Contact Sales
Contact Sales

2026 © BehindLogin. All rights reserved.

Legal

User Terms

Contributor

Privacy Policy

Last revised 1 September 2026

1. WHO WE ARE

  1. Behind Login Limited (“BehindLogin”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal data.
  2. This Privacy Policy explains how we collect and use personal data when you:
    • visit or interact with our website;
    • contact us or receive communications from us;
    • purchase or use our products and services;
    • take part in BehindLogin research or join our contributor panel; or
    • otherwise interact with BehindLogin.
  3. Behind Login Limited is the controller responsible for the personal data described in this policy.
    • Name: Behind Login Limited
    • Company number: 13451002
    • Registered office: Rodney House, Clifton Down Road, Clifton, Bristol, England, BS8 4AL
    • Our Data Privacy Manager is Oliver Lane and can be contacted at oliver@behindlogin.com.

2. PERSONAL DATA WE COLLECT

  1. Depending on how you interact with us, we may collect:
    1. Identity and Contact Data
      Your name, job title, company, email address, telephone number and other contact details.
    2. Customer and Transaction Data
      Information relating to products or services purchased from us, invoices, payments and our business relationship with you.
    3. Research and Contributor Data
      Information provided when applying for or participating in research, including eligibility information, research responses, interview or survey responses, audio and video recordings, screen recordings, screenshots and other information voluntarily shared during a research session.
    4. Technical and Usage Data
      Information about how you use our website and services, including IP address, browser, device, operating system, website activity and similar technical information.
    5. Marketing and Communications Data
      Your preferences for receiving marketing and other communications from us and information about your interactions with those communications.       We may also create aggregated or anonymised information from research and other data. Information that has been anonymised so that an individual can no longer be identified is not personal data.
    6. Special category data
      We do not intentionally seek special category personal data or criminal offence data as part of our standard research. Where information of this nature is incidentally visible during a screen-sharing or research session, we take reasonable steps to minimise, anonymise or redact it. If a specific research project requires us to intentionally collect special category data, we will explain this before collection and identify an appropriate lawful basis and additional condition for processing.

3. HOW WE COLLECT PERSONAL DATA

  1. We collect personal data:
    • directly from you, including when you contact us, purchase our services, subscribe to communications or participate in research;
    • through research and recruitment platforms where you apply or agree to participate in BehindLogin research;
    • through our website and technology, including cookies and analytics tools;
    • from publicly available and professional sources, such as company websites, Companies House and professional networks including LinkedIn; and
    • from service providers, such as payment, communications and technology providers where necessary to operate our business.
  2. BehindLogin independently recruits and manages its research contributors. We determine how our research is conducted, analysed and used and act as controller for personal data collected for those purposes.

4. HOW AND WHY WE USE PERSONAL DATA

  1. We only process personal data where we have a lawful basis to do so.
Purpose Main lawful basis
Responding to enquiries and managing prospective customer relationships Legitimate interests in developing and operating our business
Providing products and services and managing customer relationships Performance of a contract and legitimate interests
Invoicing, payments, accounting and record keeping Performance of a contract and legal obligation
Recruiting and managing research contributors Performance of a contract and legitimate interests
Arranging research sessions and making contributor payments Performance of a contract
Conducting, recording and analysing independent research Legitimate interests in conducting and evidencing our research
Creating research, analysis, benchmarks, journey maps and other research outputs Legitimate interests in producing independent commercial research
Operating, securing and improving our website and services Legitimate interests and, where required, consent
Sending relevant marketing communications Legitimate interests or consent where required by law
Establishing, exercising or defending legal rights and complying with regulatory requirements Legal obligation and legitimate interests
    • Where we rely on legitimate interests, we consider whether our interests are proportionate and whether your rights and interests override them.
    • We do not use personal data for purposes that are incompatible with those described above unless permitted or required by law.

5. RESEARCH PARTICIPANTS AND CONTRIBUTORS

  1. BehindLogin conducts independent research into digital products, services and customer experiences.
  2. Research may involve interviews, surveys, screen-sharing, audio or video recording, screen recording and the capture of screenshots or excerpts from products or services that contributors are authorised to access.
  3. We use research data to:
    • conduct and analyse research;
    • evidence research findings;
    • compare digital products and experiences;
    • create reports, benchmarks, journey maps and other research deliverables; and
    • improve our research methodology and services.
  4. We take reasonable steps to minimise or redact participant personal data before research materials are included in client-facing outputs.
  5. We do not provide clients with participant contact details.
  6. If a particular study requires identifiable participant material to be shared with a client or other third party, we will explain this to the participant before the relevant processing takes place.
  7. Participation is also subject to our Contributor Agreement.

6. MARKETING

  1. We may use your Identity, Contact, Customer and Marketing Data to send information about BehindLogin products, research, events and services that we believe may be relevant to you.
  2. We will obtain consent where required by applicable electronic marketing laws.
  3. You can opt out of marketing communications at any time by:
    • using the unsubscribe link within a marketing email; or
    • contacting us at hello@behindlogin.com.
  4. Opting out of marketing does not prevent us from sending service, contractual or administrative communications where required.
  5. We may retain a minimal suppression record to ensure that we respect an opt-out request.

