SECOND OPINION PRIVACY POLICY

Second Opinion Healthcare Panel Privacy Notice of Potentia Insight Ltd, in this notice, “we”, “our”, or “us” refer to Potentia Insight Ltd.

Company Number: 14423022 Registered in England and Wales

Our registered address is: 5 Southampton Place, London, WC1A 2DA

Email: dpo@potentia-insight.co.uk


All market research carried out by Potentia Insight Limited is carried out in a manner fully compliant with the MRS Code of Conduct.

Our policy will indicate the date it was last updated, but if there is a substantive change in the way that we use your personal information, we will notify you via email of the relevant changes.

If you would like to opt out, have any other concerns or to discuss the survey please contact hello@second-opinion-panel.co.uk.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you participate in our healthcare research panel.

 Why we collect personal data

As a market research company, it is necessary for us to collect personal data. There are two main reasons for this:
  • To maintain a database of people interested in participating in paid market research projects so that we can speedily respond to clients’ requests
  • To ensure that we will only ever contact you with information about opportunities which are suitable for you.

We ensure this by asking for specific personal data which is used as standard in market research for identifying suitable research participants.

Information we collect in order to create your record on our database and contact you when suitable opportunities arise includes:

Personal Information:
  • Name, Date of Birth, Gender, Ethnicity
  • Contact details (Address, Postcode, Telephone number, Email)
  • Ethnicity

Health and Medical Data

  • Medical history and current health conditions
      • Medication details and allergies
  • Physical measurements (height, weight, blood pressure, etc.)
  • Mental health information
  • Lifestyle factors (diet, exercise, smoking, alcohol consumption)

Technical Details:

  • IP address and device information
  • Survey responses and questionnaire data
  • Research study participation records
  • Communication preferences

We may also use this information for:
• Auditing, research and analysis to operate and improve our technologies and services
• Administration
• Statistical analysis
• Fraud prevention and detection and security vetting
• Customising this website and its content to your particular preferences
• To notify you of any changes to this website or our services which may affect you

Please note that some projects may require us to request further personal details, where they are relevant to the needs of the client’s project. This information will normally only be stored for 6 months from the close of the project unless otherwise specified. 

How we collect personal data

Personal data is collected by Potentia Insight through this community (Second Opinion) hosted by Potentia Insight and Forsta.

Forsta operates the community and survey questionnaire software, and data collection process that Second Opinion is hosted on. The data from the survey will be held by Forsta in a separate database. Only Potentia Insight will receive the data collected by Forsta from the survey. Potentia Insight's full privacy policy can be seen here: Potentia Insight privacy policy and Forsta here: https://legal.forsta.com/legal/privacy-notice/

If additional personal data is requested as part of a specific project, this is also processed under the lawful basis of consent. If you decline to supply this information you will not be considered for participation in the specified project but this will not affect any future offers to you of participation in paid market research.

How we store and process personal data

Personal data is stored in your record in the Second Opinion database of interested participants. It is used to assess your suitability for paid market research opportunities offered by Potentia Insight, and is used to contact you in order to make such offers when suitable opportunities arise.

This data is stored in a database accessible only to authorised members of the Potentia Insight team, and in compliance with industry standard best practice in relation to ensuring confidentiality, and are only granted access for data analysis and quality control purposes.  These individuals are bound by confidentiality obligations and may be subject to discipline, including termination and criminal prosecution, if they fail to meet these obligations.

Potentia Insight and Forsta have security measures in place to protect the loss, misuse, and alteration of the information under their control. These include internal reviews of our data collection, storage and processing practices and security measures, as well as physical security measures to guard against unauthorised access to systems where we store personal data.

Personal data will be stored for up to 12 months from the date of initial consent, at which point Potentia Insight will contact you to inform you that we will remove your data. This communication will include instructions on how to renew your consent for a further period of 12 months if you are interested in continuing to receive offers of paid market research opportunities and you wish us to retain your personal data in our database.  You can withdraw consent before the 12 months period by contacting us at hello@second-opinion-panel.co.uk or following the unsubscription process (By clicking on the unsubscribe option once you are logged in, or by using the unsubscribe link found on the bottom of any of our E-mail communication with you.).

All data and responses collected as part of a market research project are passed directly and securely to the client of Potentia Insight who commissioned the project.

