1. INTRODUCTION:
Leftfield India Private Limited and its affiliates (hereinafter referred to as “Leftfield”, “we”, “our”, or “us”) are committed to protecting the privacy and security of personal data provided to us. This Privacy Notice outlines the basis on which we collect, process, store, disclose, and otherwise handle your personal data and informs you about your rights in accordance with applicable data protection laws. The data privacy laws in India are regulated by DPDP regulations and IT Act, 2000. The DPDP act is yet to be notified, however the company has framed its policy in line with the UK GDPR data protection law and DPDP regulations. Once the regulations and DPDP act is enforced the company will specifically incorporate the details as per DPDP regulations and till it is enforced the company has incorporated the provisions of both UK GDPR and DPDP regulations as the parent entity of the company is in the UK.
The privacy policy will be subject to changes and amendments as and when the rules and regulations of DPDP are notified and the Indian laws are enforced or if there is any change.
This Privacy Notice applies to:
Individuals who engage with us as participants in research exercises;
Visitors to our website and digital platforms;
Job applicants and prospective contractors;
Clients, suppliers and their representatives;
Public individuals whose data is collated from publicly available sources.
Any other person not included above but engages with us either through social media or digital platforms or through any other modes of communication which involves data collection, processing and exchange.
This privacy policy aims to give you information on how Leftfield collects and processes your personal data.
It is important that you read this privacy policy together with any other privacy notice or fair processing notice we may provide on specific occasions when we are collecting or processing personal data about you so that you are fully aware of how and why we are using your data. This privacy policy supplements the other notices, policies and is not intended to override them.
2. CONTROLLER INFORMATION AND CONTACT DETAILS:
For most of our work, Leftfield Associates Limited (company number 04467531) in the United Kingdom is the controller and responsible for your personal data.
For some of our work in the European Economic Area and Switzerland, Leftfield Europe B.V. (company number 91116295) in the Netherlands is the controller and responsible for your personal data. Where we are dealing directly with you, we will explain in the communications you receive from us if Leftfield Europe B.V. is carrying out work.
For our work in India Leftfield India Private Limited is the data fiduciary and responsible for your personal data.
In some cases, Leftfield Associates Ltd and Leftfield Europe B.V. along with Leftfield India Private Limited will work together on a project and thus all three will be controllers/data fiduciary as applicable and responsible for your personal data.
All the leftfield entities such as Leftfield Associates Ltd, Leftfield Europe B.V. and Leftfield India Private Limited are referred to as “Leftfield” (or “we, “us” and “our”) in this privacy policy.
We have appointed a data privacy manager (Consent Manager) who is responsible for overseeing questions in relation to this privacy policy. If you have any questions about this privacy notice, including any requests to exercise your legal rights, please contact the data privacy manager using the details set out below. As per the Indian DPDP regulations the company is required to appoint a Consent Manager who is a single point of contact between the data principal and the data fiduciary as well as the data processor. Further as per the regulations in India the entity is also required to appoint a Data Protection Officer.
Data Controllers/Data Fiduciaries: -
Leftfield India Private Limited (CIN: U73200PN2025FTC240608) having its registered office situated at F. NO. 201, S. NO. 72/8, AARYA RESIDENCY, VADGAON BUDRUK, PUNE, PUNE CITY, MAHARASHTRA, INDIA, 411041
Data Privacy Manager/Consent Manager/ Grievance Officer:
Mr. Ashish Pawar
Email: ashish@leftfield.in
General queries: info@leftfield.in
Leftfield Associates Limited (UK Company No. 04467531) - 1st Floor, 1–4 Pope Street, London SE1 3PP, United Kingdom
Data Privacy Manager
Ms. Sophie Foster
Email: sophie@leftfield.co.uk
General queries: info@leftfield.co.uk
Leftfield Europe B.V. (KvK No. 91116295) - Slijperweg 12A, 1032 KV Amsterdam, The Netherlands
Data Privacy Manager:
Ms. Sophie Foster
Email: sophie@leftfield.co.uk
General queries: info@leftfield.co.uk
SR NO
ENTITY AND ADDRESS
CONTACT DETAILS
1
Leftfield Associates Limited
Country: United Kingdom
Add: 1st Floor, 1-4 Pope Street London SE1 3PP United Kingdom
Supervisory Authority:
The Information Commissioner, Wycliffe House, Water Lane, Wilmslow Cheshire SK9 5AF.
sophie@leftfield.co.uk
Website: https://ico.org.uk/global/contact-us/
ICO helpline: +44 (0) 303 123 1113
2
Leftfield Europe B.V.
