Privacy Policy
Effective Date: 1/2/2023 | Last Updated: 1/2/2023
Bridgeway Analysts (“Company,” “we,” “our,” or “us”) is committed to protecting the privacy and confidentiality of personal information entrusted to us. As an analytical research firm, we provide market insights and intelligence services to banks, financial institutions, and private investors. This Privacy Policy describes the ways in which we collect, use, store, disclose, and protect personal information in connection with our services and our website.
Scope of the Policy
This Privacy Policy applies to all personal information we collect from our clients, research participants, and visitors to our website and digital platforms. It also applies to individuals whose information may be incidentally processed as part of our research activities. The policy does not apply to data that has been aggregated or anonymized in a way that no longer allows it to be linked to an identifiable individual.
Information We Collect
We collect personal information directly from our clients when they engage our services. This may include names, professional details, company affiliations, contact information, and payment details. We also collect communications exchanged through email, phone, or other correspondence.
In the course of our research activities, we may gather responses from surveys, interviews, or focus groups. These responses may include demographic details, professional roles, geographic information, and opinions or behaviors relevant to our studies. Participation in such activities is always voluntary, and individuals may choose how much information they wish to disclose.
We also collect certain technical information automatically when individuals use our website or online platforms. This may include IP addresses, browser types, operating systems, browsing activity, and referral data. Such information helps us analyze traffic patterns, secure our systems, and improve user experience. In some cases, we may obtain additional information from publicly available sources, licensed data providers, or trusted third-party partners, which we use to enrich the accuracy and depth of our research.
How We Use Information
The personal information we collect is used to deliver our research and analytical services, to maintain client accounts, and to process payments where required. We rely on this information to conduct in-depth studies, to validate findings, and to ensure the quality and reliability of the insights we provide to our clients.
We also use personal information to communicate with clients and participants. This may include responding to inquiries, sending requested reports, or providing updates about our services. With appropriate consent, we may also use personal information to share newsletters or market updates, although individuals can opt out of such communications at any time.
Internally, personal information helps us to evaluate and enhance our methodologies, improve our products, and ensure compliance with legal and regulatory obligations. We may also use the data we collect to detect and prevent fraud, unauthorized access, or other unlawful activities.
Legal Basis for Processing
For individuals located in the European Economic Area, our processing of personal data is conducted under specific legal grounds as defined by the General Data Protection Regulation (GDPR). We process personal data with the individual’s consent, where it is necessary to fulfill a contract, where it serves our legitimate business interests balanced with the rights of the data subject, or where we are legally obliged to do so.
Sharing of Information
We do not sell personal information to third parties. However, we may share information with service providers who support our operations, such as data hosting companies, analytics providers, payment processors, and IT consultants. These providers are contractually bound to protect the information and to use it only for the purposes of supporting our business.
In some cases, research findings may be shared with our clients. Unless specifically agreed upon with participants, these findings are presented in an aggregated or anonymized form that does not identify individuals. Where personal-level data is shared, it is done only with explicit consent and under strict confidentiality.
We may also disclose personal information where required by law, regulation, or legal process, or where necessary to protect our rights, property, or safety. In the event of a corporate transaction such as a merger, acquisition, or restructuring, personal information may be transferred to the new entity as part of the business assets.
International Data Transfers
As a global research provider, we may transfer personal information to countries outside of an individual’s place of residence, including countries that may not provide the same level of data protection. Where such transfers occur, we implement safeguards such as Standard Contractual Clauses or equivalent protections to ensure compliance with international data protection laws.
Retention of Data
We retain personal information only for as long as necessary to fulfill the purposes for which it was collected. The length of retention varies depending on the type of data, the legal or regulatory requirements that apply, and the needs of our business operations. When data is no longer needed, it is securely deleted, anonymized, or archived in accordance with our internal policies.
Security Measures
Protecting personal information is a priority. We employ a range of technical, administrative, and organizational measures designed to safeguard data against unauthorized access, loss, misuse, or disclosure. These measures include encryption, secure transmission protocols, restricted access controls, and regular monitoring and training programs. While we take every precaution, no system can be guaranteed to be completely secure.
Rights of Individuals
Depending on applicable law, individuals may have the right to access the personal information we hold about them, to request corrections, to ask for deletion, or to restrict or object to certain forms of processing. In jurisdictions where the GDPR applies, individuals also have the right to data portability and the right to withdraw consent at any time.
Residents of California may have additional rights under the California Consumer Privacy Act (CCPA), including the right to request disclosure of information collected and the right to opt out of the sale of personal data.
To exercise any of these rights, individuals may submit a request through the secure client portal available on our website. Requests submitted through the portal are verified before processing to ensure the confidentiality and security of personal information.
Cookies and Tracking
Our website uses cookies and other tracking technologies to enhance user experience, analyze usage, and tailor content. Cookies may collect information about browsing behavior, preferences, and device activity. Users may disable cookies through their browser settings, although this may affect the functionality of our website.
Third-Party Links
Our website and reports may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those external entities and encourage users to review their respective privacy policies.
Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices, technologies, or legal requirements. When updates occur, we will revise the “Last Updated” date at the top of the policy. If material changes are made, we will provide notice where required by law.