Privacy by separation and restraint

What the service may collect

Account data may include email, authentication details, communication preferences, and consent records. Panel profiles may include the basic demographics needed for research. Standard registration does not ask for a legal name, employer, workplace, tenure, or employment history. Member profiles include employment status and, when employed, occupation group.

Research data stays separate

Survey answers are intended to be stored under a pseudonymous research identifier, without email, legal name, or direct member identifier in research tables. Access to the protected mapping is tightly restricted. Demographic snapshots may be retained with responses for valid analysis.

If an account is deleted, identity and profile data and the protected link to research are deleted or anonymised. Historical research may remain only in irreversibly anonymised or aggregate form.

Organisation-sourced campaigns

Campaign contact lists and dispatch data are kept apart from research answers and subject to restricted access and retention rules. Participation uses campaign-scoped links or tokens and does not create a permanent customer or employee attribute on a member profile. The organisation receives aggregate reporting, not an identity-to-answer map.

Choice, retention, and contact

In My Uppraise → Preferences, you can update your profile and communication preferences, download account and response data, withdraw from research, or submit an account deletion request. Withdrawal stops participation and survey emails. Deletion requests are processed by an administrator; submitting a request does not immediately erase your data. Necessary and analytics cookies are handled separately, with versioned consent. Exact retention periods, lawful bases, controller details, and request channels will be set in the launch policy.

Last updated: October 2026. Details remain subject to legal review.