Privacy Policy

We combine user-centred design thinking, agile and lean startup methodologies with pure pragmatism. We use rapid, remote-moderated research to give you the evidence to make decisions. We prototype designs so you can test them early, before investing in development.

Last updated: 27/2/2019

This privacy policy explains what will happen to any personal data that you provide us with your activity on our website. If you choose to do business with us, use of your personal data as part of our wider relationship will be covered by our standard Terms & Conditions, which are available on request.

Our bases for processing your data

Article 6 of the GDPR ("General Data Protection Regulation") defines your rights over our processing of your personal information. The GDPR requires us to declare which of six "lawful bases" we are relying on when we are processing your personal data: we operate on the basis of "consent" when sending marketing emails (you won't get sent a newsletter unless you have explicitly opted in to receive one) and we operate on the basis of "legitimate interest" when communicating with you in other ways (e.g. when responding to your enquiry).

Our Use of Google Analytics

We use Google Analytics to track how people use our website so that we can continually improve the service we provide. We use Google Analytics to monitor how our website is being used so we can make improvements. Our use of Google Analytics requires us to pass to Google your IP address (but no other information) - Google uses this information to prepare site usage reports for us, but Google may also share this information with other Google services. In particular, Google may use the data collected to contextualize and personalise advertising on its advertising network.

Our use of Hotjar

We occasionally use Hotjar to better understand our users’ needs and to optimize our web service and experience. Hotjar is a technology service that shows us how much time customers spend on which pages, which links they choose to click, what users do and don’t like, etc  and this enables us to build and maintain our service with user feedback. Hotjar uses cookies and other technologies to collect data on our users’ behavior and their devices (in particular device's IP address (captured and stored only in anonymized form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), preferred language used to display our website). Hotjar stores this information in a pseudonymized user profile. Neither Hotjar nor we will ever use this information to identify individual users or to match it with further data on an individual user. You can opt-out to the creation of a user profile, Hotjar’s storing of data about your usage of our site and Hotjar’s use of tracking cookies on other websites on the Hotjar website.

Our use of Hubspot

We store all customer data in a Hubspot CRM system hosted online. Hubspot is fully GDPR compliant and as a controller of your data within our CRM, we are required to provide evidence that our processes are compliant and followed in each case. Read more on their practices here.

Personal data you share with us

By providing personal information such as your name and email address and phone number via the forms on this website (from Hubspot), you agree to us contacting you to respond in line with the preferences you specify. Some forms on our website also include options to control your marketing preferences. We will always apply your most recent instruction, either specified using the forms or in an email. Every email we send you includes an unsubscribe link and comes from our Hubspot CRM which is GDPR compliant.

Transfer of personal data

From time to time we may pass personal data such as your name and email address to other services that we use to operate our business. However, your personal data will remain in the United Kingdom, or countries considered by United Kingdom law to have equivalent policies such as Jersey, Guersey, Switzerland, New Zealand and Canada. Companies based in the USA that have certified with the EU-US Privacy Shield programme are also considered to be permitted destinations by the United Kingdom (including GSuite, Dropbox, ActiveCampaign and Hotjar ).

Questions or complaints

If you have any questions or concerns about how your data is processed, please contact us using the details on this website. If you’d like to understand more about your rights, take a look at the UK Information Commissioner’s Office website: