Last updated: 6 June 2025

Sonrai Analytics (”us”, ”we”, or ”our”) operates the https://sonraianalytics.com website, the Sonrai Discovery platform and research conducted by Sonrai Analytics, hereon together referred to as the ”Service”, and processes Personal Information as part of day-to-day business activities and is the data controller responsible.

This page informs you of our policies regarding the collection, use and disclosure of Personal Information when you use our Service.

We will not use or share your information with anyone except as described in this Privacy Policy. We will not sell your Personal Information for any purpose.

We use your Personal Information for providing and improving the Service. By using the Service, you agree to the collection and use of information in accordance with this policy.

Please contact us on info@sonraianalytics.com for any privacy, data protection and security related questions.

Information Collection and Use

 

While using our Service, we may ask you to provide us with certain Personal Information that can be used to contact or identify you. Personal Information will include your email address, first and last name, phone number, client number, username, password, professional information (such as company, title) and postal address and other information in combination with these identifiers. We also collect some information automatically via Google Analytics or Cookies such as internet browsing history and activity history associated with our website (pages visited, date and time of visit, time spent on pages, forms completed, URLs clicked on, online identifiers) and technical information (browser type, browser version, unique device identifier, operating system, version).

We process your Personal Information for a number of reasons, including:

  • To enable use of our products, to provide you with customer support and respond to your requests, queries or complaints;
  • Including managing contractual obligations, relationships, business development (for both current and potential partners and customers)
  • Executing on agreements with project partners
  • Implementing and managing invoicing and accounting
  • Contacting you via SMS for multi-factor authentication when using the Service
  • To personalise your experience on our website and to inform you about new products and services, or provide information that may be of interest to you;
  • Managing the website, case studies, content, contact forms and present quotes from users and our employees
  • Implementing and managing marketing campaigns
  • Making content directly available to you, via newsletters and targeted advertising
  • Performing website analytics and measure website performance
  • Implementing and managing feedback surveys
  • To maintain the website, including for security purposes;
  • To improve our products by monitoring the usage to keep up-to-date with elements that are working well and areas that require improvement;

 

  • To detect, prevent and address technical issues which are necessary for running our business, our Service, provision of administration and IT services, network security, to prevent fraud;
  • To manage recruitment and human resources within our company
  • Managing job advertisements via our website, and social media channels
  • Managing applicant data, including Northern Irish legal Equality Monitoring information
  • Monitoring and managing staff access to our systems and facilities to protect our systems and Service, and the Personal Information of employees and customers/clients from unauthorised access.

Although the list is intended to be as exhaustive as possible, any new use or modification or withdrawal of any existing processing will be notified to the concerned Data Subjects by the publication of new versions of this Privacy Policy on the website. Sonrai Analytics recommends the Data Subjects to review this Privacy Policy on a regular basis to be aware of any new use, modification, or withdrawal of any existing processing.

Any data generated by the processing and analysis of Sonrai Analytics, otherwise known as supplemented data, shall remain the exclusive property of Sonrai Analytics (usage analysis, statistics, etc.).

Please be aware that certain features of this site may not be available to you if you elect not to provide certain Personal Information. Any Personal Information you provide to us via our Services will be used in accordance with this Privacy Notice.

2. Lawful basis for processing your Personal Information

We will only use your Personal Information when the law allows us to. Most commonly, we will use your Personal Information in the following circumstances in accordance with Article 6(1) and Article 9 of the GDPR:

Where we rely on consent as a legal basis for processing your Personal Information although we will get your consent before sending third party direct marketing communications to you via email. You have the right to withdraw consent to marketing at any time by contacting us.

Where we need to perform the contract we are about to enter into or have entered into with you.

Where we need to comply with a legal obligation, such as collecting employee information, responding to queries from regulators, financial and tax reporting, transparency of our relationship with academic institutions, healthcare providers and healthcare professionals.

Where the processing is necessary for performance of a task that is carried out in the public interest.

The processing is necessary for the purposes of legitimate interest of Sonrai Analytics. When we process Personal Information for our legitimate interests, we take into account your fundamental rights, freedoms and interest to access if the legitimate interests pursued create an imbalance with your rights and freedoms.

