At IndexLab London Ltd trading as Evident Insights (“Evident”, “we”), we take the privacy of our users and customers very seriously. We understand that your personal data is important and we are committed to protecting it in accordance with all applicable privacy laws and regulations, including the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), the Personal Information Protection and Electronic Documents Act (PIPEDA) of Canada and the New York State Department of Financial Services (NYDFS) Cybersecurity Regulation.
The individuals from which we may gather and use data can include:
We collect various types of personal data from our users and customers, including:
We may collect, use, store and transfer different kinds of personal data about you. We collect personal data from you directly when you provide it to us, such as when you create an account, fill out a form, or make a purchase on our website.
We may also collect personal data from third parties, such as ad networks or analytics providers, through the use of tracking technologies like cookies.
We use the personal data that we collect from you for a variety of purposes, including:
There are a number of justifiable reasons under applicable data protection legislation that allow collection and processing of personal data. The main avenues we rely on are:
We use several types of cookies on our website, including:
You can manage your cookie preferences by adjusting the settings on your browser or device. Please note that disabling certain types of cookies may affect the functionality of our website.
You will receive marketing and new content communications from us if you have created an account and chosen to opt into receiving those communications. From time to time we may make suggestions and recommendations to you about goods or services that may be of interest to you.
We will only use your personal data when the law allows us to.
Set out below is a table containing the different types of personal data we collect and the lawful basis for processing that data. Examples provided in the table below are indicative in nature and the purposes for which we use your data may be broader than described but we will never process your data without a legal basis for doing so and it is for a related purpose.
Type of data
Lawful basis for processing data
When a user opts-in to marketing communications or downloads our content
Marketing and Communications Data
We need to process this data so that we can inform users about product developments and company news.
When a user contacts us directly
Marketing and Communications Data
We need to process this data based on our legitimate interest.
When a user submits payment information
We need to process this data because you are a customer of our services.
We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.
We also collect, use and share aggregated data such as our data that underlies the Evident AI Index and other products. Aggregated data could be derived from your personal data but is not considered personal data in law as this data will not directly or indirectly reveal your identity.
We may also aggregate data to enable research or analysis so that we can better understand and serve you and others. For example, we may conduct research on your demographics and usage. Although this aggregated data may be based in part on personal data, it does not identify you personally. We may share this type of anonymous data with others, including service providers, our affiliates, agents and current and prospective business partners.
We do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data). Nor do we collect any information about criminal convictions and offences.
You can ask us to stop sending you marketing messages at any time by contacting us. Where you opt out of receiving these marketing messages, we will continue to retain other personal data provided to us as a result of interactions with us not related to your marketing preferences.
We may share your personal data with third parties, such as ad networks or analytics providers, for the purpose of displaying targeted ads or analysing your behavior. We take steps to protect the personal data that we share with these third parties, such as requiring them to sign confidentiality agreements or limiting the data that we share.
In addition, we may be required by law to disclose your personal data to the relevant authorities if required by a subpoena, court order, or other legal process. In the event that we exit the market, go through a merger, or are acquired by another company, we will ensure that any personal data that is transferred will be done so in accordance with the applicable laws and regulations, and with appropriate safeguards in place to protect your personal data.
We store your personal data on secure servers and take other measures to protect it from unauthorised access or misuse. We have implemented appropriate technical and organisational measures to protect your personal data, including encryption and access controls.
Any personal data collected by us is only accessible by a limited number of employees who have special access rights to such systems and are bound by obligations of confidentiality.
However, no transmission of data over the internet is guaranteed to be completely secure. It may be possible for third parties not under the control of Evident to intercept or access transmissions or private communications unlawfully. While we strive to protect your Personal Data, we cannot ensure or warrant the security of any Personal Data you transmit to us. Any such transmission is done at your own risk. If you believe that your interaction with us is no longer secure, please contact us.
You have certain legal rights in relation to your personal data, including the right to:
You can exercise these rights by contacting us at [email protected]. We will respond to your request within a reasonable time period and in accordance with applicable laws.
We understand the importance of proper data management and retention. We take steps to only collect and retain the personal data that is necessary for the purposes for which it was collected. The retention period for personal data may vary depending on the reason for which it was collected and the legal or regulatory requirements applicable to the data.
We have implemented appropriate technical and organisational measures to ensure the security and integrity of personal data during the retention period. We also regularly review and assess the need to continue to retain personal data, and will delete or anonymise personal data that is no longer required to be retained.
You have the right to request deletion of your personal data. We will fulfill such requests, unless we are required by law or regulations to retain the data, or if the data is needed to resolve disputes or enforce our agreements. However, if your request is clearly unfounded, we could refuse to comply with your request.
You must not use Evident unless you are aged 18 or older. If you are under 18 and you access Evident by lying about your age, you must immediately stop using Evident. This website is not intended for children and we do not knowingly collect data relating to children.
Our staff are not authorised to contract on behalf of Evident, waive rights or make representations (whether contractual or otherwise). If anything contained in an email from an Evident or @indexlab.io address contradicts anything in this policy, our terms or any official public announcement on our website, or is inconsistent with or amounts to a waiver of any Evident rights, the policy and other website content will take precedence. The only exception to this is genuine correspondence expressed to be from a director of Evident.