Who is responsible

UKGDPR Limited is the controller for the personal data described in this notice. For any question about it, or to exercise your rights, write to [email protected].

This website

No cookies, no analytics, no tracking pixels, and no content fetched from other companies: the fonts are served from this site. Our hosting provider handles the technical delivery of the pages; we do not use its logs to identify or profile visitors.

When you email us

If you write to join the research, register to receive the detailed findings, or ask to be kept up to date, we hold your name, your email address, your company where you give it, and the content of your message.

• To answer you and to send what you asked for, including each detailed report as it is published.
• To send occasional updates about the project to people who have contacted us. Every email carries an unsubscribe link, and one click ends them.

Our lawful basis for both is legitimate interests: responding to the people who write to us, and keeping the people interested in the project informed about it. You can object at any time by unsubscribing or by writing to us, and we will stop.

Who else sees it

Nobody, except the email service provider that sends our messages on our instructions. We do not sell, share or trade your details.

How long we keep it

For as long as you want to hear from us. If you unsubscribe or ask us to stop, we remove your details from our mailing records; we may keep a note of your request so that we do not contact you again by mistake.

Your rights

You have the right to access, correct, erase, restrict and object to our use of your personal data, and to receive a copy of it in a portable form. You can also complain to the Information Commissioner's Office, or to your local supervisory authority.

The DPO Bench application

People who take part in the experiment itself use a separate application with its own notice, which covers the data handled there.