We process your data under our legitimate interests to personalise your experience on our website, inform you of closely related products or services, and to engage with you as a potential customer. This allows us to provide you with relevant and tailored information, enhancing your overall experience and ensuring that you receive valuable updates and offerings that align with your interests. Our goal is to establish a meaningful and mutually beneficial relationship with you, and we believe that our legitimate interests align with your potential needs and preferences. If you have any concerns or would like more information about how we process your data, please do not hesitate to contact us.

Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests. Such processing is done in order to:

Provide and maintain the Service in order to perform our contract with you and in accordance with our legitimate business interests.

Notify you about changes to our Service in order to ensure performance of our contract with you and in accordance with our legitimate interests to keep users up-to-date.

Provide customer care and support in accordance with our legitimate interests to offer an efficient and optimum Service.

Provide analysis or valuable information so that we can improve the Service in accordance with our legitimate business interests to offer a good Service that will be most beneficial to our users and to study how users use our Service.

Inform you about new products/services, or provide information, that may be of interest to you.

Monitor the usage of the Service in accordance with our legitimate interests to keep up-to-date with what elements of the Service are working well and what areas could be improved.

Detect, prevent and address technical issues which are necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud) and necessary to comply with a legal obligation.

Monitor and manage staff access to our systems and facilities to protect our networks, and the Personal Information of employees and customers/clients, from unauthorised access.

Manage client relationships in accordance with our legitimate interests to ensure a user-friendly Service is provided.

Enforce our terms of business to ensure compliance with our legal obligations and in order to perform our contract with you.

3. How do we collect Personal Information?

 

Log Data

We may also collect information that your browser sends whenever you visit our Service or when you access the Service by or through a mobile device (\”Log Data\”).

 

Google

Google AdWords remarketing service is provided by Google Inc. You can opt out of Google Analytics for Display Advertising and customize the Google Display Network ads by visiting the Google Ads Settings page: https://www.google.com/settings/ads

Google also recommends installing the Google Analytics Opt-out Browser Add-on – https://tools.google.com/dlpage/gaoptout – for your web browser. Google Analytics Opt-out Browser Add-on provides visitors with the ability to prevent their data from being collected and used by Google Analytics.

For more information on the privacy practices of Google, please visit the Google Privacy Terms web page: https://www.google.com/intl/en/policies/privacy/

 

Location Information

We may use and store information about your location, if you give us permission to do so. We use this information to provide features of our Service, to improve and customise our Service. You can enable or disable location services when you use our Service at any time, through your mobile device settings.

 

Cookies

Cookies are files with small amounts of data, which may include an anonymous unique identifier. Cookies are sent to your browser from a web site and stored on your computer\’s hard drive.

We use \”cookies\” to collect information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

 

LinkedIn

We collect information about data subjects interactions with our LinkedIn profile, adverts and posts.

Users can opt out of cookies from LinkedIn on: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out?trk 

 

The following applies to data collection on the website only:

Sonrai Analytics uses behavioural remarketing services to advertise on third party websites to you after you visited our website. We, and our third-party vendors, use cookies to inform, optimize and serve ads based on your past visits to our Service.

 

Facebook

Facebook remarketing service is provided by Facebook Inc. You can learn more about interest-based advertising from Facebook by visiting this page: https://www.facebook.com/help/164968693837950

To opt-out from Facebook\’s interest-based ads follow these instructions from Facebook: https://www.facebook.com/about/ads/#568137493302217

Facebook adheres to the Self-Regulatory Principles for Online Behavioural Advertising established by the Digital Advertising Alliance. You can also opt-out from Facebook and other participating companies through the Digital Advertising Alliance in the USA http://www.aboutads.info/choices/, the Digital Advertising Alliance of Canada in Canada https://youradchoices.ca/ or the European Interactive Digital Advertising Alliance in Europe https://www.youronlinechoices.eu/, or opt-out using your mobile device settings.

