Data Protection

01Our principles

02Data minimisation

We aim to collect information that is relevant to the research requirement rather than unnecessary personal information. The information required for a general consumer survey may be very different from that needed for a specialised B2B or healthcare project, so each methodology is designed around the specific requirements of the project.

Where possible, we separate contact details from survey responses and use respondent IDs instead of names in datasets.

03Access controls

Access to project information is limited to people who need it for legitimate project responsibilities. Role-based permissions, secure credentials and access reviews help reduce unnecessary exposure of confidential information.

04Security measures

Depending on the project, measures may include:

• Encrypted transfer of data files and secure client portals instead of email attachments for sensitive data
• Access-controlled storage with logging
• Separation of personally identifiable information from response data
• Secure configuration of survey platforms and CAPI/CATI devices
• Confidentiality agreements with staff, interviewers and partners
• Staff training on data protection and information security
• Incident response procedures, including notification where required by law

These practices are supported by our information security management system. Certifications are shown on our About Us page.

05Confidentiality

Research briefs, questionnaires, datasets, project specifications, participant information and findings may contain commercially or personally sensitive information. We treat confidential project information with appropriate care and use it only for legitimate project purposes. Client identities are not disclosed without permission.

06Working with partners and processors

Where we work with fieldwork partners, panel providers or technology suppliers, we choose them carefully, share only the data they need, and put written agreements in place covering confidentiality, security and permitted use.

07International data transfers

Multi-country research may involve transferring data across borders. We take reasonable steps to ensure appropriate safeguards are in place, in line with applicable law and client requirements.

08Data retention

Information is not retained indefinitely without a legitimate reason. Retention depends on the nature of the project, contractual requirements, legal obligations, research requirements and the type of information involved.

As a general approach, identifiable contact details collected for a single project are deleted or anonymised after the project and any agreed quality-check period ends; anonymised datasets may be retained for longer where agreed with the client; panel member data is retained while the membership is active and for a limited period after closure; and website enquiry data is retained for as long as needed to handle the enquiry and any resulting relationship. Specific periods are agreed per project.

09Responsible data handling across the project

Our data-protection practices support research integrity at every stage, from initial briefing through fieldwork, quality control, analysis and final reporting. This is especially important in large-scale projects with multiple methodologies, geographies, respondent groups and stakeholders, such as our Government & Opinion Poll Research.

10Requests and incidents

Individuals can contact us about their personal data at info@frequentresearch.com. Clients can request details of the data-protection measures applied to their project. If we become aware of a data incident, we act to contain it, assess the risk and notify affected parties and authorities where required.