Country: Netherlands
De Werkplek, Slijperweg 12A 1032 KV, Amsterdam
The Netherlands
Supervisory Authority:
Dutch Personal Data Authority
PO Box 93374 2509 AJ, The Hague
Website:
https://www.autoriteitpersoonsgegevens.nl/en
DDPA helpline: +31 (0)88 1805 250
3
Leftfield India Private Limited
Country: India
F. No. 201, S. No. 72/8, Aarya Residency, Vadgaon Budruk, Pune, Pune City, Maharashtra, India, 411041
Supervisory Authority:
Data Protection Board of India
As and when notified by the act will be added in the contact details
Please contact us using the contact details above if you have any concerns about the way we have processed your data. If we are unable to resolve your concerns, you have the right to make a complaint at any time to the relevant supervisory authority.
The entity might appoint a third person as a data processor as and when required which will be updated by the company in its privacy policy.
Your Data might be controlled, shared or processed across borders with our parent entity
3. TYPES OF PERSONAL DATA WE COLLECT:
We collect and process various types of personal data, depending on your relationship with Leftfield. These may include:
Identification & Contact Data - Full name, title, email address, contact number, address
Professional Information - Job title, employer, industry, education, qualifications, employment history
Demographic & Profile Data - Age, gender, ethnic origin, nationality, sexual orientation (if required for research purposes and subject to explicit consent)
Financial Data - Bank account details, online payment identifiers (e.g., PayPal ID) – strictly for incentive disbursement
Communication Records - Emails, call logs, enquiry records, correspondence
Special Category Data (Sensitive Data) - Health data, biometric or genetic data, or political/religious beliefs, collected only where necessary and with explicit consent
Digital Identifiers & Website Data - Cookies, IP addresses, browsing data, analytics (anonymous)
Criminal Offence Data (if applying for roles): - Background check results, where permitted under law
4. PURPOSES AND LEGAL BASES FOR PROCESSING:
We process your personal data for the following lawful purposes:
PURPOSE
LEGAL BASIS
Responding to enquiries or communications
Legitimate interest
Registering you as a research participant
Legitimate interest; Consent (for sensitive data)
Making payments of incentives
Contract performance; Legal obligation
Conducting research activities
Legitimate interest
Managing employment / recruitment applications
Legitimate interest; Contract performance
Equal opportunity and diversity monitoring
Consent (explicit); Legal obligation
Website analytics and cookies
Consent (via cookie banner)
Regulatory, audit and compliance
Legal obligation; Legitimate interest
5. AUTOMATE DECISION MAKING:
Leftfield does not use automated decision-making in relation to personal data. We are sometimes required to check that potential participants meet the eligibility criteria for research studies, or to recruit an appropriately representative sample. However, these tasks are carried out by our professional colleagues, using computer systems as tools rather than as decision-makers.
6. SOURCES OF PERSONAL DATA:
We may obtain your personal data from: -
Direct interactions (emails, phone calls, form submissions)
Referrals from third-party recruiters or agencies
Clients or institutions you are affiliated with
Publicly accessible sources (e.g., LinkedIn, company websites) - Third-party analytics providers (via our website) etc.
Any other sources
7. THE DATA WE COLLECT ABOUT YOU:
Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where any identifying information has been removed, so long as the individual’s identity cannot be inferred from other information held by the data controller or available publicly.
In the United Kingdom, the processing of personal data is governed by the Data Protection Act 2018, the "UK GDPR", as defined in the Data Protection Act 2018, and other legislation relating to personal data and rights.
In the Netherlands, the processing of personal data is governed by the General Data Protection Regulation (Regulation (EU) 2016/679) (“EU GDPR”) together with the Dutch Implementation Act of the GDPR.
In India it is governed by DPDP regulations which is yet to be notified with its regulations as well as the Information Technology Act, 2000 along with industry specific laws.
