Research Privacy Policy.
Deadhead carries out research to test and improve our understanding of Web3 products, services and market conditions.
This privacy notice gives you general information on how we handle research data.
For more details about a specific piece of research, you can refer to the information sheet provided when you’re invited to take part in that project. This will also include contact details for the researcher and their team in case you have any further questions.
What data we collect from you When inviting you to take part
The personal data we collect from you at this stage could include name, age, email address, sex, ethnicity, disability, details of any condition that can affect your ability to use a digital device, or what type of digital device you use.
We may collect additional information, based on the specific topic being researched. For example, if we’re conducting research on how users with a specific disability access Web3 products and services, we might want to know whether you have that disability.
We sometimes work with other organisations to carry out research. This can include companies that help us recruit people to take part in the research. If we do this, these companies may also collect additional data for which they are the data controller, and their privacy policy will also apply.
During the research session
In most cases, we’ll collect personal data during the research session. This could be in the form of audio recordings, video recordings, screen recordings, written notes, and photos.
We sometimes use external organisations to book a venue for the research outside of our offices and external tools to conduct remote research sessions. This means that a limited number of staff in other organisations may have access to your data. For example, when we use the recording equipment at an external venue.
If we do any of this, we will monitor and limit the access that people outside of Deadhead have to your data. The privacy policies of these external organisations will also apply.
Our legal basis for using your data
We use your data because you have consented for us to do so for this particular piece of research.
Why we need your data
We need information about you when inviting you to take part to ensure that you meet the criteria for this piece of research and that we are including a wide range of people.
We need to collect data during the research session to ensure that we have an accurate record of what happened and what was said. This is important because we analyse this information and use it to draw conclusions about what we should do next.
What we do with your data
We will not:
sell or rent any of your data to third parties
share your data with third parties for marketing purposes unless anonymised beforehand.
We will share your data if we’re required to do so by law. For example, by court order, or to prevent fraud or other crime. We will also share your data in the event of a serious safeguarding concern. For example, if we are concerned about the welfare of a child or vulnerable adult.
When using your responses in reports or presentations, we will anonymise your data so that you’re not identifiable. Each person taking part in a piece of research will be assigned a number, and any names or other personal data will be removed.
Only researchers working at Deadhead will have access to the full original recordings, although we may share short audio or video clips with other colleagues within the business if we have your express permission to do so. If you do not give your consent to this, we may share quotes or clips from the research data; but will ensure you cannot be identified individually.
As your personal data will be stored on our IT systems it will also be shared with third-party organisations that provide our email, document management and storage services, as well as companies that may handle the payment of rewards for taking part in research (for example, Google and Amazon).
How long we keep your data
The data collected when we invite you to take part will be held within our database of research participants, where we will also keep a record of consent, your name, and the data gathered during the research session.
We will hold the data from research sessions, your name, and a record of consent for a maximum of 3 years. After this point, we will ask you if you consent to remaining on our participant database. By default, if you do not respond we will then delete all personal data relating to you, but we might retain reports that contain your anonymised quotes, or surveys where your response is aggregated with other people’s responses.
Where your data is processed and stored
Your personal data may be transferred outside the European Economic Area (EEA) while being processed by Deadhead. If this happens, we’ll make sure you’re given the same level of technical and legal protection as you are within the EEA through Model Contract Clauses or US Privacy Shield.
Who we share your data with
Your personal data may be shared with a limited number of people in other organisations outside of Deadhead, as described above.
Reports containing anonymised findings may be shared beyond Deadhead. For example, with other organisations or charities that we are working with.
How we protect your data and keep it secure
We are committed to doing all that we can to keep your data secure. We have set up systems and processes to prevent unauthorised access to or disclosure of the data we collect about you. For example, we protect your data using varying levels of encryption. All third parties that process personal data for Deadhead are also required to keep that data secure.
Your rights
You have the right to withdraw consent to the processing of your personal data - for example, original recordings and notes where you can be identified. If a report with anonymised quotes has been published (internally or externally) we will not be able to remove this as it does not constitute personal data.
You also have the right to request:
information about how your personal data is processed
that this copy be provided in a structured, commonly used and machine-readable format
that anything inaccurate in your personal data is corrected without delay
that your personal data is erased if there is no longer a justification for holding it
that the processing of your personal data is restricted in certain circumstances (for example, where accuracy is contested)
If you have any of these requests, please contact us using the details in the information sheet provided to you, or the contact details listed below. You can also withdraw by filling out our Request to Withdraw form.
Questions and complaints
If you have questions about research that you’ve been invited to participate in, you can contact the researcher named on the information sheet provided to you.
Contact the Research Team at Deadhead if you:
have any questions about anything in this document
think that your personal data has been misused or mishandled
want to make a subject access request (SARS)
wish to withdraw your data from research
Email: hello@deadhead.digital
You can also complain to the Information Commissioner, who is an independent regulator.
Information Commissioner's Office
Email: casework@ico.org.uk
Contact form: https://ico.org.uk/glo...
Telephone: 0303 123 1113
Textphone: 01625 545860