At StudySetGo, we’re passionate about making research studies smoother, more efficient, and more effective for everyone involved.
We know that trust is everything when it comes to handling personal data, so we want to be upfront about how we collect, use, and protect your information. This Privacy Policy explains what data we process, why we need it, and how you can manage, update, or delete your information if needed.
We act as a Data Processor on behalf of the universities we partner with. This means we process participant data only according to their instructions - the universities are the Data Controllers responsible for ensuring the necessary legal and privacy requirements are met.
What data do we process?
As a platform provider, we only process personal data as set out in our Data Processing Agreement with the Universities we work with. When you use our platform, we may collect:
Regardless of how you join, if you move forward with creating a profile and accepting our privacy policy, we may also process some health-related data depending on your study’s requirements.
When you agree for us to send you marketing materials
What personal data do we collect, why do we collect it, and what legal basis do we rely on?
When you agree to receive marketing communications from us during platform sign up, we collect your name and email address (and occasionally other contact preferences you provide). This data is used to send you information about our services, updates, offers, or other content we think may be of interest to you. The legal basis we rely on for this processing is Article 6(1)(a) of the UK/EU GDPR – Consent. Of course, you can always opt-out should you wish to do so.
We work with trusted technology providers to keep your data secure. Our standard approach is to use services that store data within the UK, EEA, or other regions deemed “adequate” under GDPR.
If any data is stored outside these regions, we apply strong safeguards, such as the US-UK Privacy Framework, Standard Contractual Clauses (SCCs) with the UK Addendum, or the UK International Data Transfer Agreement (IDTA). When needed, we also carry out Transfer Risk Assessments to ensure compliance.
Where we act as Data Processor, we follow the instructions of the Clients we work with regarding data retention. They determine how long data should be kept, ensuring all legal requirements are met.
Where we act as Data Controller, we retain your personal data for as long as you continue to receive marketing communications from us. If you withdraw your consent or unsubscribe, we will stop sending marketing messages and remove your data from our active mailing lists. However, we may retain your email address on a restricted-access suppression list solely to ensure we don’t contact you again by mistake.
Depending on whether we’re acting as a Data Processor or Data Controller, you have certain rights under the UK GDPR and DPA 2018.If we are the Data Controller, you can contact us directly to exercise your rights.
If we are the Data Processor, we may assist the universities (the Data Controllers) in responding to your requests.
Your rights include:
✔ The right to be informed – You have the right to know how we collect, use, and store your personal data. This privacy notice provides that information.
✔ The right of access – You can request a copy of the data we hold about you.
✔ The right to object – You can ask us to stop processing your data in certain situations (e.g., for marketing or research purposes).
✔ The right to rectification – If you believe any of your personal information is inaccurate or incomplete, you can request corrections. If we’ve shared your data with others, we’ll do our best to update them too.
✔ The right to erasure – In some cases, you can ask us to delete your personal data, for example, if we no longer need it or you withdraw your consent (where applicable).
✔ The right to restrict processing – You can request that we temporarily stop processing your data while an issue is resolved (e.g., if you contest its accuracy).
✔ The right to data portability – You can ask us to transfer your data to another organization or to yourself in some circumstances.
💡 Good to know: You don’t have to pay anything to exercise your rights.
To make a request, contact us at privacy@study-stream.com or write to:
📍 1/1 132 Dorchester Avenue, Glasgow, G12 0EA
We’ll respond within one month, so be sure to check your spam/junk folder in case our reply lands there!
We are Study Stream Ltd. (Company Number SC818419), trading as StudySetGo (hereafter ‘StudySetGo’), which is the entity responsible for processing your personal data. Our registered office address is 1/1 132 Dorchester Avenue, Glasgow, G12 0EA
If you have any concerns about our use of your personal information, please let us know by:
Emailing us at privacy@study-stream.com, or writing to us at 1/1 132 Dorchester Avenue, Glasgow, G12 0EA
Need to escalate a concern?
If you’re not happy with how we’ve handled your data, you can contact the Information Commissioner’s Office (ICO):
ICO Address:
Information Commissioner's Office, Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: +44 (0)303 123 1113ICO
Website: https://www.ico.org.uk
