Privacy Policy

Last Updated: April 2025

Say goodbye to lengthy, confusing enrollment. StudySetGo simplifies the process with straightforward eligibility testing and clear study requirements, making it easy to join studies that align with your interests.

At StudySetGo, we are dedicated to streamlining the research study process, helping to improve efficiency and effectiveness. We are big on trust and transparency, so we want to be clear about how we collect and use your personal data, including when we act as a Data Controller, and a Data Processor.

This Privacy Policy is designed to help you understand the information we collect, the reasons behind our data collection, and how you can update, manage, export, or delete your information. We act as the Data Controller for the Primary Business Contact of clients who sign up to use our platform.

We act as a Data Processor for the personal data of users, processing this data solely according to the instructions of the clients we collaborate with (the Data Controllers). We rely on these clients to ensure that the necessary notifications, lawful bases for processing, or other legal requirements have been met.

When we act as a Data Controller

1. When you partner with StudySetGo (clients)

What personal data do we collect, why do we collect it, and what legal basis do we rely on?
When you sign up to use our platform, you will act as the Primary Business Contact. We will collect your name, role, photo, email, postcode, and phone number. This data is collected so that you can set up your profile, and continue to facilitate the research study process. The legal basis we rely on for this processing is Article 6(1)(b) of the GDPR - Contract.

Where do we store it?
We work with data application providers and suppliers to manage our services. Our standard practice is to use applications that store data within the UK, EEA, or in countries recognized as ‘adequate’ under GDPR.
If we utilize an application that stores data outside of these regions, we implement appropriate safeguards for data transfers. These may include the US-UK Privacy Framework, Standard Contractual Clauses (SCCs) with the UK Addendum where necessary, or the UK International Data Transfer Agreement (IDTA). Where required, we also conduct Transfer Risk Assessments to ensure compliance.

How long do we keep it?
If you choose to stop working with us, we will retain your personal data on our systems for 12 months after you stop using StudySetGo’s platform. Financial data will be retained for 6 years in accordance with regulatory requirements.

2. When you sign up for our newsletter

What personal data do we collect, why do we collect it, and what legal basis do we rely on?
When you sign up for our newsletter,  we ask you to provide your email address. This data is collected to send you our newsletter for keeping you informed about the latest developments of our platform and services. The legal basis we rely on for processing your personal data is Article 6(1)(a) of the GDPR - Consent.

Where do we store it?
We store your personal data on secure servers located within the European Economic Area (EEA). We have implemented robust security measures to protect your data from unauthorized access, alteration, disclosure, or destruction. If we transfer any data outside the EEA, we ensure that appropriate safeguards are in place to protect your privacy, such as Standard Contractual Clauses approved by the European Commission.

How long do we keep it for?
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected. This includes maintaining the newsletter email list, and keeping you informed about our platform and services. If you decide you no longer wish to receive our newsletter, you can unsubscribe at any time. Upon your request to unsubscribe, we will remove your data from our systems. However, we will retain your email address on a restricted-access unsubscribe list to ensure you do not receive further emails from us.

3. When you visit our website

What cookies do we collect, why do we collect them, and what legal basis do we rely on?
Cookies are text files placed on your hard drive by a web page server when you visit a website and are saved in your browser's history. They allow the website to recognise your device and store some information about your preferences or past actions. Cookies cannot be used to run programs or deliver viruses to your computer; they are uniquely assigned to you and can only be read by a web server in the domain that issued the cookie.

Below is a list of the cookies we use and the purposes for which they are used:

Non-essential cookies

Cookie

Provider

Purpose

Expiry

_ga_*

Google Analytics

Google Analytics sets this cookie to store and count page views.

1 year 1 month 4 days

_ga

Google Analytics

The _ga cookie, installed by Google Analytics, calculates visitor, session and campaign data and also keeps track of site usage for the site's analytics report. The cookie stores information anonymously and assigns a randomly generated number to recognize unique visitors.

1 year 1 month 4 days

You have the option to decline the storage of non-essential cookies when visiting our website, or you can modify your browser settings to block cookies from being saved on your device. For guidance on managing cookies in popular browsers, please visit the following links.

