...

Respondent Privacy Notice

Last reviewed: October 2025

1. Purpose of this privacy notice

At STRAT7 we provide various market research services including designing market research surveys, hosting opinion panels and providing audience research services and statistical analytics to global businesses (“Services”). As a market research group, we are committed to protecting the privacy of research respondents in connection with the provision of our Services.

This Privacy Notice explains how STRAT7 processes your personal data when you participate in research activities and sets out your rights.

When say “personal data”, we mean we mean information that identifies you or could make you identifiable.

This Privacy Notice is intended to assist you in making informed decisions when using our Services. Please take a moment to read and understand it. It should be read in conjunction with our website Cookie Policy, which can be found at https://strat7.com/group-cookie-policy/ and the cookie policy that is displayed in the particular research activity you participate in.

2. Changes to this Privacy Notice

We will update this Privacy Notice from time-to-time to reflect any changes or proposed changes to our use of your personal data, or to comply with changes in applicable law or regulatory requirements. We may notify you by email of any significant changes to this Privacy Notice, but we encourage you to review this Privacy Notice periodically to keep up to date on how we use your personal data.

3. About us

Our Services are made available by various companies in the STRAT7 group of companies (each a “Group Company”).

Where this Privacy Notice refers to “STRAT7”, “we”, “us, “our”, this means STRAT7 Limited, or one or more of the particular Group Companies that provide the Services to you.

We set out below more information about our Group Companies, including their location.

Location: UK

STRAT7 Limited (company number 07642707) is a company incorporated in England and Wales with its registered office address at Warner House, 98 Theobalds Road, London, WC1X 8WB.

Crowd DNA Ltd (company number 06617205) is a company incorporated in England and Wales with its registered office address at Warner House, 98 Theobalds Road, London, WC1X 8WB.

Location: USA

STRAT7 LLC (company number 5327483) incorporated in the state of Delaware with its office address at 41 E 11th Street 10003, 11th Floor, New York.

Crowd DNA Inc (company number 1703210382) incorporated under the laws of the state of New York with its office address at 41 E 11th Street 10003, 11th Floor, New York.

Location: Australia

Crowd DNA PTY Ltd (company number 633 987 587) incorporated in New South Wales, Australia with its office address at The Commons, Mezzanine, 388 George St, Sydney NSW 2000.

Location Netherlands

STRAT7 (NL) B.V (company number) incorporated under Dutch Law with its office address as Rokin 75 (1012 KL) Amsterdam.

Location: Singapore

Crowd DNE PTE Ltd (company number 201818974E) incorporated in the Republic of Singapore and having its registered office at 68 Circular Road, #02-01 Singapore, 049422.

For most activities, the Group Company providing the Services acts as an independent data controller, which means we determine the purposes and means of processing personal data. In some situations, we may carry out certain activities referred to in this Privacy Notice in our capacity as a data processor where we process personal data solely on behalf of our clients and in accordance with their instructions.

4. What personal data we collect

The types of personal data we collect depends on the project, but may include the following:

Identity Data First name; last name.
Contact Data Home address; email address; telephone number.
Respondent Data Account username; password; first name; last name; date of birth; gender; country; nationality; username; job title; social status; employment status household information; holiday destination; shopping habits and details whether you have participated in any survey or questionnaire responses and feedback; survey responses, participation in any promotions or competitions.
Image Data Photos; video recordings.
Financial Data Bank details for payment of incentives
Behavioural Data Data relating to your browsing activity or interaction with our emails, obtained through the use of cookies, pixel tags and other similar technologies; information about when your current or previous sessions started .
Technical Data IP address; browser type and operating system; geolocation, to ensure we’re showing you the correct notices and information; any other unique numbers assigned to a device.
Sensitive Personal Data
(only with your explicit consent)
Data such as health, racial or ethnic origin, political opinions, religious beliefs, sexual orientation or trade union membership.

For a specific project we may approach you for your explicit consent to allow us to process certain particularly sensitive data. If we do, we will provide you with details of the information that we would like and reasons why we require this information, so that you can carefully consider whether you wish to consent. You should be aware that you do not have to agree to any request for consent from us; however, this may result in you being unable to participate in a project.

When acting as a processor, the categories of personal data are determined by our clients and they decide what information we collect and use for a project.

5. How we collect and receive personal data

We collect and receive personal data using different methods:

  • Directly from you – when you agree to take part in research activities.
  • From third parties – such as our clients or sample suppliers who invite you to take part in research activities.
  • Automatically – through cookies and similar technologies when you interact with our research platforms (see our Section 1 above).

