Privacy admin March 31, 2022

Privacy Notice

This Privacy Notice explains how Recipe collects and uses personal data.

If you have any further questions, please contact

This policy was last updated on: 4th May 2020

Who are ‘we’?

‘We’ refers to Recipe Design Limited (‘Recipe’).

Our registered address is Belgrave House, 39-43 Monument Hill, Weybridge, Surrey KT13 8RN, United Kingdom, but we operate from studios in London. You can find our address details and directions to the studio on our Contact Us page.

We provide strategic design and consulting services for companies around the world. If you want to find out more about our work, see the About page.

For European Union data protection purposes, when we act as a controller in relation to your personal data, our Company No is 12428367 and our ICO Notification Number is ZA754246.

We might control your personal data for the following reasons. Click on the link to find out more about why we collect your data, how we use it, and how we store and protect it.

If you take part in research carried out by Recipe

Recipe conducts research with people (often referred to as ‘research respondents’) as part of our work.

Most of the time we use recruitment agencies (‘recruiters’) to find and make contact with suitable research respondents. Recruiters keep databases of people who have given consent to be contacted for research purposes. The recruiters Recipe use comply with GDPR and the Data Protection Act 2018.

Sometimes Recipe contacts potential research respondents directly, using publicly available information such as LinkedIn or company websites. We will only continue to communicate with people who express interest in participating in the specified research. The individual’s data will not be used for any other purpose.

When first contacted, by either a recruiter or Recipe, potential respondents are made aware of the type of research being conducted, the client or industry it is being conducted for and when it will be taking place.

If you have agreed to participate in research, the recruiter passes contact details (name, email, phone numbers) and any personal details required by the study to Recipe. For example, this may include your age or type of job. We use this data to prepare for the session and contact you in case of an emergency.

Before the session begins, Recipe asks you to sign a consent form which explains the purpose of the research and the types of data being recorded, for example video or audio recordings. The consent form asks for name, address, contact number and signature. We collect this information to verify your consent to participate in the study, your acknowledgment of the study’s conditions, and your receipt of any incentive. We keep consent forms for up to 10 years to provide proof of your consent to participate in the research and to verify your identity should you request access to your data.

As part of its work, Recipe analyses and processes the data you share during the session. As part of this process, your data will be anonymised (given a code) or pseudonymised (given a false name) to prevent further identification. We store any documents that link identifiable personal data to processed data in a secure location, kept separate from the work itself, and accessible only to specific employees.

If at any time before, during or after the research session you no longer wish to participate and would like your data to be removed from the study and Recipe archives, please notify a member of Recipe in person, contact the recruiter who initially contacted you or email Recipe will erase all of your data

Recipe sometimes uses third parties to help process the data collected, such as transcription and translation services. All third parties we use comply with GDPR and the Data Protection Act 2018. Data is transmitted using secure upload links and is never shared with further parties.

If you have expressed interest in our services or are a client

If you submit your details to request more information about our services, Recipe uses your data to contact you regarding this enquiry.

If you are a client, Recipe uses your contact details to communicate previous or current project information and discuss potential new work.

Recipe may contact prospective clients using publicly available information (such as LinkedIn or company websites) or information received consensually (for example, by the exchange of business cards).

Recipe does not buy or sell client data. Any third parties contracted to assist with New Business initiatives do so in a GDPR compliant manner.

If you have received marketing communications (digitally or physically) from Recipe

From time to time, Recipe may send marketing communications to individuals or companies whom Recipe feels would have legitimate interest in receiving them. For example, these might be books you might find interesting, magazines and journals we’ve published or contributed to, or invitations to events we’re hosting

If you no longer wish to receive marketing communications from Recipe, please email , stating the communications you no longer wish to receive.

If you have applied for a job or provided a reference

Recipe will keep your application, including any attachments (CV, portfolio, etc.) for up to 1 year from the date submitted and use your submission to assess your eligibility for the role applied for and any roles that arise within that year. Recipe will not use your data for any other purpose but to communicate about potential employment.

If an applicant provides your details as a reference for a job application, Recipe will contact you to seek feedback about the applicant and will store that data securely for up to a year after the hiring decision. Recipe will not use your data for any other purpose.

Your rights as a Data Subject

Anyone whose data Recipe holds (data subjects) has the right to know about any and all of the data Recipe holds about them. You can request this information by emailing

You also have the right to:

  • Have incorrect, inaccurate or out-of-date data corrected or updated
  • Restrict the use of your personal data, by specifying what it can and cannot be used for
  • Have any or all of your data erased from our systems and archives, at any time
  • We do not make use of automated decision making or profiling, nor do we provide services which require data to be transferred in a portable format.

To contact us about exercising any of these rights, please email us at

You can find full details of your personal data rights on the Information Commissioner’s Office website at

You are also entitled to make a complaint to the Information Commissioner’s Office which you can do by visiting Whilst you are not required to do so, we encourage you to contact us directly to discuss any concerns that you may have and to allow us an opportunity to address these before you contact the Information Commissioner’s Office.

This policy was last updated on: 4th May 2020