In compliance with the Market Research Society code of conduct, the data provided to the organisation commissioning the research does not contain personal data which could be used to identify participants.

We process personal information on our servers in both the United Kingdom and the EEA.  Personal data is not transferred outside the UK and EEA without the prior consent of Potentia Insight, which requires the client to fulfil specific obligations to ensure safe transfer of data and protection compliant with all applicable UK data protection legislation.

You have the right to obtain information about international transfers and safeguards in place.

Participants offered opportunities to take part in paid market research through Potentia Insight may at any time request further details about how their personal data may be used within the project.

In order to administrate rewards for taking part in our research activities, Potentia Insight are working with a third party, Ayda.   In order for you to receive your reward, the following information will be shared with Ayda to enable you to create your account and for reward payments to made after completing activities

  • Firstname
  • Surname
  • Email

This information is shared for the sole purpose of the reward payment.  Details on the process of creating your account, notifications and claiming your reward can be found here, along with Ayda’s Privacy Policy here.

Data collected automatically

Like all modern websites, this community makes use of cookies, IP address, a pseudo-anonymous identifier and other similar devices  for quality control and to provide certain functionality. If you wish to disable cookies, it is best to refer to your browser’s help function in the first instance, where you should find information and instructions relevant to the specific browser you are using. Further useful information about cookies can be found here: https://ico.org.uk/your-data-matters/online/cookies/

We do not do any invisible processing of data from your computer. We will only collect and use personal information in accordance with this policy to the extent deemed reasonably necessary to serve our legitimate business purposes, and we will maintain appropriate safeguards to ensure the security, integrity, accuracy and privacy of the information you have provided. In addition, we will take reasonable steps to ensure that third parties to whom we transfer any personal information provide sufficient protection of that information.

Data Protection Compliance

We process your personal data under the following legal bases:

  • Consent (Article 6(1)(a) UK GDPR): For participation in research studies
  • Performance of a contract (Article 6(1)(b)): To fulfil our obligations under research agreements agreed with its clients for legitimate market research purposes
  • Legal obligation (Article 6(1)(c)): To comply with research regulations and healthcare laws

For special category health data, we rely on:

  • Explicit consent (Article 9(2)(a) UK GDPR)

You have the right under the Data Protection Act 1998 (which incorporates the UK GDPR implementation) and the EU General Data Protection Regulation to access any information held about you. You also have the right to the following:
• Object to processing of your data;
• To port data (if automated data collection);
• To erasure of any personal data made public;
• To restrict processing;
• To rectify data held

We will be happy to respond to any of these requests or any issues you may have. You can make a request by emailing hello@second-opinion-panel.co.uk or dpo@potentia-insight.co.uk. You can also contact our Data Protection Officers at this email address.

If for any reason, you are concerned that the personal information maintained by Potentia Insight is incorrect please also email this address to review, update or remove information as appropriate.

We retain your data for the following periods:

  • Published research data: Permanently in anonymised form
  • Additional personal details not held on the panel relevant to the needs of the client’s project: Up to 6 months from the close of the project
  • Health and medical data: Up to 25 years for longitudinal studies
  • Administrative records: 7 years after last contact

Please be aware we may need to retain your information on our files to resolve disputes, enforce our user agreement, or for technical and legal requirements and constraints related to the security, integrity and operation of our online surveys.

Adverse Event Reporting

Some of our research will be commissioned by a company that manufactures medicines/medical devices. It is a legal requirement that the company keep records of any side effects or complaints that people may have about their medicines/medical device. We must assist the company in meeting its legal obligations.

Therefore, if, during one of our projects, you make any reference to a side effect or complaint about a medicine/medical device, we will let the company know about this even if it has already been reported by you directly to the company or the regulatory authorities. You can decide whether or not to give the company your name and contact details.

Complaints

If you have any concerns or questions about how we store and process your data, please contact us on hello@second-opinion-panel.co.uk

Please include the word ‘privacy’ in your email subject.

If you are unhappy with how we have used your data, you can also complain to the ICO.
The ICO’s address:
  Information Commissioner’s Office
  Wycliffe House
  Water Lane
  Wilmslow
  Cheshire
  SK9 5AF
Helpline number: 0303 123 1113

Governing Law

This Privacy Policy is governed by the laws of England and Wales. Any disputes will be subject to the exclusive jurisdiction of the English courts.

Last Updated: October 2025