This privacy policy applies to current and past clients, as well as potential clients of People for Research Ltd. If you are a participant in user research, please visit our Participant Privacy Policy page.
1. Introduction
1.1 People for Research Ltd., a company based in the UK, is registered with the Information Commissioner’s Office (ICO), the organisation that regulates data protection in the UK. View our proof of ICO registration.
1.2 People for Research (PFR) works in a fully compliant manner, in line with the current data protection legislation. Find out more about the Data Protection Act 2018 and the GDPR.
2. The type of personal information we collect
We currently collect and process the following information:
For all website visitors, we collect non-identifiable statistical data, collected via Google Analytics’ first-party cookies.
If you visit our website and decide to get in touch with us either via phone or email, we will collect your:
- Company name
- First and last name
- Job title
- Email address
- Phone number
3. How we collect personal information and why we store it
3.1 Most of the personal information we process is provided to us directly by you for the following reasons:
- Because you want to find out more about our user recruitment services
- Because you have requested a quote
- Because you signed up to our marketing mailing lists
3.2 On some occasions, we may also receive some of your personal information indirectly for the following purposes:
- To receive a quote
- To discuss a project and / or our services
- To work on a user recruitment project with you or your team
- To deal with legal or financial requirements associated with a project
- Any other scenarios where a colleague may share your data with us so we can continue working together on a project
3.3 Depending on what you agreed to, we use the information that you have given us to reply to your requests, provide more information about our services, send you our marketing communications and deliver our services.
3.4 If you have instructed us to do so, we may share this information with the participants that we recruit for your project.
3.5 Under the UK General Data Protection Regulation (UK GDPR), the lawful bases we rely on for processing this information are:
(a) Your consent: This applies if you have been in touch with us to request information about our services or signed up to our marketing mailing lists. In a scenario where People for Research and the company you represent don't move towards the contract stage, you can remove your consent at any time and request the permanent deletion of your data. You can do this by contacting gdpr@peopleforresearch.co.uk.
(b) We have a contractual obligation: This applies if People for Research and the company you represent (or yourself, as a self-employed individual) are at the stage of starting a project together or currently working on a project together.
(c) We have a legal obligation: This applies if People for Research and the company you represent (or yourself, as a self-employed individual) have previously worked on a project together and we have a legal obligation to keep some of your data if, for example, you have signed a contract or any other legal documents as part of the working relationship between the parties.
(d) We have a legitimate interest: This applies where People for Research and the company you represent have previously worked on a project together, allowing us to maintain a business archive of signed contracts, project briefs, client contact details, and records of past work. This also applies to managing ongoing business development and reaching out to you regarding future project opportunities. You have the right to object to this processing at any time by contacting gdpr@peopleforresearch.co.uk.
4. How we store your personal information
4.1 Your personal data is securely stored in our internal systems and any third-party platforms we may use.
4.2 All systems we use to store and process personal data are encrypted both in transit and at rest. Before onboarding any external platform, we ensure it is fully compliant with UK GDPR and put in place a Data Protection Agreement to protect both PFR and your personal data.
4.3 We keep any personal data we process based on informed consent for a period of six years and / or for as long as we have your consent to do so. We will then dispose of your information by permanently deleting it from all our systems and third-party platforms.
4.4 We keep any personal data we process based on contractual or legal obligation for a period of six years once a project finishes, to meet tax laws and legal obligations. We will then dispose of this data by permanently deleting it from all our systems and third-party platforms. However, to maintain a business archive and support future work, signed contracts, project briefs, client contact details and records of past projects are kept for as long as records remain commercially necessary, under our Legitimate Interests (Article 6(1)(f) of the UK GDPR).
We keep any personal data we process based on contractual or legal obligation for a period of six years once a project finishes, to meet tax laws and legal obligations. After this period, personal data within contracts, project briefs and associated records, such as individual names and contact details, will be permanently deleted or redacted. The underlying business records may be retained for longer where they remain commercially necessary for business history and analysis, under our Legitimate Interests (Article 6(1)(f) of the UK GDPR), provided they no longer contain any personally identifiable information.
5. Your data protection rights
Under data protection law, you have rights including:
- Your right to be informed: You have the right to be informed about how we collect and use your personal data.
- Your right of access: You have the right to ask us for copies of your personal information.
- Your right to rectification: You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
- Your right to erasure: You have the right to ask us to erase your personal information in certain circumstances.
- Your right to restriction of processing: You have the right to ask us to restrict the processing of your personal information in certain circumstances.
- Your right to object to processing: You have the right to object to the processing of your personal information in certain circumstances.
- Your right to data portability: You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
- Your rights related to automated decision-making: You have the right to object to decisions being made solely by automated processes or profiling.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
Please contact gdpr@peopleforresearch.co.uk, call +44 (0)117 921 0008 or post a letter to People for Research, Suite 302, QC30 Queen Charlotte Street, Bristol BS1 4HJ if you wish to make a request.
6. International data transfers
6.1 Personal data we hold about you may be stored or processed using platforms whose servers are based outside the UK or European Economic Area. Before onboarding any such platform, we ensure it is fully GDPR-compliant and implement a Data Protection Agreement.
7. Our roles and responsibilities
7.1 People for Research acts as the controller of any personal data you share with us as a client, such as your contact details. This means we are responsible for deciding how and why your data is used, in line with this privacy policy and UK GDPR.
7.2 Where you share your customers' personal data with us for user recruitment, you remain the controller of that data and People for Research will act as the processor, or in some cases sub-processor. In these circumstances, we will only process your customers' data in accordance with your instructions and our agreed terms.
8. Data breaches
8.1 We have a strict protocol for dealing with potential data breaches, developed in line with current data protection legislation and ICO recommendations. In the event of any actual or potential loss of personal data, we will notify all relevant parties as soon as possible and in any event within 72 hours of identifying the breach.
9. Cookies and tracking technologies
9.1 By using our website, you consent to our use of cookies in accordance with our Cookies Policy.
9.2 We use the Meta, LinkedIn, TikTok and Reddit pixels on our website. These pixels track user behaviour after you have been redirected to our website by clicking on one of our advertisements. This helps us measure the impact of our advertising. The data collected is anonymous to us but may be stored and processed by the relevant third-party platform in accordance with their own data usage policy.
9.3 We only enable tracking pixels after receiving your explicit consent via our cookie banner.
10. Requesting deletion of your data
10.1 You can withdraw your consent or request the deletion of your personal data at any time by emailing gdpr@peopleforresearch.co.uk from the email address we hold on file for you, as this helps us verify your identity quickly.
If you are unable to contact us this way, you can still reach out via any of our other contact channels. We will ask you to provide some additional details to confirm your identity before we process your request. Please note that where we process your data under a contractual or legal obligation, we may not be able to delete all records immediately, as explained in section 4.
11. How to complain
11.1 If you have any concerns about our use of your personal information, you can raise a complaint with us by emailing gdpr@peopleforresearch.co.uk, calling +44 (0)117 921 0008 or posting a letter to People for Research, Suite 302, QC30 Queen Charlotte Street, Bristol BS1 4HJ.
We will acknowledge your complaint within 30 days of receiving it, investigate it appropriately and communicate the outcome to you.
11.2 You can also complain to the ICO if you are unhappy with how we have used your data. The ICO’s address is: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk
Last reviewed in July 2026.