Privacy Policy – Mystery Shoppers

Effective from 1st June, 2018

ITS Incognito Limited collects and processes personal information, or personal data, relating to its mystery shoppers to manage the working relationship. This personal information is held in electronic format.

ITS Incognito is committed to being transparent about how it handles your personal information, to protecting the privacy and security of your personal information and to meeting its data protection obligations under the General Data Protection Regulation (“GDPR”) and the Data Protection Act 2018. The purpose of this privacy notice is to make you aware of how and why we will collect and use your personal information both during and after your working relationship with ITS Incognito Limited. We are required under the GDPR to notify you of the information contained in this privacy notice.

This privacy notice applies to all current and former mystery shoppers and is non-contractual.

We have a duty of care to the people whose details are stored within our database. We will never sell, rent or otherwise distribute or make public your personal information.

What we collect

We collect and process the following data on our Mystery Shoppers:

  • Name
  • Contact information including email address
  • Demographic information such as postcode, preferences and interests
  • Other information relevant to mystery shopping assignments

How is this information collected?

We retain the information that you provide by filling in the application form on our site. We will also collect additional personal information in the course of your mystery shopping activities.

Where is this information stored?

Your personal information may be stored in different places, including our online reporting system and other IT systems, such as the e-mail system.

How and why do we use your personal information?

We require this information to:

Enable us to maintain accurate and up-to-date contractor records and contact details
Assess your suitability for a mystery shop assignment
Maintain an accurate record of your contract terms
Contact you with available mystery shops in your area
Manage, plan and organise mystery shops
Ensure you are paid correctly
Make decisions about continued engagement
Administer the contract we have entered into with you
Ensure adherence to company rules, policies and procedures
Enable us to establish, exercise or defend possible legal claims


We are committed to ensuring that your information is secure. We will take reasonable steps to ensure that your data is treated securely and in accordance with this privacy policy. We limit access to the information by our own employees, and contractors. We may also share your personal information with third-party service providers (and their designated agents), including:

  • Shopmetrics – the company that facilitates our online reporting system and allows you to carry out our Mystery Shopper assignments.

If as part of a mystery shopping assignment, it is required that any of your personal information needs to be shared with the Client, this will be clearly noted on the Shopper Scenario and it is up to you to decide whether you would like to carry out the assignment or not.

Unfortunately , the transmission of information via the internet is not completely secure. Although we will take reasonable steps to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to safeguard and secure the information we collect online and prevent unauthorised access.

For how long does ITS Incognito retain your personal information?

If you apply to be a Mystery Shopper for ITS Incognito but are not taken on immediately, we will normally retain your details in order to be able to contact you again in future if we have a suitable opportunity for you.

ITS Incognito will only retain the personal information of Mystery Shoppers for as long as is necessary to fulfil the purposes for which it was collected and processed, including for the purposes of satisfying any legal, tax, reporting or accounting requirements.

ITS Incognito will generally store your personal information for as long as you are an active Mystery Shopper with us. The exceptions are:

Once you have deactivated your account or your engagement has been terminated, we will generally retain your personal information for six years after the termination of your engagement in order for us to have a history of previous assignments, performance and users. This is also to protect against legal risk, e.g. if they could be relevant to a possible legal claim.

Personal information which is no longer to be retained will be securely and effectively destroyed or permanently erased from our IT systems and we will also require third parties to destroy or erase such personal information where applicable.

In some circumstances we may anonymise your personal information so that it no longer permits your identification. In this case, we may retain such information for a longer period.

Controlling your personal information

You have the right to ask us to delete or amend personal data that we hold about you.
You have the right to object to the processing of your personal information.

Changes to our privacy policy

This privacy policy may change from time to time in line with legislation or industry developments. We will not explicitly inform our Mystery Shoppers or Mystery Shopper applicants of these changes. Instead, we recommend that you check this page occasionally for any policy changes.

Mystery Shopper
Mystery Shopper Programme
ITS Incognito provides a high quality service to the Merlin Events team.
Merlin Events

Find out more >>
Mystery Guest