Privacy Notice for Research Participants

Who we are

STEVE BROMLEY USER RESEARCH LTD, trading as Research That Matters, is a user research agency conducting interviews and focus groups.

We act as the data controller for the personal data we collect.

Registered address:
Suite 1, The Courtyard
The Old Monastery, Windhill
Bishop's Stortford, Hertfordshire
England, CM23 2ND

Contact:
steve@researchthatmatters.com

What this notice covers

This privacy notice explains how we collect, use, and protect your personal data when you take part in our research, including:

• Remote interviews

• Online focus groups

• Sessions involving parents and children

What data we collect

We aim to collect the minimum amount of personal data necessary.

Depending on the study, we may collect:

• Name and email address (for scheduling and communication only)

• Audio and video recordings of research sessions

• Research notes taken by the researcher

We do not intentionally collect demographic or sensitive personal data unless it is clearly required for a specific study and you have provided informed consent.

Children and parent participation

For sessions involving children:

• A parent or legal guardian must be present at all times

• The parent/guardian provides consent for the child’s participation

• Communication and consent are handled via the parent/guardian

How we use your data

We use your data to:

• Arrange and conduct research sessions

• Record sessions for analysis

• Identify patterns and insights

• Produce anonymised research findings

We do not use your data for marketing purposes.

Legal basis for processing

Under UK GDPR, we rely on:

• Consent – for participation and recording of sessions

• Legitimate interests – to conduct user research and produce insights for clients

You can withdraw your consent at any time.

Who we share your data with

We do not share identifiable personal data or recordings with clients.

Clients receive:

• Anonymised summaries and insights only

• Quotes or clips that do not identify you

We may use trusted tools to run and store sessions, including:

• Google Meet (for interviews and focus groups)

• Google Drive (for secure storage)

These providers may process data on our behalf.

International transfers

Some service providers (such as Google) may process data outside the UK.

Where this happens, appropriate safeguards are in place in line with UK data protection law.

How long we keep your data

We retain research data for up to 2 years, after which it is securely deleted.

You can request deletion of your data at any time, and we will comply wherever possible.

Incentives

If you receive an incentive for participating:

• We may use your contact details to arrange delivery (e.g. vouchers)

• Your details are only used for this purpose

Your rights

You have the right to:

• Access your personal data

• Request correction of inaccurate data

• Request deletion of your data

• Withdraw consent at any time

To exercise your rights, contact us at: steve@researchthatmatters.com

You also have the right to complain to the Information Commissioner's Office (ICO).

How we protect your data

We take appropriate security measures, including:

• Secure storage using trusted platforms

• Restricted access to recordings and research data

• Limiting data collection to what is necessary

Updates to this notice

We may update this privacy notice from time to time. The latest version will always be provided before you participate.