Ginger Research Limited Privacy Policy

Effective Date: 22 May 2026

Our Contact Details

The Type of Personal Information We Collect

Our website collects and processes two distinct categories of personal information:

1. Automated Server Logs

Our web server infrastructure, hosted on an OVHcloud Virtual Private Server and managed via cPanel/WHM, automatically logs standard technical data. This includes your Internet Protocol (IP) address, requested pages/files, timestamps, browser and user agent details, HTTP status codes, and related technical metrics.

2. Behavioural Web Analytics

When you interact with our website, Microsoft Clarity captures technical and behavioural metrics, including:

  • User Interactions: Mouse movements, clicks, scrolls, hover behaviour, and user navigation paths.
  • Session Details: Specific pages visited, time spent on individual pages, and entry/exit pages.
  • Device and Browser Data: Device type, operating system, screen resolution, and browser variant.
  • Anonymised Location Data: Approximate geographic location derived from anonymised IP addresses.
  • Cookies and Trackers: Unique identifiers stored via cookies to recognise returning users across different sessions.

Why We Collect It, Lawful Bases, and Retention

1. Technical Server Logs

Purpose of Processing: This data is processed strictly for legitimate operational, maintenance, and website security reasons. This includes serving the website files, diagnosing server errors, monitoring network performance, detecting suspicious behaviour, and investigating security incidents. We do not use this data to identify individual visitors.

Our Lawful Basis: Our lawful basis for processing this information is Legitimate Interests under Article 6(1)(f) of the UK GDPR. It is within our legitimate business interests to process limited technical data to maintain a secure, stable, and functioning website.

Data Retention: These server log files are automatically overwritten or permanently deleted by the system after 60 days, unless they are actively required to investigate an ongoing security breach.

Storage Location: Your server log data is securely stored within the UK/EU on our private OVHcloud server infrastructure.

2. Microsoft Clarity Analytics

Purpose of Processing: We use Microsoft Clarity to analyse user engagement, optimise our website platform, and improve our digital layout. This includes generating visual heatmaps of link engagement, reviewing session playbacks to identify layout friction points, and tracking broken links.

Third-Party Processing: As per the official Microsoft Privacy Statement, Microsoft processes this data as a joint controller to improve its own consumer products, optimise machine learning models, and support its advertising networks. This is the sole third-party data transfer operational on this website.

Our Lawful Basis: Our lawful basis for processing this information is your explicit Consent under Article 6(1)(a) of the UK GDPR. The Microsoft Clarity script will not execute or place tracking cookies unless you explicitly opt in via our website’s cookie settings banner.

Data Retention: Data is automatically deleted on a rolling schedule based on the type of analytics record:

  • Session Playback Data: Deleted automatically after 30 days.
  • Favourited or Labelled Sessions: Retained for up to 13 months for long-term troubleshooting.
  • Aggregated Heatmap and Click Data: Stored for 13 months before permanent deletion.

Storage Location: Microsoft Clarity analytics data is securely processed and stored in protected Microsoft data centres distributed across the United States and Europe.

Your Data Protection Rights

Under data protection law, you have statutory rights regarding your information. The specific rights available to you depend directly on our legal reason for processing your data:

  • Your Right of Access: You have the right to ask us for copies of your personal information, also known as a Subject Access Request.
  • Your Right to Rectification: You have the right to ask us to rectify personal information you think is inaccurate, or complete information you think is incomplete.
  • Your Right to Erasure: You have the right to ask us to erase your personal information in certain circumstances.
  • Your Right to Restriction of Processing: You have the right to ask us to restrict the processing of your personal information in certain circumstances.
  • Your Right to Object to Processing: You have the right to object to the processing of your personal data when we rely on Legitimate Interests, such as our server logs.
  • Your Right to Withdraw Consent: You have the right to withdraw your consent for web analytics at any time. You can do this instantly by updating your choices via our website cookie settings banner.

You are never required to pay a charge for exercising your data rights. If you make a formal request, we have one month to respond to you. Please contact us at amy@gingerresearch.co.uk to initiate a request.

How to Complain

If you have any concerns about our use of your personal information, you can file an internal complaint directly to us at:

Ginger Research Limited
c/o Azets
5 Yeomans Court
Ware Road
Hertford
SG13 7HJ

If you remain unhappy with how we have managed or processed your data, you have the legal right to escalate the matter to the UK regulatory authority, the Information Commissioner’s Office (ICO):

  • Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
  • Helpline Number: 0303 123 1113
  • Website: ico.org.uk