On 25 May 2018 the General Data Protection Regulation (GDPR) replaced the Data Protection Act. GDPR governs the way that organisations use personal data. Personal data is information relating to an identifiable living individual.
Transparency is a key element of the GDPR and this Privacy Notice is designed to inform you:
- what your rights are under GDPR
- how and why Lagom Strategy uses your personal data for research
- how to contact us if you have questions or concerns about the use of your personal data.
One of the aims of the GDPR is to empower individuals and give them control over their personal data.
The GDPR gives you the following rights:
- the right to be informed
- the right of access
- the right to rectification
- the right to erase
- the right to restrict processing
- the right to data portability
- the right to object
- rights in relation to automated decision making and profiling
Please note that many of these rights do not apply when the data is being used for research purposes. We always try to make it clear in project specific participant information sheets and consent forms which of these rights apply and for how long. We will also try to respond to concerns or queries that you may have during the consent process.
If you would like to exercise any of these rights in relation to the Lagom Strategy use of your data, please contact the Lagom Strategy Data Protection Officer (DPO).
How we use your personal data
Lagom Strategy is a digital agency whose focus is on user research for UK public sector services. Data Protection laws allow us to use personal data for research with appropriate safeguards.
We will always tell you about the information we wish to collect from you and how we will use it. We will seek your consent for the collection and use of your data for a specific research project.
For children, young people and other vulnerable groups we will seek consent from a parent, guardian or appropriate adult (e.g. teacher). Full details will be given to you in a Participant Information Sheet.
Collecting and using personal data
All of the research projects run by Lagom Strategy are different and the information we collect will vary. However, our user researchers will only collect information that is essential for the purpose of the research.
Research data is anonymised as quickly as possible after data collection so that individuals cannot be recognised and your privacy is protected.
You will be informed of the date of which withdrawal is no longer possible when you sign up to participate in the research. You will not be able to withdraw your data after this point.
Some data e.g. survey data is frequently collected anonymously so cannot be withdrawn once you have given permission for it to be used.
Where you may be identifiable in a research publication (e.g. an attributable quote or a photograph), we will seek your explicit consent.
Sharing your data
Often our research projects are sponsored by a Government Department, Arm’s Length Body, Charity or other Public Sector Organisation. In order to communicate our research to the sponsor your anonymised data is likely to form part of a research report. Some reports are published on national platforms e.g. gov.uk.
The privacy of your personal data is paramount and will not be disclosed unless there is a justified purpose for doing so. Lagom Strategy never sells personal data to third parties.
Your data may be shared with the project team who are authorised to work on the project and access the information. This may include staff at Lagom Strategy or collaborators at the sponsor and other organisations authorised to work on the project. This will be clearly identified in your Participant Information Sheet.
Storing and security
Lagom takes a robust approach to protecting the information it holds with dedicated storage areas for research data with controlled access.
There are comprehensive policies and processes in place to ensure that Lagom Strategy staff are aware of their obligations and responsibilities for the data they have access to. By default, people are only granted access to the information they require to perform their duties.
Your information will not be kept for longer than is necessary and is usually kept in an anonymised format.
After anonymisation, your data may be stored in the Lagom Strategy research data archive where it may be accessed by other members of Lagom Strategy. It will also be stored in the sponsor’s archive where it may be accessed by members of the sponsoring department.
You should contact the Lagom Strategy Data Protection Officer email@example.com or 01509 351040 if:
- you have a query about how your data is used by Lagom Strategy
- you would like to report a data security breach (e.g. if you think your personal data has been lost or disclosed inappropriately)
- you would like to complain about how Lagom Strategy has used your personal data
You also have the right to complain to the Information Commissioner who is the regulator for data protection in the UK:
https://ico.org.uk/global/contact-us/ or 0303 123 1113