The type of data that we collect depends on the relationship that we have with you.
Our research activity:
Because our services include the researching of potential participants in research projects, we may collate information about individuals using publicly available sources. These may include online sources such as LinkedIn.com or the websites of the businesses or institutions with which you are affiliated. We do this when requested to carry out a research exercise for a particular project and may also do so proactively. We may also be provided with your information by other people – for example, if they suggest to us that you might be interested in research exercises. Information collated in this way may include your name, profession, qualifications, work history and work contact details.
The legal basis for this processing is our legitimate interest in being able to provide qualitative recruitment services.
When you contact us:
If you contact us via email, phone or post, we collect relevant information you provide to us, which may include name, email address, phone number and postal address.
The legal basis for this processing is our legitimate interest in responding to your enquiry and providing a service.
If you are being considered for a research project
If you are being considered for registration as a research participant, we may ask you to provide further information. This may include further detail of your circumstances, further contact information and (if an incentive is payable) financial data such as payment card details or details of an account with an online payment system. In some cases, we may also ask if you are happy to provide demographically relevant information, which may include special category data as set out in the UK GDPR or EU GDPR or DPDP regulations. We use this type of data to ensure that we recruit a representative sample. We may hold this data in order to maintain a register of potential participants.
The legal basis for this processing is our legitimate interest in being able to provide qualitative recruitment services and to contact you about (and, where relevant, pay you for) your participation. However, the legal basis for our collection of special category data is consent – we will ask you if you are happy to provide us with this information and allow you the opportunity to decline. However, if you choose not to provide information required for screening purposes for a research study, you may not be able to proceed with the study.
You may withdraw your consent at any time in which case your special category data will be deleted. You may also ask us to remove you from our register of potential participants.
c) If you take part in a research exercise:
Leftfield’s primary business is to recruit for and help to arrange research studies such as focus groups. The study itself may not be carried out by Leftfield but for another market research agency for whom we have provided recruitment services. A briefing will be provided to you beforehand. In this case, that agency will be the controller of any personal data recorded about you during the research study. We will not provide your name, address or financial details to the agency operating the study, but they may have access to audio or video recordings of any research study session.
Please ask the agency operating the study for more information about their processing of personal data.
If you apply for a role with Leftfield, whether as an employee or contractor
In connection with your application for work with us, we will collect, store, and use the following categories of personal information about you:
i. The information you have provided to us as part of your application (such as your curriculum vitae, application form and covering letter)
ii. Any information you provide to us during an interview.
We may also collect, store, and use the following types of more sensitive personal information:
i. Information about your race or ethnicity, religious beliefs, sexual orientation, and political opinions
ii. Information about your health, including any medical condition, health, and sickness records
iii. Information about criminal convictions and offences
We may also receive information about you from any recruitment agency we may use, together with background check providers or credit reference agencies and your referees. Where we propose to use any of these sources, we will let you know. We may also gather data from publicly available sources, such as LinkedIn. We will use the personal information we collect about you to:
i. Comply with legal or regulatory requirements.
ii. Keep records related to our hiring processes.
iii. Communicate with you about the recruitment process.
iv. Carry out background and reference checks, where applicable.
v. Assess your skills, qualifications, and suitability for the role.
The legal basis for this processing is our legitimate interest in deciding whether to appoint you to a role. We also need to process your personal information to decide whether to enter into a contract of employment or a contract for services with you and, if we do, to perform that contract.
If you fail to provide information when requested, which is necessary for us to consider your application (such as evidence of qualifications or work history), we will not be able to process your application successfully. For example, if we require a credit check or references for this role and you fail to provide us with relevant details, we will not be able to take your application further.
