Who is responsible
OrbitaCX Limited (trading as Insight Now) of Forest Lodge, Upper Icknield Way, Halton, HP22 5NJ, United Kingdom, is committed to protecting and respecting your privacy. This policy and any other documents referred to in it sets out how we deal with personal information we collect from you. OrbitaCX Limited is ISO 27001 certified (IS 685090) and is registered with the UK’s Information Commissioner’s Office as a Data Controller (ZA285673).
Insight Now makes use of third parties to provide products and services to you. We only hold and process data on systems located within the EU/EEA and where these systems are provided by a third party, they only process data as part of the service they are contracted to deliver to us, and will not access it for their own purposes.
Our service infrastructure is hosted by Microsoft Azure, with all data we collect and process being strictly stored within their data centres located in Dublin, Ireland and Amsterdam, the Netherlands.
For more information visit Microsoft’s Trust Centre:
The data we collect
The type of data we collect and how it is used will depend on whether we are acting directly as a Data Controller or as a Data Processor on behalf of our clients.
When you visit our website or use any of our applications, we may collect and process the following data:
- The Internet domain and Internet Protocol (IP) address from which you access the site
- The type of Internet browser and the operating system of the computer you use to access the site
- The date and time you visit the site
- The pages you visit on the site
- If you linked to our site from another website, the address of that website
- If you linked to the site from a search engine, the address of that search engine and the search term you used
However, we do not communicate any information collected in this way to any third party, other than stated in the ‘Third Parties’ section.
If you wish to use our products and services, or if you make a general enquiry or ask us to contact you, you may be asked for personal information such as:
- Email address
- Any further information you choose to provide
Where we act as a Data Processor collecting data for our clients as part of the service they provide to their customers, we will collect only the information prescribed by the client. It is our clients’ responsibility to obtain the relevant consent or justification for collecting and processing your data. As the Data Controller it is also our clients’ responsibility to ensure the types of information we collect on their behalf comply with the rules set out by the GDPR legislation.
Where we act as a Data Processor processing previously collected data for our clients, we will adhere to the processing requirements of GDPR, under a contract that references data protection.
We will endeavour to assist clients to ensure their compliance, though we will not be liable should they not do so.
How we use the data
The Insight Now website does not automatically capture or store personal information, other than information that is automatically logged about visitors and which is used to produce statistics about the use of the website, as specified in the section above.
Should you have submitted your personal data in a direct request for information or via a product enquiry, then we will only use the personal information you provide to deliver the services you have told us you wish to use. We will not provide your information to any
Links within the website to other websites are not covered by this policy.
Where we act as a Data Processor for our clients we will use the data to fulfil only the contracted analysis agreed with the client; this may include:
- Analysis of responses to structured, opinion-based questions and analysis of the themes and sentiment within free-text comments left
- Presenting the response analysis back to the client, which may include direct customer quotes and suggestions
How long we keep your data
We retain your data only for as long as we are contractually required to do so. How long we need data depends on our clients’ requirements, whether that is to provide services to you, for our own legitimate interests in the case of the website (described above) or so that we can comply
We will actively review the information we hold and when there is no longer a client, legal or business need for us to hold it, we will delete it securely.
How we protect your data
We protect your personal data against unauthorised access, unlawful use, accidental loss, corruption or destruction.
We use technical measures such as data encryption at rest and in transit, and multi-factor authentication to protect your data and the systems they are held in. We also use operational measures to protect the data, for example by limiting the number of people with
We keep these security measures under review and refer to industry security standards to keep up to date with current best practice.
Accessing your data and your rights
You are entitled to see copies of all personal data held by us and to amend, correct or delete such data. You can also limit, restrict or object to the processing of your data, for example, through opt-outs available on all messages we send.
To raise any objections or to exercise any of your rights, you can send an email to us at firstname.lastname@example.org or you can write to us at: Insight Now (OrbitaCX Ltd), Room 401, 16 High Holborn, WC1V 6BX, London, United Kingdom
When you get in touch, we will come back to you as soon as possible and where possible within one month. If your request is more complicated, it may take a little longer to come back to you, but we will come back to you within two months of your request. There is no charge for most requests, but if you ask us to provide a significant amount of data we may ask you to pay a reasonable admin fee. We may also ask you to verify your identity before we provide any information to you.