MyDrivingPower Europe – Privacy Notice

Effective Date: 11th June 2025

Introduction

This Privacy Notice explains how Escalent Limited ("Escalent", "we", "us", "our") collects, uses, and protects your personal data in connection with the MyDrivingPower Europe research recruitment initiative.

We are committed to protecting your privacy and ensuring that your personal data is processed fairly, lawfully, and transparently, in accordance with the requirements of:

  • The UK General Data Protection Regulation (UK GDPR)

  • The Data Protection Act 2018

  • Any other applicable data protection and privacy laws

This Privacy Notice provides the information required under Articles 13 and 14 of the UK GDPR.

As a market research provider, Escalent adheres to the principles set out in the Market Research Society (MRS) Code of Conduct and applicable industry standards.

1. Data Controller (UK GDPR Article 13(1)(a))

The data controller for this initiative is:

Escalent Limited
21 Frederick Sanger Road
Surrey Research Park
Guildford, Surrey, GU2 7YD
United Kingdom

2. Contact for Data Protection

Escalent has appointed a Data Protection Officer to oversee its compliance with data protection laws.  If you have any questions about this Privacy Notice or how we handle your personal data, please contact: privacy@escalent.co

You also have the right to make a complaint at any time to the UK Information Commissioner’s Office (ICO), the UK supervisory authority for data protection matters:
https://www.ico.org.uk/make-a-complaint/

3. Purpose and Legal Basis for Processing (UK GDPR Article 13(1)(c) and (d))

We will collect and process your personal data for the following purpose:

  • To identify and recruit individuals for potential participation in future automotive-related market research studies conducted by Escalent.

We will not use your personal data for marketing purposes or for any unrelated purpose.

The lawful basis for processing your personal data will be either:

  • Consent under UK GDPR Article 6(1)(a) where you voluntarily provide your data and agree to its use for research recruitment; or

  • Legitimate Interests under UK GDPR Article 6(1)(f) where we have a legitimate interest in identifying and contacting individuals who may be eligible and interested in participating in market research studies, in a manner that does not override your data protection rights and freedoms.

You will be informed of the applicable lawful basis at the point your personal data is collected.

4. Categories of Personal Data Collected (UK GDPR Article 13(1)(c))

We may collect the following personal data from you:

  • Full name

  • Email address

  • Age bracket

  • Make, model, and year of vehicle(s) owned

  • First half of UK postcode (e.g., "SW1")

In addition, certain technical data may be collected automatically through the survey platform, including your IP address, device type, browser type, and timestamp of submission.

We do not intentionally collect special category data (sensitive personal data) as defined in UK GDPR Article 9(1) under this initiative.

5. How We Collect and Store Your Personal Data (UK GDPR Article 13(1)(e) and (f))

Personal data will be collected through a secure, branded website operated by Escalent. The responses you provide will be captured via Qualtrics, a secure third-party survey platform engaged by Escalent under a data processing agreement.

Qualtrics acts as a processor under contract with Escalent and is required to process your personal data only in accordance with Escalent’s instructions and applicable data protection laws. Qualtrics does not access or use your data for its own purposes.

Your personal data will be stored securely within the United Kingdom.

6. International Participants and Data Transfers (UK GDPR Article 13(1)(f))

This initiative is intended for UK residents only.

We take reasonable steps to ensure participation is limited to individuals residing in the UK, including use of a residency confirmation question during the screening process.

However, due to the nature of online and social media advertising, it is possible that individuals located outside the UK may access the site and submit their personal data.

In such cases:

  • Your personal data will be transferred to and processed in the United Kingdom, where it will be protected in accordance with the UK GDPR.

  • If you are located outside the UK and choose to submit your data, you acknowledge that your data will be processed in the UK, and that UK privacy laws may provide a different level of protection compared to those in your home jurisdiction.

Escalent does not intend to transfer your personal data outside the UK as part of this initiative.


If any international transfer were to occur, we would ensure that appropriate safeguards are in place in accordance with UK GDPR Article 46 (e.g. Standard Contractual Clauses), or that other lawful transfer mechanisms apply.

6A. Children’s Data

This initiative is not intended for children under the age of 18, and we do not knowingly collect personal data from anyone under this age.

If we become aware that we have inadvertently collected personal data from a child under 18, we will take steps to delete such data promptly.

If you believe that we might have collected personal data from a child, please contact us at: privacy@escalent.co

7. Data Retention Period (UK GDPR Article 13(2)(a))

We will retain your personal data for no longer than six (6) months from the date of collection, unless you request its earlier deletion.

At the end of this retention period, your personal data will be securely deleted manually by Escalent staff.

8. Your Data Protection Rights (UK GDPR Article 13(2)(b))

You have the following rights regarding your personal data under the UK GDPR:

  • Right of access - to request access to the personal data we hold about you (UK GDPR Article 15).

  • Right to rectification - to request correction of inaccurate or incomplete personal data (UK GDPR Article 16).

  • Right to erasure ("right to be forgotten") - to request deletion of your personal data (UK GDPR Article 17).

  • Right to restriction of processing - to request restriction of processing where applicable (UK GDPR Article 18).

  • Right to object - to object to processing of your personal data based on legitimate interests (UK GDPR Article 21).

  • Right to data portability - to request transfer of your personal data in a structured, commonly used, and machine-readable format, where processing is based on consent or contract (UK GDPR Article 20).

You can exercise any of these rights by contacting us at: privacy@escalent.co

Escalent’s Data Protection Officer will oversee handling of such requests, and where appropriate, the relevant internal project team may be involved in fulfilling them.

If you are not satisfied with our response or believe that we are processing your personal data unlawfully, you can also lodge a complaint with the UK Information Commissioner’s Office (ICO): https://www.ico.org.uk/make-a-complaint/

9. Automated Decision-Making and Profiling (UK GDPR Article 13(2)(f))

We do not use your personal data for any form of automated decision-making or profiling that produces legal or similarly significant effects concerning you.

10. Third-Party Processors and Security

We engage trusted third-party service providers to assist in the operation of this initiative, including:

  • Qualtrics - survey platform and secure data storage (acting as processor on behalf of Escalent).

We take appropriate technical and organisational measures to safeguard your personal data and ensure that any third-party processors process data in accordance with our instructions and applicable data protection laws.

11. External Links

Our website or communications may contain links to other websites operated by third parties. This Privacy Notice does not apply to those third-party sites. Please review the privacy notices of those sites before submitting any personal data.

12. Further Information

For more information about how Escalent processes personal data more generally, please refer to our main Privacy Policy: https://escalent.co/privacy-policy/

13. Future Project Scope

This Privacy Notice has been prepared specifically for the MyDrivingPower Europe pilot initiative.

If this initiative is extended to support recruitment for specific client projects or to new markets, we will review and update this Privacy Notice, and/or issue additional privacy notices as required, to reflect any changes in processing activities, roles, or legal responsibilities

14. Updates to This Privacy Notice (UK GDPR Article 13(2)(d))

We may update this Privacy Notice from time to time to reflect changes in our processing practices or legal obligations. When we do, we will revise the "Effective Date" at the top of this notice.

We encourage you to review this Privacy Notice periodically.

End of Privacy Notice