach individuals regarding opportunities to participate in our research.

What is our lawful basis for processing data?

Under the GDPR there are six lawful bases for processing personal data. These are detailed as follows:

Consent – the individual has given clear consent for us to process their personal data for a specific purpose
Contract – the processing is necessary for a contract we have with the individual, or because they have asked us to take specific steps before entering into a contract
Legal obligation – the processing is necessary for us to comply with the law (not including contractual obligations)
Vital interests – the processing is necessary to protect someone’s life
Public task – the processing is necessary for us to perform a task in the public interest or for official functions, and the task or function has a clear basis in law
Legitimate interests – the processing is necessary for our legitimate interests or the legitimate interests of a third party unless there is a good reason to protect the individual’s personal data which overrides those legitimate interests

Ready Steady only uses consent, contract or legitimate interest as a lawful basis for holding and processing data, depending on which is the most appropriate for the individual circumstances concerned.

Consent

Consent is used as our lawful basis for processing data for individuals who meet one or more of the following criteria:

Active newsletter subscriber who has actively and willingly offered consent to receive communications from us
Existing or prospective market intelligence client who has actively and willingly offered consent to receive further information about existing and/or related products

After consent is obtained, data is reviewed regularly in order that it is accurate, up to date and not kept for longer than is necessary.

Contract

Contract is used as our lawful basis for processing data for individuals who meet the following criteria:

Previous, existing or prospective market intelligence client, media partner or service supplier who has entered into a contract with Ready Steady

Data is held securely and used only to fulfil the delivery of products and/or services as specified by the terms and conditions of the contract.

Legitimate interest

Legitimate interest is used as our lawful basis for processing data when it is deemed necessary for Ready Steady to market our products and services to an individual in order to support the company’s ongoing commercial and strategic objectives.

This may include direct marketing and sales communications, which are necessary in the context of promoting Ready Steady to relevant industry professionals in order to increase awareness of our research portfolio, availability of our market intelligence reports, our attendance at industry events or to approach individuals regarding opportunities to participate in our research. Based upon our segmentation by organisation and by specific job function, we believe that any individual that receives correspondence from Ready Steady in this capacity could be legitimately interested in our products and services.

The GDPR acknowledges that companies may have a legitimate interest in direct marketing activities. However, prior to processing any personal data and making contact with an individual, an assessment is conducted to ensure the legitimate interests of Ready Steady are not outweighed by the individual’s fundamental rights and freedoms. We only use an individual’s data in ways they would reasonably expect and do not use data in ways they would find intrusive or cause them harm.

If an individual decides they do not want to receive marketing information from Ready Steady, they can opt out at any time. Following this decision, they will no longer receive marketing communications from us.

Who do we share data with?

Personal data collected, processed and stored by Ready Steady is not shared with third parties unless it is strictly necessary to deliver a product or service requested by an individual.

All personal data is stored within a secure environment and accessed internally by selected employees only. Data is cleansed, verified and purged on a regular cycle.

How do we monitor website traffic?

We use a carefully selected partner to detect the source of website traffic via IP tracking, which can identify the business name and geographical location of website visitors. This information may be used to contact the business of the website visitor based on the legitimate interest shown in Ready Steady by visiting our website. However, this tool is not used to access or process any personal data.

Cookies are small text files that are placed on your computer by websites that you visit. They are widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of the site. This website requires cookies in order to operate fully and works with carefully selected third parties to analyse traffic on the site in order to ensure satisfactory performance and optimise user journeys.

Most web browsers allow control of cookies through browser settings. To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit www.allaboutcookies.org.

Your rights

In line with the GDPR, all individuals for whom we hold personal data can exercise the following rights:

The right to access personal data held about them
The right to object to processing (for example, direct marketing)
The right to be forgotten
The right to data portability
The right to complain about processing carried out by Ready Steady
The right to object to automated decision making
The right for the personal data being updated

Objecting to processing

In all correspondence with an individual we will give them the right to object from receiving further correspondence from Ready Steady On all emails received from Ready Steady, there will be an option to ‘opt-out’ of receiving information about a specific product or services, or ‘unsubscribe’ from receiving any further email correspondence from Ready Steady. Please note that selecting the ‘unsubscribe’ option will also terminate any active newsletter subscriptions. If an individual receives a telephone call from us, they have the right to request not to receive any further calls. All requests to object will be logged within our data management systems to ensure that the individual does not receive any further communications.

If an individual wants to object to processing prior to being contacted, please submit a written request via email to hello@ready-steady.net.

We will process and respond to all requests within 30 days. This service will be free of charge.

Being forgotten

If an individual makes a request to be forgotten, we will remove any data we hold about them from all systems used by Ready Steady. This will also mean that we will remove them from our suppression files. If an individual’s data is deleted from these files, there is a risk that their data may be processed again in the future if details are re-added by a member of our team who genuinely believes that their business would have a legitimate interest in Ready Steady.

If an individual does not want us to contact them again, they may wish to request to object rather than request to be forgotten, as this will ensure that their details are always suppressed from future processing.

If an individual does choose to be forgotten, please submit a written request via email to hello@ready-steady.net

We will process and respond to all requests within 30 days. This service will be free of charge.

Other requests

To exercise any of the other rights highlighted above, or discuss any element of our data privacy policy, please email hello@ready-steady.net. We will process and respond to all requests within 30 days.