6. How We Use Personal Data

We use your personal data for the purposes set out in this section.

Carrying out market research activities and reporting We collect and maintain personal data that you submit and/or third parties provide to us for in connection with your participation in one of our surveys that we carry out on behalf of our clients or for our own market analysis purposes.

Our legal basis for processing
To the extent the above involves personal data and we are considered a controller of your data, it may be necessary for us to use your personal data to perform our obligations in accordance with any contract that we may have with you. Or it is in our legitimate interest or a third party’s legitimate interest for us to use personal data in such a way to ensure that we provide the Services in an effective, safe and efficient way. Where we do this on behalf of our clients, we are acting as a data processor.

The personal data we process may include your Identity Data, Contact Data, Respondent Data, and Financial Data (where applicable). We process this information so that we can fulfil the supply of our Services, maintain our user databases and to keep a record of how we provide our Services.

As set out above. we will not process any special (or sensitive) categories of personal data or personal data relating to criminal convictions or offences except where we are able to do so under applicable legislation or with your explicit consent.

If you participate in one of our promotions From time to time, we may incentivize participation in our market research activities by running prize draws, prize competitions and other promotions. For the purposes of administering such promotions, we may process your Identity Data, Contact Data and any other personal data volunteered by you in relation to your promotion entry.

Our promotions are subject to separate terms and conditions, which you may be required to accept as a condition of entry.

Our legal basis for processing
It is necessary for us to use your personal data to perform our obligations in accordance with any contract that we may have with you (e.g. the promotion terms and conditions) or it is in our legitimate interest to use your personal data to enable us to administer our promotion fairly and effectively and to ensure that we comply with self-regulatory codes governing the operation of promotions.

If you have a general question or need help with any issue concerning our Services There are various ways in which you are able to contact us (see the “How to Contact us” section below). When you make an enquiry, we will collect and process your Identity Data, Contact Data as well as any other personal data you volunteer that is relevant to your enquiry.

Our legal basis for processing
It is in our legitimate interest to use your personal data in the ways described above to ensure that we are able to help you with your enquiry, provide a good standard of service and improve our customer services.

If we use cookies to help us understand more about you and your use of our Services We and our third-party partners may use cookies, web beacons, pixel tags and other similar technologies (which we generically refer to as “Cookies”) to collect data from the devices that you use to access our Site and Services and any emails that you receive from ourselves and/or our third-party partners . The data that is collected includes Behavioural Data and Technical Data Please see our Cookie Policy (Section 1 above) for further information together with the cookie policy for the research activity you are taking part in.

We and our third-party partners use this data to analyse how you use our Services and the effectiveness of our Sites and Services, including:

  • to count users who have visited our Sites or opened an email and collect other types of information, including insights about visitor browsing habits, which helps us to improve our Sites and Services and the effectiveness of our emails;
  • to measure the effectiveness of our content;
  • to learn what parts of our Sites are most attractive to our users, which parts of our Sites are the most interesting and what kind of features and functionalities our visitors like to see;
  • to help us understand the type of marketing content that is most likely to appeal to our visitors and customers; and
  • to help us with the selection of future service lines, website design and to remember your preferences.

In some of our email messages, we use a “click-through URL” linked to certain websites administered by us or on our behalf. We may track click-through data to assist in determining interest in particular topics and measure the effectiveness of these communications.

Our legal basis for processing
In certain circumstances, we may rely on another lawful basis when we use your personal data collected via the use of cookies. For example, where we use personal data collected through the use of analytics cookies to analyse how you use our services, it is in our legitimate interest to use your personal data in such a way to improve our Services.

To comply with our legal obligations or in connection with the administration of our business We may use your personal data: (i) to comply with our legal obligations; (ii) to enforce or protect our legal rights; (iii) to protect the rights of third parties; and (iv) in connection with a business transition such as a merger, reorganisation, acquisition by another company, or sale of any of our assets.

Our legal basis for processing
Where we use your personal data in connection with a business transition, to enforce or protect our legal rights or to protect the rights of third parties, it is in our legitimate interest to do so. For all other purposes described in this section, we have a legal obligation to use your personal data to comply with any legal obligations imposed upon us, such as a court order.

We will not process any special (or sensitive) categories of personal data or personal data relating to criminal convictions or offences except where we are able to do so under applicable legislation or with your explicit consent.

