Privacy

Privacy Policy


Who we are

Qa Research Ltd is a Market and Social Research Company based in the UK. Our company registration is 3186539 and our registered address is Merchant House, 11a Piccadilly, York, YO1 9WB.

Our sole activity is conducting research projects in response to the needs of our diverse range of clients, which come from the public, private and third (charity) sectors.

Participation in the research we conduct is always entirely voluntary. This Privacy Policy outlines the processes and procedures we follow when collecting and using personal data.

The personal data we collect

For every research project we undertake, we take care only to collect information that is needed for that research. We will never use the information you provide for any purpose other than research, and you will not be adversely affected by taking part in our research.

We will collect your views and opinions about the subject we are researching. We never sell, promote or market any products and services provided by our clients.

We may also ask you for personal information about yourself (for example; your gender, age and postcode, ethnic background or origin, religious or philosophical beliefs, health, trade union membership, political beliefs, sex life or sexual orientation). Usually, you don’t have to answer any question we ask if you don’t want to. However, for some research projects we need an answer to some questions to be able to include your views in the research. If this is the case we will let you know at the start, so you can decide if you want to answer and take part or not.

If we ask you to give us your name and contact details, we will always explain what they will be used for at the time we collect them and obtain your permission to use them for that purpose. We’ll also ensure they are only used for that purpose.

The main reasons we would ask for your name and contact details are as follows;

The lawful basis for collecting your data

Under the General Data Protection Regulation (GDPR), there are 6 lawful bases that can be used to legally collect personal data. For our research projects we will generally rely on consent, legitimate interest or public task/public interest as the lawful basis for data collection. However, each project differs, so the lawful basis will be made clear to individuals on a project-by-project basis in an accompanying privacy notice.

Where Qa Research uses personal data for the purpose of quality control, the lawful basis is legitimate interest.

Other data we may hold about you

We may hold data about you that you have not provided directly to Qa Research, as follows;

How we use your data

We use your personal data in the following ways:

We always explain how your data will be used at the time we invite you to take part in the research, including confirming that the research is anonymous or confidential; in most cases our client will not know who took part in the research.

If we want to re-contact you for a specific purpose at a later date, we always ask your permission at the time you take part in the research, and will only contact you for that purpose.

We use the data we collect about you to undertake genuine research. As soon as possible, we will anonymise your data by removing anything that could identify you. We usually report research findings in an anonymised (it will not be possible to identify you) and aggregated (which means mixed in with the views of many other people) format.

On some occasions, we may ask for your permission to identify you to our client, but we will explain why we want to do this and we will only identify you with your permission.

Access to your personal data is strictly controlled and limited to Qa Research employees on a need to know basis.

Call recording

If you have been contacted by phone, all calls are recorded from the moment the call is connected. Once we have explained our reason for calling you (to carry out research) and you have expressed an interest in taking part, we ask for your consent to recording the rest of the call. Recordings will only be used for the following purposes:

For quality control purposes – We record calls for quality control purposes so that we can check the work of our interviewers, to ensure they are following the MRS Code of Conduct, and to comply in with the requirements of ISO 20252, the International Standard for Market and Social Research, to which Qa Research is registered. Hence the legal basis for processing this personal data is our legitimate interest.

For research purposes – If we need to record your interview for research purposes, we will explain how the recording will be used and who will have access to it, and ask for your consent to the recording. The recording will only be used for the purpose you consented to, and will not be passed on to our client or any other third party unless you gave your consent.

Participant data base

If you are recruited by one of our interviewers to take part in discussion at a focus group or deliberative event, we keep a record of the date, your name and telephone number, along with the recruiter’s name. We only use this information to make sure the recruiter has followed the instructions we give them about how to find people to take part in the research. It is not used for any other purpose and it is not shared with any other organisation. Qa Research is the Data Controller for this data, and the legal basis for processing is legitimate interest.

Sharing your data with others

There are some very limited circumstances under which we would share your personal data with third parties, as follows;

In these circumstances the third party would act as a data processor to Qa Research and a sub-contractor agreement would be in place to confirm that they are dealing with personal data legally.

All our suppliers are located in the UK; we will never transfer personal data outside of the EU.

How long we will keep your data for

We will only keep your personal data for as long as we need it, then we will securely delete or destroy it.

When a client shares your personal data with us so we can invite you to take part in research, or we purchase a database of contacts from a commercial sample provider, we delete this data within four months of completing the research project.

We keep personal data collected for research purposes (including completed questionnaires and audio recordings of in-depth interviews and discussion groups) for 12 months after completion of the research project, in line with the requirements of ISO: 20252, the International Standard for Market and Social Research to which Qa Research is registered.

Call recordings made for quality control purposes will be deleted within 4 months of the date of the call.

Personal data in our participant database is kept for two years and then deleted.

If you have contacted us to request that you are not contacted again by Qa Research, we will keep a record of your contact details so we can exclude you from our future research projects, where it is possible to do so. If we do not do this we may contact you inadvertently against your wishes.

Your rights under GDPR

Individuals have certain rights under GDPR over their personal data and data controllers have a responsibility to fulfil these rights.

In some instances Qa Research will be the data controller (or joint data controller) for an individual research project, but in other cases we will be acting as a data processor and our client would be the data controller. For each project, we will clearly specify who the data controller is, so you know who to contact in order to exercise your rights.

Qa Research is the data controller for any personal data we use for quality control purposes.

The rights of individuals under GDPR are explained below. Different rights apply to individual research projects, depending on the legal basis being used for the research. So which rights apply to you will be made clear in a privacy information notice for the research project you have been asked to take part in. This notice will be made available to you when you are invited to take part in research or at an appropriate point in the interview.

An individual’s rights under GDPR are;

You can contact us to fulfil any of your rights under GDPR either via email (DPO@qaresearch.co.uk) or by phone (01904 632039). We will respond to your request within legal time limits and in line with current data protection legislation. Normally, we will not charge for the fulfilment of your rights and would only do so when legally entitled to.

How we keep your information safe

We use a wide range of technology to ensure that any personal data we hold is processed, stored and transferred in a secure way. This includes encryption, password protection and limiting access to personal data to key staff only.

We hold Cyber Essentials accreditation and we regularly review our processes, hardware, software and policies to ensure we process personal data securely.

How to contact us

You can contact us to fulfil any of your rights under GDPR either via email, by phone or in writing as follows:

Telephone:

01904 632039

Email:
DPO@qaresearch.co.uk

Address:

Data Protection
Qa Research
Merchant House,
11a Piccadilly,
York, YO1 9WB

For further information about Market Research and to confirm that we are a bona fide market research company you can contact the Market Research Society on their Freephone number 0500 39 69 99.

Your right to make a complaint

You have the right to make a complaint to the Information Commissioners Office (ICO) if you are unhappy with the way Qa Research Ltd processes your personal data. The ICO can be contacted at ico.org.uk or by calling 0303 123 1113.

 

Last updated: 12 February 2019