Data Protection & Privacy Policy

Executive Summary

SmartView Market Research Services (“SVMRS”) is committed to protecting the privacy and security of the personal information we collect from individuals who participate in our market research activities (“Participants”).

Collectively, “we”, “our”, or “us” refer to SVMRS. This Data Protection and Privacy Policy explains how we collect, use, store, and protect personal information, as well as the rights participants have regarding their data. We comply with the Digital Personal Data Protection Act, 2023 (India), the Information Technology Act, 2000, and global data protection regulations such as the GDPR (Europe) and CCPA (California).

This Policy applies to all employees, contractors, vendors, and third parties who collect, access, or process personal data on behalf of SmartView Market Research Services.

SVMRS acts as:

• Data Fiduciary (Controller): When determining the purpose and means of processing personal data.
• Data Processor: When processing data on behalf of clients or other entities.

All associated parties are required to adhere to this Policy and applicable privacy laws.

The type of personal data we collect may vary depending on the research project and may include, but is not limited to:

• Demographic information: Age, gender, education, income, occupation, etc.
• Contact information: Name, email address, phone number, mailing address, etc.
• Product and service preferences: Opinions, attitudes, and experiences related to specific products or services.
• Behavioral data: Website browsing activity, online purchases, mobile app usage (if applicable).
• Survey responses: Answers provided in surveys or interviews.
• Device and technical information: IP address, device type, browser type, operating system, and related identifiers.

We obtain data directly from participants or through consented sources such as research partners, survey platforms, or third-party panels.

We use participants’ personal information for the following purposes:

1. Conducting market research – To understand consumer preferences, attitudes, and behaviors.
2. Developing and improving products and services – To support clients in designing better solutions.
3. Providing insights to clients – Sharing aggregated and anonymized research findings.
4. Communicating with participants – To send surveys, study invitations, and updates.
5. Compliance and legal obligations – To meet statutory, regulatory, or contractual requirements.

We will never sell participants’ personal information for marketing or unrelated commercial use.

SVMRS collects and processes personal data only with the participant’s explicit, informed, and specific consent. Participants may withdraw consent at any time by contacting us at panelsupport@smartviewresearch.com.

Upon withdrawal, SVMRS will delete or anonymize the participant’s data unless retention is required by law or for legitimate business purposes.

SVMRS does not share participants’ personal information except in the following circumstances:

• With consent: When the participant has provided explicit consent.
• With service providers: Trusted vendors assisting us in data analysis, survey management, hosting, or communications who are contractually obligated to maintain confidentiality.
• For legal reasons: When required to comply with a court order, legal process, or regulatory requirement.
• During business transactions: In the event of a merger, acquisition, or sale of assets, data may be transferred to the successor entity under strict confidentiality safeguards.

All transfers comply with applicable data protection laws and contractual protections.

Some analytical processes may use automated tools or algorithms to identify market trends or insights. These automated processes do not make decisions that have legal or significant personal effects. Human oversight is maintained at all stages of analysis to ensure fairness and transparency.

We implement appropriate technical and organizational safeguards to protect personal information from unauthorized access, alteration, or loss. These include:

• Encryption of data in transit and at rest.
• Access control restricting data to authorized personnel only.
• Regular system audits, penetration testing, and vulnerability assessments.
• Secure cloud storage with redundancy and backup protocols.

Data Retention: SVMRS retains personal data for a maximum of 24 months after completion of a research project, unless a longer retention period is required by law or client agreement. Thereafter, data is permanently deleted or anonymized.

Participants’ personal data may be processed and stored outside their home jurisdiction. Cross-border data transfers are made only to countries:

• Approved by the Government of India under the DPDPA, 2023, or
• Covered by binding contractual clauses ensuring equivalent protection of personal data.

We ensure that any overseas processing adheres to privacy standards substantially similar to those applicable in India.

We comply with the Information Technology Act, 2000, SPDI Rules, 2011, the Digital Personal Data Protection Act, 2023 (DPDPA), and relevant international regulations such as GDPR and CCPA. Participants have the following rights concerning their personal information:

• Access: Request access to personal data we hold.
• Correction: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of personal data, subject to legal or contractual retention requirements.
• Restriction: Request limitation of data processing in certain circumstances.
• Portability: Request transfer of their data in a structured, machine-readable format.
• Objection: Object to certain types of data processing, such as profiling or direct communication.

To exercise these rights, participants may email panelsupport@smartviewresearch.com and contact the Data Protection Officer (DPO).

In accordance with the Digital Personal Data Protection Act, 2023, SVMRS has established a Grievance Redressal Mechanism. Participants may raise any concerns or grievances related to data processing by contacting our Grievance Officer. All grievances will be acknowledged and resolved within prescribed legal timelines.

We do not knowingly collect personal information from children under the age of 13. If a parent or guardian believes that a child has shared data with us, they may contact panelsupport@smartviewresearch.com, and we will promptly delete such information.

Data Protection Officer (DPO):
SmartView Market Research Services
Email: panelsupport@smartviewresearch.com
Alternate Contact: contact@smartviewresearch.com

The DPO oversees compliance with data protection laws and serves as the contact point for participants and regulatory authorities.

We may update this Policy periodically to reflect legal, operational, or technological changes. Significant updates will be announced on our website and communicated to registered participants at least seven (7) days before the new version takes effect.

Last Updated: 5th November 2025