Last reviewed: September 2026
We are committed to being open and transparent about how we collect and use your personal information. This notice explains how Goodform uses personal information in connection with the Goodform Insights platform.
This Privacy Notice applies to authorised users of the Goodform Insights platform, typically employees or representatives of our client organisations who have been given access to the platform.
Goodform Ltd is the data controller for the personal information about you described in this Privacy Notice, including information used to create and manage your account, administer and secure the platform, understand how the platform is used and provide support.
Where Goodform processes personal data through the Goodform Insights platform on behalf of a client organisation, the client organisation will ordinarily determine the purposes for which that information is processed and Goodform will process that information on its behalf in accordance with the relevant agreement.
For privacy information relating to Goodform’s other activities, such as our website, please see our Privacy Policy.
You can contact us by email or post.
Goodform Ltd
1 Mill Street
Leamington Spa
CV31 1ES
Email: hello@goodformgroup.co.uk
Our Data Protection Officer is
Data Protection People Ltd
Email: dpo@goodformgroup.co.uk
Please state “Data Protection Officer” in the subject line.
We may collect and process the following personal information about users of the Goodform Insights platform:
We receive personal information about you in different ways:
We use your personal information to:
Where you are the contracting party, we rely on the performance of our contract with you where the processing is necessary to provide and manage the Goodform Insights services.
Where we provide services to your organisation, we rely on our legitimate interests in providing, administering and securing the Goodform Insights platform, managing our customer relationships and improving our services.
We also rely on our legitimate interests to understand how the Goodform Insights platform is used so that we can maintain and improve the platform.
Where processing is necessary to comply with a legal obligation, we rely on our legal obligations. Where necessary to deal with complaints or establish, exercise or defend legal claims, we may rely on our legitimate interests in protecting our business and legal rights.
Where you have provided your consent, we may use your contact information to send you marketing emails about Goodform products and services, updates and relevant industry news or events. You can withdraw your consent at any time by using the unsubscribe link in our emails or by contacting us.
We may share your personal information with:
AWS Cognito is used to manage user accounts and authentication. In relation to this service, AWS acts as a data controller for the authentication information it processes.
We also use AWS to host the Goodform Insights platform in its London region and AWS QuickSight to provide analytics and visualisation functionality. In relation to these services, AWS processes personal information on our behalf as a data processor.
Personal information processed through the Goodform Insights platform is stored and processed in the United Kingdom using AWS's London region.
If we transfer personal information outside the United Kingdom in the future, we will ensure that the transfer complies with applicable UK data protection law and that appropriate safeguards are in place, such as an adequacy decision or appropriate contractual safeguards.
Your personal information is securely stored.
We keep your name, contact details and correspondence for the duration of our contract with your organisation and, where necessary, for up to 7 years afterwards to deal with contractual, legal or regulatory matters. We will then securely delete this information in accordance with our data deletion procedures.
We retain information about your activity on the Goodform Insights platform for 6 months, after which it is securely deleted.
We retain account and authentication information for the duration of your account and for up to 90 days after your account is closed, after which it is securely deleted.
We do not use your personal information to make decisions about you based solely on automated processing, including profiling, that produce legal or similarly significant effects.
Under data protection law, you have rights including, subject to any exemptions or exceptions that may apply:
Right of access – you can ask us for a copy of the personal information we hold about you and information about how we use it.
Right to rectification – you can ask us to correct personal information you believe is inaccurate or complete information you believe is incomplete.
Right to erasure – in certain circumstances, you can ask us to delete your personal information.
Right to restriction of processing – in certain circumstances, you can ask us to restrict how we use your personal information.
Right to object – where we rely on legitimate interests as our lawful basis, you can object to our processing of your personal information. In some circumstances, we may continue processing where we can demonstrate compelling legitimate grounds.
Right to data portability – in certain circumstances, you can ask us to provide personal information you have given us in a structured, commonly used and machine-readable format, or to transfer it to another organisation.
Right to withdraw consent – where we rely on your consent, you can withdraw it at any time. This will not affect the lawfulness of processing carried out before you withdrew your consent.
You will not usually have to pay a fee to exercise your rights, and we will respond without undue delay and normally within one month.
To exercise any of these rights, please contact our Data Protection Officer at dpo@goodformgroup.co.uk.
If you have any concerns about how we use your personal information, please contact us in the first instance so that we can try to resolve the issue.
You can contact us at hello@goodformgroup.co.uk or contact our Data Protection Officer at dpo@goodformgroup.co.uk.
You also have the right to complain to the Information Commissioner’s Office (ICO) if you are unhappy with how we have used your personal information.
Information Commission’s Office (ICO)
ICO Head Office
4th Floor, No.3 Circle Square
5 Hawkshaw Street
Manchester
M1 7BL
Helpline: 0303 123 1113
Website: www.ico.org.uk