For more information on the privacy practices of Facebook, please visit Facebook\’s Data Policy: https://www.facebook.com/privacy/explanation

 

AdRoll

AdRoll remarketing service is provided by Semantic Sugar, Inc. You can opt-out of AdRoll remarketing by visiting this AdRoll Advertising Preferences web page: http://info.evidon.com/pub_info/573?v=1nt=1nw=false

For more information on the privacy practices of AdRoll, please visit the AdRoll Privacy Policy web page: http://www.adroll.com/about/privacy

 

Service Providers

We may employ third party companies and individuals to facilitate our Service, to provide the Service on our behalf, to perform Service-related services or to assist us in analysing how our Service is used.

These third parties have access to your Personal Information only to perform these tasks on our behalf and on our written instructions. We require all third-party service providers to treat your Personal Information securely and not to process it for any other purpose.

 

4. Opting out of Communications

We strive to provide you with choices regarding certain Personal Information uses, particularly around marketing and advertising. At all times, we will ensure that we comply with the applicable rules and privacy laws when marketing to you.

We may use your Personal Information to contact you with newsletters, marketing or promotional materials and other information that may be of interest to you. You may opt out of receiving any, or all, of these communications from us by following the unsubscribe link or instructions provided in any email we send, or send us an email directly to info@sonraianalytcis.com. We will endeavour to deal with your opt-out request as quickly as possible.

 

5. Business Transactions

Sonrai Analytics does not process financial transactions on our website.

If Sonrai Analytics is involved in a merger, acquisition or asset sale, your Personal Information may be transferred in accordance with our legal obligations and/or our legitimate business interests. We will provide notice before your Personal Information is transferred and becomes subject to a different Privacy Policy. In the event of such a transfer of information, your rights under the EU General Data Protection Regulation (“GDPR”) and the Data Protection Act 2018 (“DPA 2018”)  are not affected.

 

6. Security

The security of your Personal Information is important to us but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Information, we cannot guarantee its absolute security. As such we make no warranties as to the level of security afforded to your data, except that we will always act in accordance with the relevant UK and EU legislation.

However, we have put in place appropriate technical and organisational security measures to prevent your Personal Information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.

We have put in place procedures to deal with any suspected Personal Information breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

 

7. International Transfer

Any Personal Information you provide to us through your use of our Services may be transferred to or stored in a geographic region that imposes different privacy obligations than your country of origin. This means that your Personal Information may be sent to a country with less restrictive data protection laws than your own. Any such transfer will be conducted in compliance with applicable law.

 

When you use our Service, you expressly consent to your Personal Information being accessed outside the United Kingdom. You have the right to withdraw your consent at any time by contacting info@sonraianalytics.com.

 

If you are located outside the United Kingdom and choose to provide information to us, please note that we transfer the information, including Personal Information, to the United Kingdom and process it there.

Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.

If your Personal Information is covered by the GDPR, we will only transfers your Personal Information to a third country outside the European Union (EU), European Economic Area (EEA) if they are covered by an adequacy decision. Where an adequacy decision is not available for a third country, but a transfer is required, Sonrai Analytics will establish the contracts containing the EU Standard Contractual Clauses, which according to the EU Commission decision of 04 June 2021 (EU 2021/914) constitute appropriate and suitable safeguards to ensure compliance with GDPR.

In the event that a dispute arises with regards to the international transfer of data, you agree that the courts of Northern Ireland shall have exclusive jurisdiction over the matter.

 

8. Links to Other Sites

Our Service may contain links to other sites that are not operated by us. If you click on a third-party link, you will be directed to that third party’s site. We strongly advise you to review the Privacy Policy of every site you visit.

We have no control over, and assume no responsibility for the content, privacy policies or practices of any third-party sites or services.

 

9. Children’s Privacy

Our Service is not intended for nor addresses anyone under the age of 18 (”Children”).

We do not knowingly collect personally identifiable information from children under 18. If you are a parent or guardian and you are aware that your Children have provided us with Personal Information, please contact us. If we become aware that we have collected Personal Information from a child under the age of 18 without verification of parental consent, we will take steps to remove that information from our Servers.

 

10. Data Retention

We will only retain your Personal Information for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your Personal Information for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.

