InsightsReward Panel Privacy & Data Protection Policy

Effective Date: 22 April 2023
Last Updated: 24 April 2026

1. Scope and Role

This Privacy Policy applies to InsightsReward, the proprietary panel operated by MindsForest, used for market research recruitment and participation.

MindsForest acts as:

• Data Controller for panel member registration and management
• Data Processor when providing sample services to research clients

We process personal data strictly for market research purposes and do not sell personal data.

2. Data Collection Practices

We collect the following categories of data:

A. Personal & Profile Information

• Name, email address, phone number
• Gender, date of birth, location
• Address (where applicable)
• Demographic and lifestyle attributes

Collected during registration or profile updates to enable accurate survey matching.

B. Survey Participation Data

• Responses to surveys (open and closed-ended)
• Feedback on products, services, and behaviors

This data is used in aggregated or pseudonymized form for research purposes.

C. Technical Data

• IP address and approximate geolocation
• Device type, browser, and operating system
• Device identifiers and usage patterns

Used for fraud detection, quality control, and platform optimization.

D. Payment Information

• Bank details, UPI, or digital wallet IDs (where applicable)

Used strictly for reward fulfillment and handled via secure systems.

E. Location Data

Collected where necessary to:

• Enable region-specific survey targeting
• Ensure relevance of research participation

3. Purpose of Data Processing

We process data for the following purposes:

• Survey Matching: Matching panelists to relevant studies
• Survey Participation: Delivering accurate and reliable research data to clients
• Reward Fulfillment: Processing incentives for participation
• Quality Assurance: Fraud detection, deduplication, and validation
• Legal Compliance: Meeting regulatory and contractual obligations

We do not use personal data for independent profiling or marketing beyond consented communication.

4. Legal Basis for Processing

We process personal data under:

• Explicit Consent (panel registration and participation)
• Legitimate Interest (fraud prevention and panel quality)
• Contractual Necessity (client project execution)

5. Data Sharing and Disclosure

We do not sell personal data.

A. Research Clients

• Shared in anonymized or pseudonymized format
• Personally identifiable data shared only when explicitly required and agreed

B. Service Providers / Sub-processors

• Payment processors
• Survey platforms
• Cloud and infrastructure providers

All partners are contractually bound by data protection obligations.

C. Legal and Regulatory Authorities

Where required by law or valid legal process.

D. Business Transfers

In case of merger, acquisition, or asset sale, data may be transferred with prior notice.

6. Data Security Measures

We implement strong security controls, including:

• Encryption (SSL/TLS for data in transit)
• Secure storage environments
• Role-based access control (RBAC)
• Multi-factor authentication (MFA)
• Firewalls and monitoring systems
• Regular internal security reviews
• Incident response and breach management protocols

7. Data Retention Policy

• Active accounts: retained while account is active
• Dormant accounts: archived after 24 months, deleted thereafter
• Legal retention: extended where required

Data is deleted or anonymized after retention periods.

8. Your Data Rights

You have the right to:

• Access your data
• Correct inaccuracies
• Request deletion
• Restrict processing
• Object to processing
• Request data portability
• Withdraw consent at any time

Requests can be submitted via: privacy@mindsforest.com

9. International Data Transfers

Data may be processed globally with safeguards such as:

• Standard Contractual Clauses (SCCs)
• Secure transfer protocols

10. Children’s Privacy

We do not knowingly collect data from individuals under 16. Where required, participation is subject to parental or guardian consent.

11. Updates to This Policy

We may update this policy periodically. Material changes will be communicated via platform or email.

12. Data Protection Contact

MindsForest does not have a formally appointed Data Protection Officer (DPO). Data protection responsibilities are managed internally by our compliance team.

For all privacy-related inquiries:

• General inquiries: info@mindsforest.com
• Compliance matters: compliance@mindsforest.com
• Data requests: privacy@mindsforest.com

13. Contact Information

MindsForest
50,51, 2nd Floor, Regal Building,
Outer Circle, New Delhi,
New Delhi-110001