Privacy policy

Last updated: November 2026

This policy explains how KSBR Brand Futures Limited (“KSBR”, “we”, “us”, “our”) collects, uses and protects personal information. It covers people who visit our website, contact us, work with us as clients or suppliers, and people who take part in our research.

KSBR Brand Futures Limited is registered in England and Wales (company number 05256864), with its registered office at 114–116 Fore Street, Hertford, SG14 1AJ. We are the data controller for the personal information described in this policy, except where we carry out research on behalf of a client, in which case our client may be the controller and we act as their processor. We are registered with the Information Commissioner’s Office (ICO), registration number Z1525681.

If you have any questions about this policy or how we use your information, please contact our Data Protection Officer at dpo@ksbr.co.uk, or write to: Data Protection Officer, KSBR Brand Futures Limited, The Townhouse, 114–116 Fore Street, Hertford, SG14 1AJ.

We are a strategic insight consultancy carrying out research and analysis for corporate and public organisations, charities and NGOs. We work to the MRS Code of Conduct and follow best practice set by our industry and professional bodies.

Depending on how you deal with us, we may collect:

• Your name, job title and organisation
• Contact details, such as email address, phone number and postal address
• Details of your enquiries, correspondence and any contact you have with us
• Information about your use of our website, such as pages visited and general location (see our Cookies policy)
• If you take part in our research: your views, opinions and experiences, and photographs, video or audio recordings of research sessions
• If you take part in our research: profile information used to make sure we speak to the right mix of people, such as age, household or work circumstances

Some research may involve special category information, such as political opinions, health or ethnicity. We will only collect this where it is needed for the research, we will tell you beforehand, and we will ask for your explicit consent.

We use your information to:

• Respond to enquiries and provide the services you or your organisation have asked for
• Manage our relationships with clients, suppliers and associates
• Recruit, run and analyse research, and report findings to our clients
• Keep you informed about our work, thinking and events, where you have agreed to this or where we have a legitimate interest in doing so (you can opt out at any time)
• Run, secure and improve our website
• Meet our legal, regulatory and accounting obligations

Research findings are reported to our clients in a way that does not identify individual participants, unless you have agreed otherwise (for example, where clients view sessions or recordings).

Under UK data protection law we must have a lawful basis for using your personal information. We rely on:

• Consent: for taking part in research, for any special category information, and for certain marketing. You can withdraw your consent at any time.
• Contract: where we need your information to provide services to you or your organisation, or to work with you as a supplier.
• Legitimate interests: for running and developing our business, keeping in touch with clients and contacts, and improving our website, provided this does not override your rights and interests.
• Legal obligation: where we must keep or share information to comply with the law.

We do not sell your personal information. We may share it with:

• Our clients, where you take part in research we are carrying out for them, in line with what we told you when you agreed to take part
• Trusted suppliers who help us run our business, such as IT, cloud storage, research recruitment, transcription and video editing providers, who may only use it on our instructions
• Professional advisers, such as accountants and lawyers
• Regulators, law enforcement or other authorities, where we are legally required to

We aim to store and process personal information in the UK. Where any of our suppliers process information outside the UK, we make sure appropriate safeguards are in place, such as UK adequacy regulations or the UK International Data Transfer Agreement.

We keep personal information only for as long as we need it for the purposes described in this policy, including any legal, accounting or reporting requirements. Research recordings and personal details of research participants are kept only for as long as needed to complete the project and meet our obligations to our clients, and are then securely deleted.

We use appropriate technical and organisational measures to protect your personal information against loss, misuse and unauthorised access, including access controls and secure storage. No method of transmission over the internet or electronic storage is completely secure, but we work hard to keep your information safe.

Under UK data protection law you have the right to:

• Access the personal information we hold about you
• Ask us to correct information that is inaccurate or incomplete
• Ask us to delete your information
• Ask us to restrict how we use your information
• Object to our use of your information, including for direct marketing
• Ask for your information to be transferred to another organisation (data portability)
• Withdraw your consent at any time, where we rely on consent

To exercise any of these rights, email dpo@ksbr.co.uk. We will respond within one month. There is normally no charge.

If you receive emails from us about our work and thinking, you can unsubscribe at any time using the link in the email or by emailing dpo@ksbr.co.uk.

Our website contains links to other websites. We are not responsible for their content or privacy practices, so please read their privacy policies.

If you are unhappy with how we have handled your personal information, please contact us first at dpo@ksbr.co.uk so we can try to put things right. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113.

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated at the top.

We comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR), as amended from time to time.