If we collect special category data, we will use this strictly for the purpose collected. We collect information about your disability status to consider whether we need to make appropriate adjustments during the recruitment process. We will use information relating to certain protected characteristics to ensure meaningful equal opportunity monitoring and reporting. We will also process your nationality status as part of the right to work checks that we are required to carry out by law.
d) If you are appointed to a role with Leftfield:
Please see our staff handbook for more information about processing of data in connection with employment.
e) When you use our website:
Our website uses cookies stored on your browser. These cookies collect information about how you use the site, for example which pages you visit, and all user data is anonymous. They only collect data related to your use of this website. Please note that some of these cookies may be placed by third party service providers who perform a function for us. The third party service this site uses is Google Analytics. The data these services collect are anonymous. You can find out more about controlling, opting-out and deleting cookies, here
8. DISCLOSURE AND SHARING OF PERSONAL DATA:
Your personal data may be shared strictly on a need-to-know basis with:
Clients commissioning market research - Independent researchers or moderators (under confidentiality agreements)
Technology and payment providers (e.g., online form services, payment gateways)
Professional advisers and legal/regulatory authorities (where required)
Successors in case of corporate restructuring (e.g., merger/acquisition)
We ensure that third parties only process your data in accordance with our written instructions and applicable laws.
9. CROSS-BORDER TRANSFERS:
Leftfield may transfer any personal data we hold to a country outside the United Kingdom (or, in the case of Leftfield Europe B.V., outside of the European Union), provided that one of the following conditions applies:
the country to which the personal data is transferred to ensures an adequate level of protection for the data subjects' rights and freedoms;
the data subject has given his/her consent;
the transfer is necessary for one of the reasons set out in applicable law, including the performance of a contract between us and the data subject, or to protect the vital interests of the data subject;
the transfer is legally required on important public interest grounds or for the establishment, exercise or defence of legal claims; or
The transfer is authorised by data protection laws where we have taken adequate safeguards with respect to the protection of the data subjects' privacy, their fundamental rights and freedoms, and the exercise of their rights. These safeguards may include the entry into international data protection agreements (IDTAs) or the use of standard contractual clauses approved by a supervisory authority.
By way of example, Leftfield may use cloud storage and processing systems located in other jurisdictions in compliance as mentioned above.
Subject to the requirements mentioned above, personal data held by Leftfield may also be processed by staff operating outside the UK or EU who work for us or for one of our suppliers. That staff may be engaged in, among other things, the fulfilment of contracts with the data subject, the processing of payment details and the provision of support services.
10. DATA SECURITY MEASURES:
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know.
They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
11. RETENTION POLICY:
We retain personal data only for as long as reasonably necessary:-
Research participant enquiries or applications: 2 years
Study participants: 2 years post study completion
Job applicant records: 1 year if not appointed
Financial/tax records: 8 years (as per accounting law)
Publicly sourced leads: deleted after 6 months or 3 unsuccessful contact attempts –
Do-not-contact registry: retained indefinitely for suppression only
Where possible, we anonymize data for research/statistical purposes with no time limit.
12. RIGHTS OF DATA SUBJECTS/DATA PRINCIPAL:
You have the following rights under UK GDPR, EU GDPR and the Indian DPDP Act (as applicable): -
Right to Access: Obtain confirmation and a copy of your personal data.
Right to Rectification: Request correction of incomplete or inaccurate data.
Right to Erasure: Request deletion, subject to legal exceptions.
Right to Restriction: Temporarily suspend processing under certain conditions.
Right to Object: Object to processing based on legitimate interests or for direct marketing.
Right to Data Portability: Receive data in a structured, machine-readable format.
Right to Withdraw Consent: Withdraw consent where it forms the basis of processing
To exercise any of these rights, contact us at info@leftfield.co.uk.
Timeframe for Response: Within one (1) calendar month, extendable by two (2) months in complex cases.
Verification: We may request identity documents to verify the authenticity of a data subject rights request.
Fee: No fee is charged unless the request is manifestly unfounded, excessive, or repetitive.
13. COMPLAINTS AND GRIEVANCES:
If you are unsatisfied with how we handle your data, you may: -
Contact our Data Privacy Manager/Consent Manager/Data Grievance Officer at ashish@leftfield.in
Lodge a complaint with the applicable Data Protection Authority (UK ICO or Dutch DDPA)
For Indian residents: lodge a grievance with our designated Grievance Officer (to be appointed, where applicable, under DPDP Rules)
14. UPDATES TO THIS POLICY:
This Privacy Notice is reviewed annually. This version was last updated in September 2025. The latest version is always available at www.leftfield.in
We recommend you review this notice periodically for any updates.
15. GENERAL:
The company will update its privacy policy from time to time and on the basis of notification and changes in the Indian DPDP regulations for data protection.
We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
+91 927210 2546