7. COOKIES

  1. We use cookies and similar technologies to operate our website, understand how it is used and improve our services.
  2. Where consent is required by law, we will obtain it before placing relevant cookies on your device.
  3. Further information about the cookies we use and how you can manage your preferences is available in our Cookie Declaration.

8. WHO WE SHARE PERSONAL DATA WITH

  1. We may share personal data where necessary with:
    • IT, hosting, cloud storage and software providers;
    • website, analytics and communications providers;
    • research and recruitment platforms;
    • video conferencing and research technology providers
    • payment and banking providers;
    • professional advisers including lawyers, accountants, auditors and insurers;
    • regulators, government authorities or law enforcement bodies where required; and
    • a purchaser, investor or successor organisation in connection with a genuine sale, investment, restructuring or transfer of our business.
  2. Where service providers process personal data on our behalf, we require appropriate data protection and confidentiality obligations.
  3. Clients may receive anonymised or redacted research materials and outputs as described in this policy. We do not routinely disclose research contributors’ personal contact details to clients.
  4. We do not sell participant personal data.

9. INTERNATIONAL TRANSFERS

  1. Some of our technology and service providers may process personal data outside the UK.
  2. Where personal data is transferred internationally, we ensure that the transfer is permitted under applicable UK data protection law. This may include relying on UK adequacy regulations or appropriate contractual and organisational safeguards.
  3. You may contact us if you would like further information about the safeguards used for international transfers.

10. SECURITY

  1. We use appropriate technical and organisational measures designed to protect personal data against accidental or unlawful loss, misuse, alteration, disclosure or access.
  2. Access to personal data is limited to employees, contractors and service providers who require it for legitimate business purposes and who are subject to appropriate confidentiality obligations.
  3. We maintain procedures for responding to suspected personal data breaches and will notify affected individuals and the relevant regulator where required by law.

11. HOW LONG WE KEEP PERSONAL DATA

  1. We keep personal data only for as long as reasonably necessary for the purposes for which it was collected, taking into account legal, regulatory, tax, accounting and contractual requirements.
  2. In particular:
    • Customer and transaction records may normally be retained for up to six years after the end of the relevant relationship where required for tax, accounting or legal purposes.
    • Research participant and contributor information is retained for as long as necessary to administer participation, payments and our research relationship.
    • Raw research recordings and identifiable research materials are retained only for as long as reasonably necessary to conduct, analyse, validate and evidence the relevant research, after which they are deleted or anonymised where appropriate.
    • Marketing information is retained while we have a legitimate reason to communicate with you, subject to your right to opt out.
    • Legal and complaint records may be retained for as long as reasonably necessary to establish, exercise or defend legal rights.
  3. We may retain anonymised research and statistical information indefinitely where it no longer identifies an individual.

12. YOUR RIGHTS

  1. Depending on the circumstances and the lawful basis we rely on, you may have the right to:
    • request access to your personal data;
    • request correction of inaccurate or incomplete data;
    • request deletion of your personal data;
    • request restriction of processing;
    • object to processing;
    • request portability of certain personal data; and
    • withdraw consent where processing is based on consent.
  2. These rights are not absolute and exemptions may apply under data protection law.

Your right to object

  1. You have the right to object at any time to the use of your personal data for direct marketing.
  2. Where we rely on legitimate interests for other processing, you may also object and we will consider whether we have compelling legitimate grounds to continue.
  3. To exercise your rights, contact oliver@behindlogin.com.
  4. We may need to request information to verify your identity before responding. We will respond within the timescales required by applicable data protection law.

13. DATA PROTECTION COMPLAINTS

  1. If you believe we have not handled your personal data correctly, you can make a data protection complaint directly to us by contacting:
    • Oliver Lane, Data Privacy Manager
    • oliver@behindlogin.com
  2. We will:
    • acknowledge your complaint within 30 days of receiving it;
    • take appropriate steps to investigate it without undue delay;
    • keep you informed about the progress of our investigation; and
    • tell you the outcome.
  3. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK regulator for data protection and information rights.
  4. We would welcome the opportunity to address your concern directly before you approach the ICO, but you are not required to do so.

14. AUTOMATED DECISION-MAKING

  1. We do not carry out solely automated decision-making using your personal data that produces legal or similarly significant effects on you.

15. THIRD-PARTY WEBSITES

  1. Our website may contain links to third-party websites, platforms or services.
  2. We do not control how those third parties process personal data and this Privacy Policy does not apply to their activities. We recommend reviewing their privacy information before providing personal data to them.

16. CHANGES TO THIS PRIVACY POLICY

  1. We keep this Privacy Policy under review and may update it to reflect changes to our business, research activities or applicable law.
  2. The date at the top of this page shows when it was last revised.
  3. Where a change materially affects how we use personal data, we will take reasonable steps to bring the change to the attention of affected individuals before the new use begins where required by law.

17. CONTACT US

  1. For questions about this Privacy Policy, your personal data or your data protection rights, please contact:

Oliver Lane

Data Privacy Manager
Behind Login Limited
Rodney House
Clifton Down Road
Clifton
Bristol
BS8 4AL

Email: oliver@behindlogin.com