Privacy and consent
Identify the participation, recording and data-handling choices that a study needs.
Review the participation notice
Before fieldwork, review who the research is for, why it is being run, what participation involves and how someone can ask about their data. Check the notice for the study and language you are actually using.
The respondent privacy notice is available separately. The study introduction and any processing agreement should describe the actual collection and handling arrangements.
Separate the choices
Participation, recording and retained media can involve separate permissions. An optional photo or video task must respect a refusal without inventing evidence. Check the respondent's available withdrawal path and any receipt they need to retain.
If a respondent withdraws consent or retained media, follow the applicable process and check that subsequent analysis and shared outputs respect the change. Confirm what happens to files already downloaded by recipients.
Limit access and distribution
- Upload only the contact details and attributes needed for the study.
- Use approved workspace access and share controls.
- Avoid personal data in URL parameters and initial support messages.
- Review quotes and exports for identifying details before distribution.
- Agree retention and deletion responsibilities for each party.
Request the company review pack
Ask the team for current contractual terms, a processing agreement where applicable, processor/subprocessor information, storage and transfer details, and security evidence. Confirm the exact deployment and services covered.
Do not infer a certification, a guaranteed data region or an agreed retention period from the product interface. Use verified contractual and operational records for those requirements.