1. Who we are
Corpmetrix is a UK company providing employee engagement, culture diagnostics, 360° feedback, and workforce analytics services. Our headquarters are in London, with offices serving clients in Saudi Arabia, Egypt, the UAE, and other markets.
For the purposes of applicable data-protection law, Corpmetrix is typically the controller of personal data collected through our marketing websites and Corpmetrix-branded mobile apps. When we process employee survey or programme data on behalf of a customer organisation, that organisation is usually the controller and Corpmetrix acts as a processor under a customer agreement.
2. Scope
This policy covers personal data processed through:
- corpmetrix.com and related Corpmetrix websites
- the Corpmetrix web platform and customer portals
- Corpmetrix mobile applications distributed via Apple App Store, Google Play, and similar stores
- demo requests, contact forms, partner enquiries, and support channels
- survey participation channels we operate (including email, SMS, WhatsApp, QR, SSO, and in-app flows), subject to the customer’s programme instructions
3. Information we collect
Depending on how you interact with the Services, we may collect:
- Identity and contact details — name, work email, phone number, job title, organisation, and office location
- Account credentials — usernames, authentication tokens, and SSO identifiers (we do not store plaintext passwords where hashed authentication is used)
- Survey and programme content — responses, comments, ratings, and related workforce analytics data provided in a customer programme
- Device and app data — device type, operating system, app version, language, time zone, crash logs, and diagnostic events
- Usage data — pages viewed, features used, session timing, and approximate interaction patterns needed to operate and improve the Services
- Communications — messages you send to us (support, sales, partnerships) and related metadata
- Optional permissions data — only if you grant them in the app (for example notifications); we request permissions only when needed for a feature
We do not knowingly require special-category data through marketing forms. Where customer programmes include sensitive workforce topics, processing follows the customer’s lawful basis and programme design.
4. How we use information
We use personal data to:
- provide, secure, and maintain the Services
- authenticate users and manage accounts
- deliver surveys, reports, dashboards, and action-planning workflows for customers
- respond to enquiries, demos, and support requests
- send service notices and, where permitted, product updates
- monitor performance, prevent abuse, and improve reliability
- comply with legal obligations and enforce our terms
5. Legal bases
Where GDPR or similar frameworks apply, we rely on one or more of: performance of a contract; legitimate interests (such as securing and improving the Services, in a manner that does not override your rights); consent (for example certain cookies or marketing where required); and legal obligation.
For customer workforce programmes, the customer typically determines the lawful basis for surveying employees. Corpmetrix processes that data under the customer’s instructions and applicable data-processing terms.
7. International transfers and hosting
Corpmetrix operates internationally. Personal data may be processed in the United Kingdom, the European Economic Area, the Middle East, or other locations where we or our processors operate. Enterprise customers may request local or on-premise hosting options, confirmed during onboarding.
Where required, we use appropriate transfer mechanisms (such as standard contractual clauses) and technical/organisational measures to protect personal data.
8. Retention
We retain personal data only as long as needed for the purposes described in this policy, including to provide the Services, meet contractual retention schedules with customers, resolve disputes, and comply with legal requirements. Marketing enquiry records are typically kept for a limited business period unless a longer relationship continues. Customer programme data retention follows the customer agreement.
9. Security
We apply technical and organisational measures designed to protect personal data, including encryption in transit, access controls, and environment hardening appropriate to an enterprise workforce-analytics platform. No method of transmission or storage is completely secure; we continuously improve controls and expect customers to protect their own credentials and administrative access.
10. Your rights
Depending on your location, you may have rights to access, correct, delete, restrict, or object to certain processing, and to data portability. Where Corpmetrix is the controller, contact us using the details below. Where your employer or another organisation is the controller (for example survey programmes), please contact that organisation first; we will assist them as their processor.
You may also lodge a complaint with a supervisory authority. In the UK, that is typically the Information Commissioner’s Office (ICO).
11. Children
The Services are designed for workplace and professional use and are not directed to children under 16 (or the minimum age required in your jurisdiction). We do not knowingly collect personal data from children. If you believe a child has provided personal data to us, contact us and we will take appropriate steps to delete it.
12. Mobile applications
Our mobile apps may collect device identifiers, push-notification tokens, crash diagnostics, and in-app usage events needed to operate the app securely. Permissions (such as notifications) are requested in context and can usually be revoked in device settings. Uninstalling the app stops further local collection from that install; account or programme data held on our servers is handled under this policy and any applicable customer agreement.
If an app store or social platform requires a dedicated privacy URL for publishing, this page is the canonical Corpmetrix Privacy Policy for those listings.
13. Account and data deletion
To request deletion of a Corpmetrix marketing or app account you control, email privacy@corpmetrix.com with the subject “Account deletion request” and include the email address associated with the account. We will verify the request and delete or anonymise personal data we control, except where we must retain information for legal, security, or contractual reasons.
Employee survey or programme records controlled by a customer organisation must be requested through that organisation.
15. Changes to this policy
We may update this Privacy Policy from time to time. The effective date at the top of this page will change when we do. Material changes may also be communicated through the Services or by email where appropriate. Continued use of the Services after an update constitutes acceptance of the revised policy where permitted by law.
16. Contact
For privacy requests, email privacy@corpmetrix.com or info@corpmetrix.com. Postal enquiries: Corpmetrix, 52 Great Titchfield Street, Fitzrovia, London W1W 7QG, United Kingdom.