Privacy Policy

Effective Date: [2025/05/15]

At FOYA MARKET RESEARCH LIMITED ("Company"), we are committed to protecting your personal data and ensuring your privacy.

1. Introduction At FOYA MARKET RESEARCH LIMITED (Company), we are committed to protecting your personal data and ensuring your privacy. As a United Kingdom–based company, we process and safeguard your information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This Privacy Policy explains how we collect, use, store, and protect your data when you access our website and use our online market research services. Please read this document carefully to understand our practices regarding your personal data.

2. Information We Collect 2.1 Personal Data We may collect personal data directly from you when you interact with our Services, for example, when you: • Register for newsletters or accounts, • Participate in surveys or research studies, • Contact us for support or inquiries. Types of personal data we may collect include your name, email address, telephone number, postal address, and any other information you voluntarily provide. 2.2 Non-Personal Data We also gather non-personal data automatically through cookies and similar technologies. This may include: • Your IP address, • Browser type and version, • Device information, • Usage data (e.g., pages visited, time spent on the site). This information helps us to analyze trends, administer the website, and improve our services.

3. How We Use Your Information We use your data for purposes including, but not limited to: • Service Delivery: To provide, operate, and enhance our market research services. • Communication: To send you newsletters, respond to inquiries, and notify you about survey opportunities and updates. • Analysis: To understand user behavior on our website and improve our digital offerings. • Legal Compliance: To ensure compliance with applicable laws and protect our rights or those of others. • Legitimate Interests: To advance our business interests in a manner that does not override your rights and freedoms.

4. Lawful Basis for Processing We process your personal data only on a lawful basis as provided under the UK GDPR. These lawful bases include: • Consent: Where you have explicitly consented to the processing of your data for specific purposes. • Contract: When processing is necessary for the performance of a contract with you. • Legal Obligation: Where processing is required by law. • Legitimate Interests: When necessary for our legitimate business interests, provided these do not override your fundamental rights and freedoms. For transparency and to meet our obligations, we detail these bases as part of our data collection processes. 2

5. Disclosure of Your Information 5.1 Third-Party Service Providers To deliver our services effectively, we may share your personal data with trusted third-party service providers who perform functions on our behalf. Such providers include: • Data processing partners, • Email service providers, • IT and analytics service vendors. These third parties are contractually obligated to ensure the confidentiality and security of your data and to process it in accordance with our instructions and the applicable data protection laws. 5.2 Legal Requirements and Protection We may disclose your personal data if required to do so by law, regulation, or a valid legal request (for example, by a court or government authority). Such disclosures are subject to strict limitations and will always follow the minimum necessary requirements. 5.3 International Transfers Where personal data is transferred outside the United Kingdom, we ensure that it is protected in accordance with UK data protection laws. Appropriate safeguards—such as adequacy decisions or standard contractual clauses—will be applied to secure your data during such transfers.

6. Data Retention We will retain your personal data only as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws and regulations. Once your data is no longer needed for the stated purposes, we will securely delete or anonymize it.

7. Data Security We take the security of your personal data very seriously and implement a range of administrative, technical, and physical measures to guard against unauthorized access, alteration, disclosure, or destruction. Although we strive to protect your information, no security system is completely infallible, and we cannot guarantee absolute security.

8. Your Rights Under UK Data Protection Law Under the UK GDPR, you have the following rights regarding your personal data: • Right to be Informed: About how your data is collected and used. • Right of Access: To request and receive a copy of your personal data. • Right to Rectification: To have inaccurate or incomplete data corrected. • Right to Erasure ("Right to be Forgotten"): Subject to certain conditions. • Right to Restrict Processing: In certain circumstances. • Right to Data Portability: To obtain and reuse your personal data across different services. • Right to Object: To the processing of your personal data where applicable. • Right Against Automated Decision-Making: Including profiling that may have legal or similarly significant effects. To exercise any of these rights, please contact us using the details provided in Section 12. We may require proof of identity to ensure the security of your data. 2

9. Cookies and Tracking Technologies Our website employs cookies and similar tracking technologies to enhance your browsing experience, monitor usage, and deliver personalized content. You can adjust your cookie preferences through your browser settings; however, disabling cookies may affect some features of our website.

10. Children's Privacy Our Services are not intended for individuals under the age of 13. We do not knowingly collect or process personal data from children under 13 without appropriate parental consent. If you believe we have inadvertently collected such information, please notify us immediately so that we can take appropriate corrective measures.

11. Changes to This Privacy Policy We reserve the right to update or modify this Privacy Policy as necessary to comply with legal requirements or to reflect changes in our data practices. Any updates will be posted on this page and will become effective immediately upon publication. We encourage you to review this policy periodically.

12. Contact Us If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: • Email: foya@foyamarket.com • Postal Address: • Data Protection Officer (if applicable): foya@foyamarket.com Your continued use of our Services constitutes your acceptance of this Privacy Policy.