GDPR Compliance Statement

Our Commitment at a Glance

TrendX Insights acts as the data controller for personal data collected through this website and in the course of delivering our syndicated market research reports, custom research, and consulting services. We treat privacy as a fundamental right, and the GDPR’s standards inform how we handle personal data for all our clients, wherever they are based.

How TrendX Insights Uses Personal Data

We process personal data only where it is necessary to deliver our industry reports and intelligence services, and only in the context of specific interactions with our clients:

• Report Purchases & Research Engagements: Processing payments, delivering purchased reports in PDF and Excel formats, and managing ongoing research engagements.
• Proposal Requests & Consulting Inquiries: Reviewing your business requirements to scope and prepare tailored research and consulting proposals.
• Contact & Inquiry Forms: Responding to your questions about our methodologies, report coverage, pricing, or custom data needs.
• Customer & Post-Sale Support: Assisting you with report queries, clarifications, and analyst support during our 12-month post-sale support period.

The personal data involved is typically limited to professional contact details, such as your name, business email address, company name, and job title, together with the content of your inquiry.

Data Protection Principles & Lawful Bases

We follow the GDPR’s core principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, and integrity. We do not over-collect data, and we do not retain it longer than necessary. Every processing activity rests on a clear lawful basis under Article 6 of the GDPR:

• Consent: Where you have explicitly given us permission, for example to receive research updates. You may withdraw consent at any time, and withdrawal is as easy as giving it.
• Contract: Where processing is necessary to fulfil our obligations to you, such as delivering a purchased market research report or providing post-sale support.
• Legal Obligation: Where we must retain certain financial and transaction records to comply with tax, accounting, and regulatory requirements.
• Legitimate Interests: Where processing supports essential business operations, such as preventing fraud, securing our systems, or improving our services, and we have confirmed that these interests do not override your fundamental rights and freedoms.

Cookies & Tracking

We do not use cookies, advertising trackers, or behavioural profiling technologies on this website. You can browse our website, explore our report catalogue, and read our research insights without your activity being tracked or stored on your device.

Because we do not deploy cookies, no cookie consent is required to use our website. If this practice changes in the future, we will update this statement and our Privacy Policy, and introduce a compliant consent mechanism before any cookies are set.

Security Measures

Safeguarding client data is central to how we operate. In line with Article 32 of the GDPR, we apply technical and organisational measures appropriate to the risk, designed to protect personal data against unauthorised access, alteration, disclosure, or loss:

• Encryption in Transit: All data exchanged between your browser and our servers is protected with SSL/TLS encryption.
• Secure Hosting: Our website and databases are hosted in enterprise-grade, access-controlled environments.
• Access Controls: Client information is accessible only to authorised TrendX Insights personnel with a strict, documented business need.
• Encrypted Backups: We maintain regular encrypted backups to guard against accidental data loss.
• Vulnerability Monitoring: Our infrastructure is routinely scanned for vulnerabilities, malware, and emerging threats.

No method of transmission or storage is entirely free of risk, but we continuously review and strengthen our security practices to keep your data protected.

Your Privacy Rights Under the GDPR

The GDPR gives you meaningful control over your personal data. We facilitate all of the following rights free of charge and respond to verified requests within one month:

• Access & Portability: Request a copy of the personal data we hold about you, in a structured, commonly used format, or ask us to transfer it to another provider.
• Rectification: Ask us to correct or complete any inaccurate or outdated information.
• Erasure: Request permanent deletion of your personal data where it is no longer needed for the purposes it was collected.
• Restriction & Objection: Ask us to limit how we use your data, or object to specific processing activities, including opting out of direct marketing at any time.
• Withdrawal of Consent: Withdraw any consent you have previously given, without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, email our privacy team at business@trendxinsights.com. If you are located in the EEA or UK and believe your concerns have not been adequately addressed, you also have the right to lodge a complaint with your local data protection supervisory authority.

Third-Party Processors & International Transfers

We work with a small number of carefully selected service providers, such as payment processors and secure email platforms, to deliver our services. Each provider is bound by data processing terms requiring GDPR-equivalent standards of protection, and processes data only on our documented instructions.

As a company headquartered in India serving clients globally, personal data may be processed outside the European Economic Area (EEA) and the United Kingdom. Wherever data is transferred internationally, we rely on approved legal safeguards, such as Standard Contractual Clauses or transfers to countries recognised as providing adequate data protection, so that your data receives the same level of protection regardless of where it is processed.

Data Breach Notification

We maintain an established incident response plan for the unlikely event of a personal data breach. Where a breach is likely to result in a risk to individuals’ rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of it, as required by Article 33 of the GDPR. Where the breach poses a high risk to you personally, we will inform you directly and without undue delay, along with the steps we are taking in response.

Contact Us

If you have questions about our GDPR compliance, our data processing activities, or your privacy rights, or if you wish to submit a data subject request, please contact our designated privacy contact:

For complete details of our data practices, please review our Privacy Policy and Terms & Conditions.