To determine the appropriate retention period for Personal Information, we consider the amount, nature and sensitivity of the Personal Information, the potential risk of harm from unauthorised use or disclosure of your Personal Information, the purposes for which we process your Personal Information and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.

By law we have to keep basic information about our customers for six years following our last interaction with you.

In some circumstances we will anonymise your Personal Information (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.

 

11. Your Rights

If you want to review, verify, correct or request erasure of your Personal Information, object to the processing of your Personal Information, or request that we transfer a copy of your Personal Information to another party, please contact us in writing at our registered address or by email.

Under the GDPR, you may have a number of important rights free of charge. These include the right to:

 

Request access to your Personal Information, this enables you to receive a copy of the Personal Information we hold about you.

 

Request correction of the Personal Information that we hold about you that is inaccurate or incomplete. In some circumstances we may need to verify the accuracy of the new data you provide to us, so may request additional information.

 

Request the transfer of your Personal Information to you or to a third party (data portability). We will provide to you, or your nominated third party , your Personal Information in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.

 

Object to processing of your Personal Information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your Personal Information for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.

 

Request erasure of your Personal Information when it is no longer needed for the purposes for which you provided it, as well as the right to restriction of processing of your Personal Information to certain limited purposes where erasure is not possible.

Erasure enables you to ask us to delete or remove Personal Information in certain circumstances. You also have the right to ask us to delete or remove your Personal Information where you have successfully exercised your right to object to processing, where we are required to erase your Personal Information to comply with local laws. Please note, we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.

Personal Information restriction enables you to ask us to suspend the processing of your Personal Information in the following scenarios: (a) if you want us to establish the accuracy of the data we hold about you; (b) where our use of the data has been deemed as unlawful but you do not want us to erase it; (c) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (d) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.

 

Please note that erasure or restriction of processing is only possible if and to the extent that the processing of Personal Information is based on your consent or our legitimate interests. If data processing is based on consent, note that you have the right to withdraw your consent at any time, but that the withdrawal of your consent does not affect the lawfulness of processing based on consent before its withdrawal. In the event of an erasure request, we may retain a copy of your Personal Information for our record-keeping purposes and to avoid entering your Personal Information in our systems after your request.

If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent. You may withdraw consent by contacting info@sonraianalytics.com.

 

In the event that you believe or have the impression that our data processing does not comply with the GDPR, you are entitled to lodge a complaint with the Information Commissioner’s Office (UK responsible supervisory authority).

 

11.1 No fee usually required

You will not have to pay a fee to access your Personal Information (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

 

11.2 What we may need from you

We may need to request specific information from you to help us confirm your identity and ensure your right to access your Personal Information (or to exercise any of your other rights). This is a security measure to ensure that Personal Information is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

 

11.3 Time limit to respond

We try to respond to all legitimate requests within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

 

12. Jurisdiction

This Policy shall be governed and construed in accordance with the laws of Northern Ireland, without regard to its conflict of law provisions.

 

13. How to Complain

If you have any questions about this Privacy Policy, please contact us at info@sonraianalytics.com. We hope that we can resolve any query or concern you raise about our use of your information.

The GDPR also gives you the right to lodge a complaint with a supervisory authority. The supervisory authority in the UK is the Information Commissioner who may be contacted at https://ico.org.uk/concerns/.

 

14. Liability

Sonrai Analytics and its service providers and collaboration partners take reasonable steps to protect Personal Information we access or receive through this website from loss, misuse, and unauthorised access, disclosure, alteration, or destruction. Nevertheless, Sonrai Analytics makes no guarantee as to the security of your Personal Information and disclaims, to the fullest extent permitted by law, all liability and damages caused by loss, misuse, and unauthorised access, disclosure, alteration, or destruction. We recommend that you take any available precautions to protect Personal Information you submit on this website.

 

15. Updates to This Privacy Policy

From time to time, we may revise this Privacy Policy. Any such changes to this Privacy Policy will be reflected on this page. We recommend that you review this Privacy Policy regularly for any changes. The date on which this policy was last revised is located at the top of this policy and changes to this Privacy Policy are effective when they are posted on this page.