Turma Privacy Policy
Who we are
TURMA Ltd is the controller of the personal data collected through the TURMA Snapshot assessment.
What this notice covers
This Privacy Notice explains how we collect, use, store, share, and protect personal data when you complete the TURMA Snapshot assessment and request your report.
The data we collect
When you use Snapshot, we may collect:
Your name
Your email address
Your job title or role
Your company size
Your revenue band
Your company name, if you choose to provide it
Your industry
Your responses to the Snapshot assessment questions
Snapshot does not currently include free-text response fields. Company name is optional and only collected if you choose to provide it.
How we collect your data
We collect data directly from you when:
You complete the Snapshot assessment you provide your contact details to receive your report by email
How we use your data
We use your data to:
Generate your Snapshot report send your PDF report to you by email support limited follow-up in relation to your results or relevant TURMA services support short-term internal analysis of Snapshot usage and outputs operate, maintain, and improve Snapshot and related TURMA services
Our lawful bases
We use your data:
Because it is necessary to provide the report you have requested because we have a legitimate interest in operating and improving Snapshot and understanding how the service performs because we have a legitimate interest in following up where Snapshot indicates that TURMA may be able to help, subject to your rights and any applicable marketing rules
Who we share your data with
We use Akili as a processor and technical host for Snapshot. Akili processes the data only on TURMA’s documented instructions and has no rights to use the data for its own purposes.
Based on the current technical setup, Snapshot also relies on the following processor-side service providers to deliver the service:
Vercel for application hosting
Supabase for database and file storage
Anthropic for report generation
Resend for email delivery
We may also transfer relevant lead and report information into TURMA’s CRM where there is a business reason to manage follow-up, retention, or deletion in line with TURMA’s internal rules.
International processing
Snapshot is currently hosted in the United States, using US East infrastructure. Where this involves a restricted transfer of personal data from the UK, TURMA and Akili will rely on an appropriate transfer mechanism, including the UK International Data Transfer Agreement or equivalent permitted safeguard, as applicable.
How long we keep your data
We retain identifiable Snapshot personal data and stored PDF reports for up to 24 months from the date of your report request or last meaningful engagement. After that, we review the data and either delete it or anonymise it unless there is an active relationship that justifies continued retention.
At present, Snapshot does not operate a live anonymised benchmark dataset built from respondent submissions. If TURMA introduces that capability later, identifiable fields will be removed in line with the retention rules above and only anonymised, aggregated data will be retained for benchmarking, sector analysis, and service improvement, subject to annual review.
How we protect your data
We take reasonable organisational, technical, and administrative measures to protect personal data and restrict access to authorised users only. The current Snapshot setup includes encrypted transmission, encrypted storage, role-based access controls, allow-listed administrator access, session controls, and audit logging for key administrative events.
Your rights
Under UK data protection law, you may have the right to:
request access to your personal data request correction of inaccurate data request deletion in certain circumstances object to certain processing, including direct marketing request restriction of processing in some cases complain to the Information Commissioner’s Office
Marketing and follow-up
If TURMA contacts you about your Snapshot results or relevant TURMA services, you can object or opt out at any time.
Contact us
If you have questions about this Privacy Notice or want to exercise your rights, please contact:
privacy@turma.io
If you are unhappy with how we handle your personal data, you can complain to the Information Commissioner’s Office.
Updates to this notice
We may update this Privacy Notice from time to time. The current version will always be made available on our website or in the relevant Snapshot flow.
Short-form website statement
We use your information to generate and send your Snapshot report. We keep identifiable data, including any optional company name you choose to provide, and your PDF report for 24 months, then remove identifying details and retain anonymised data for benchmarking and service improvement only. Please read our Privacy Notice for more information, including your rights and where your data is processed.
Acknowledgement wording
I confirm that I have read the Privacy Notice and understand that my information, including any optional company name I choose to provide, will be used to generate and send my Snapshot report, and that anonymised data may be retained for benchmarking and service improvement.
GAIN BUSINESS CLARITY
