This notice explains how we process personal information given to us as part of Simpriva's discovery research. It is a draft template — items in brackets must be confirmed against the actual controller, form provider, storage and retention arrangements before publication.
This research is carried out by Simpriva. If you have any questions about this research or how we process your personal information, please contact us via our contact page
This notice covers personal information you give us when registering interest in, or taking part in, Simpriva's product discovery research — including through the Discovery form and any related conversation.
Your name, work email address, job role, organisation and organisation type, the privacy area you are involved in, your stated workflow challenge, your preferred way to take part, and any notes from a discovery conversation.
To arrange and run discovery conversations, understand current DPIA/RoPA/privacy-risk processes, and inform Simpriva's product development. Where you opt in separately, to send you future Simpriva updates.
We rely on our legitimate interests under Article 6(1)(f) of the UK GDPR to arrange, conduct, administer and analyse our discovery and user research, including any necessary follow-up relating to that research.
Our legitimate interest is to understand users’ needs and experiences, test whether Simpriva addresses genuine operational problems, and use the findings to develop and improve our product and service.
We only use personal information where it is necessary and proportionate for these purposes. We consider the nature of the information, what participants would reasonably expect, and the potential impact on their rights and freedoms.
Taking part in the research is voluntary. You may decline to answer any question or end the session at any time. You also have the right to object to our use of your personal information. Where your contribution remains identifiable and has not already been anonymised or combined with other research findings, you may ask us to stop using it or delete it.
We rely on your consent to make and transcribe an audio or video recording of the session. Recording is optional. If you do not consent to recording, we can take written notes instead. You may withdraw your recording consent while the recording or transcript remains identifiable.
We rely on your separate consent to send you product or marketing updates. Agreeing to receive these updates is optional, is not a condition of taking part in the research, and you may withdraw your consent at any time.
Information is used internally by the Simpriva founding team. We do not sell your information. Responses are collected using Microsoft Forms and may be stored within Microsoft 365. We may also use trusted service providers to support data storage and business operations.
We intend for all research responses to be stored and processed within the UK. We do not intentionally transfer personal information outside the UK.
We keep audio or video recordings only for as long as needed to prepare and check our research notes or transcript. Recordings will normally be deleted sooner and will not be retained for more than three months after the interview.
We keep identifiable interview notes, transcripts and participant contact information for up to six months after the relevant discovery phase has ended. We will then delete the information or anonymise it so that the participant is no longer identifiable.
We may retain genuinely anonymised and aggregated research findings for as long as they remain useful for developing, evaluating and improving Simpriva.
Where necessary, we may retain a limited record of participation, permissions and withdrawal requests for up to 12 months after the identifiable research material has been deleted, for accountability and audit purposes.
Under UK GDPR you have the right to access, rectify, erase, restrict and object to processing of your personal data, and to data portability. Contact us using the details above to exercise these rights.
You can withdraw from the discovery research at any time by using our contact page. Withdrawing does not affect any other relationship with Simpriva.
If you have a concern about how we handle your information, please contact us first. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.
Use our contact page.
We may update this notice as the discovery process develops. The version and date above will be updated when we do.
29/07/2026