When acting as a processor, we process personal data only:

  • On documented instructions from our clients.
  • For the purpose of delivering our Services.
  • In compliance with applicable data protection and privacy laws.

7. If you do not provide your personal data

Providing your personal data allows us to manage your participation in our research activities. If you choose not to provide certain information, it may not be possible for us to include you in the project.

8. Third-party links

This Privacy Notice only applies to personal data processed by us through your use of our Services. From time to time, a research activity may include links to third-party websites and services. We have no control over these websites and services and this Privacy Notice does not apply to your interaction with the relevant third parties. When you click on the links we provide to such third-party platforms, you will be transferred from our site to the relevant third-party platform and the privacy notice (and other terms and conditions) of that platform will apply to you.

We encourage you to become familiar with the privacy practices of every website you visit or third-party service provider that you use in connection with your interaction with us and to contact them if you have any questions about their respective privacy notices and practices.

9. Sharing Your personal data

We may share your personal data with:

  • Our clients – for the purposes of providing them with our Services.
  • Any of our Group Companies when required to provide our Services.
  • Sample suppliers – who help us find research participants.
  • Third parties who help provide, run and manage our internal IT systems, including providers of information technology, cloud-based software-as-a-service providers, identity management, website design, hosting and management, data analysis, data back-up, security and storage services.
  • Incentive providers and payment processors who assist us in administering our prize draws, paying incentives, prize competitions and other promotions.
  • Our professional advisors such as lawyers, auditors, accountants who advise and assist us in relation to the lawful and effective management of our organisation and in relation to any disputes we may become involved in.
  • Regulators or authorities, where required by law.

This list is non-exhaustive and there may be circumstances where we need to share personal data with other third parties in accordance with applicable law.

10. Data retention

Each project may have a different retention period according to the requirements of the project and the client. Should you require the data retention period for a project you took part in please contact the person or email address through which you received the initial invitation to take part in the research activity with details of the project and we’ll let you know the retention period for that project.

In some circumstances we may anonymise your personal information so that it can no longer be associated with you, in which case we may use such information without further notice to you.

When the purposes for which we collected the data have been fulfilled, we will securely destroy your personal information in accordance with applicable laws and regulations.

11. Confidentiality and security of your personal data

We are committed to keeping the personal data you provide to us secure and we have implemented information security policies, rules and technical measures to protect the personal data under our control from unauthorised access, improper use or disclosure, unauthorised modification and unlawful destruction or accidental loss.

12. Personal data of minors

We may process the personal data of minors (individuals aged 13 to 18) in connection with their participation in our research activities and the provision of our Services. Where required by applicable data protection laws, including the GDPR, we will obtain parental or legal guardian consent before collecting or processing personal data of minors under the age of digital consent (which may vary by country but is typically 16).

For minors aged 16 to 18, we may rely on their own consent where permitted by applicable law. All processing of minors’ personal data is carried out in accordance with the legal bases outlined above and in line with the principles of necessity, proportionality, and transparency.

We take additional steps to ensure the protection of minors’ data, including age-appropriate language in communications and limiting data collection to what is strictly necessary.

13. Your rights as a data subject

You have certain rights regarding the personal data we hold about you. These include the right to:

  1. Access copies of your personal data.
  2. Request correction or deletion of your personal data.
  3. Restrict how your personal data is used.
  4. Object to our processing of your personal data.
  5. Request the transfer of your personal data to another organization.
  6. Not be subject to decisions based solely on automated processing, including profiling.
  7. Lodge a complaint with a supervisory authority.

If you would like to exercise any of these rights, please contact us using the details provided in the “How to Contact Us” section below.

14. How to contact us

If you have any questions about this Privacy Notice or wish to exercise your rights as a data subject, you should, in the first instance, contact the person or email address through which you received the initial invitation to take part in the research activity.

You may also contact our Data Protection Officer by emailing dpo@strat7.com, or by writing to:
Data Protection Officer
STRAT7 Limited
98 Theobalds Road
London
WC1X 8WB

Verifying your identity when exercising your rights

To help protect your privacy and keep your information secure, we may need to confirm your identity before we can respond to your request. This helps make sure that we only share personal information with the right person.

Depending on the type of request, we may ask you to provide details such as your email address, the subject matter of the research you were invited to participate in, they type of research (e.g. an online survey, focus group, video interview etc) and the date of your most recent interaction us, to help us identify the research project your request relates to. If you ask for a copy of specific personal information, we may also ask you to complete a short form to confirm your identity.