Privacy Policy

---

At SBA Consulting ("we," "us," or "our"), we are committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy outlines how we collect, use, store, and protect information obtained through your participation in our research and evaluation projects.

As members of the Market Research Society (MRS), we adhere to its Code of Conduct, ensuring the highest standards of ethical and professional research practices.

We collect personal data directly from individuals who participate in our research and evaluation activities. This may include:

• Contact Information: Name, email address, phone number, and mailing address.
• Demographic Information: Age, gender, occupation, and other relevant details.
• Responses: Information provided during surveys, interviews, or other research methodologies.

The personal data collected is used solely for the purposes of conducting research and evaluation pertaining to the specific project for which you have applied. This includes:

• Reviewing and processing your application to participate in the project.
• Analyzing data to generate insights, reports, and recommendations for the project's objectives.
• Communicating with you regarding project-related updates, results, or next steps.

If your application is unsuccessful, your personal data will be deleted unless you explicitly consent to being included in our database for consideration in future research opportunities.

We ensure that all data is processed in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Participants are recruited directly through voluntary applications or referrals. All recruitment processes are carried out with full transparency, and no automated decision-making systems are used to evaluate applications.

We do not knowingly collect or process personal data from individuals under the age of 16 without parental consent. Where applicable, participation in our research involving minors will require explicit consent from a parent or guardian.

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected. If an individual is not selected for a particular project, their personal data will be deleted unless they have explicitly consented to be included in our database for future research opportunities. Individuals who opt to remain in our database can withdraw their consent at any time by contacting us at Sarah@sba-consulting.co.uk

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. This includes secure storage solutions, encryption, and access controls.

We do not sell or rent your personal data to third parties. However, anonymized or aggregated data may be shared with project partners or clients for research purposes. Additionally, we may engage trusted third-party service providers to assist with data processing and storage. All third parties engaged in such activities are required to comply with GDPR and other applicable laws.

Under the GDPR, you have the following rights regarding your personal data:

• Access: Request access to the personal data we hold about you.
• Rectification: Request correction of any inaccurate or incomplete data.
• Erasure: Request deletion of your personal data under certain conditions.
• Restriction: Request restriction of processing your data under certain circumstances.
• Data Portability: Request transfer of your data to another organisation or directly to you.
• Objection: Object to the processing of your personal data under certain conditions.

To exercise any of these rights, please contact us at Sarah@sba-consulting.co.uk

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. Any updates will be posted on this page, and we encourage you to review it periodically.