Google Chrome
Mozilla Firefox
Apple Safari
Microsoft Internet Explorer
Microsoft Edge
Brave
Opera

4. When you sign up to StudySetGo directly to be considered for future studies

What personal data do we collect, why do we collect it, and what legal basis do we rely on?
When you sign up directly with StudySetGo to be considered for future research studies, we collect personal data including your name, email address, phone number, educational background, areas of interest, and demographic information (such as age, gender, or health-related details if relevant to specific studies). We collect this information to match you effectively with suitable research studies, contact you about participation opportunities, and facilitate your involvement in research activities. The legal basis we rely on for processing your personal data is Article 6(1)(a) of the GDPR - Consent. For any special category data (e.g., health information), we rely on your explicit consent under Article 9(2)(a) of the GDPR.

Where do we store it?
We work with data application providers and suppliers to manage our services. Our standard practice is to use applications that store data within the UK, EEA, or in countries recognized as ‘adequate’ under GDPR.

If we utilize an application that stores data outside of these regions, we implement appropriate safeguards for data transfers. These may include the US-UK Privacy Framework, Standard Contractual Clauses (SCCs) with the UK Addendum where necessary, or the UK International Data Transfer Agreement (IDTA). Where required, we also conduct Transfer Risk Assessments to ensure compliance.

How long do we keep it for?
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected. This includes maintaining the waitlist, and keeping you informed about our platform and services. If you decide you no longer wish to be on our waitlist, you can unsubscribe at any time. Upon your request to unsubscribe, we will remove your data from our systems. However, we will retain your email address on a restricted-access unsubscribe list to ensure you do not receive further emails from us.

When we act as a Data Processor

This section refers to the information we process on behalf of our Clients. If you sign up to StudySetGo through a third party, this section will apply to you.

What data do we process?
As a platform provider, we only process data as per our Data Processing Agreement with the clients we work with. The platform will collect personal data such as your name, role, photo, email, postcode, and phone number.  We will also process some health information in order to facilitate the research study process if you are a participant using the platform.

Study Managers
When you create a profile on the platform, you will be required to enter details such as your name, role, photo, email, and phone number. You will also enter some details about the Research Study you are leading and the details about your participants you wish to onboard. 

Participants
Invites:
When you are invited to join a study and onboard onto StudySetGo, you'll need to create a profile. This involves providing basic details such as your name, role, age photo, email, postcode, and phone number. 

Prospective Participants: If you have interacted with a study manager but have not yet enrolled in a study, the study manager may provide your contact information to StudySetGo for the purpose of facilitating your onboarding and enabling further communication about the study. They will share some basic details such as your name, email address and phone number. If you have interacted with a study manager but have not yet enrolled in a study, the study manager may ask for your permission to share your contact details (such as your email or phone number) with StudySetGo. This is solely for the purpose of facilitating your onboarding and enabling further communication about the study. If you do not wish for your details to be shared, you can decline this request, and you will not be contacted by StudySetGo.

Sharing Links: A study manager may share a link to the StudySetGo platform via social media or other platforms. If you follow such a link and decide to engage with StudySetGo, you will be prompted to provide your contact details and other relevant information as part of the onboarding process. 

Enrolled Participants: If you are already enrolled in a study, the study manager may share your contact details and study randomisation code with StudySetGo to assist in the management and coordination of the study. In all of the above situations, when you proceed to create a profile and agree to our privacy policy, we may also process special categories of data such as relevant health information depending on the specific study you are participating in. This could be data relating to your height, weight, health condition, or physical activity. 

For detailed information regarding data protection practices specific to study managers and participants, please refer to our Study Manager and Participant Privacy Policy.

Where is it stored?
We work with data application providers and suppliers to manage our services. Our standard practice is to use applications that store data within the UK, EEA, or in countries recognized as ‘adequate’ under GDPR.

If we utilize an application that stores data outside of these regions, we implement appropriate safeguards for data transfers. These may include the US-UK Privacy Framework, Standard Contractual Clauses (SCCs) with the UK Addendum where necessary, or the UK International Data Transfer Agreement (IDTA). Where required, we also conduct Transfer Risk Assessments to ensure compliance.

How long do we keep it for?
We are a Data Processor for user’s personal data hence we only process this data as per instructions from the clients we work with (i.e. the Data Controller’s). We rely on the clients we work with to have obtained the necessary notices, lawful basis for processing or any other legal requirements. We will also adhere to the retention periods the clients we work with set.

Your Rights

Where we act as Data Controller, we are responsible for responding to any requests you make to exercise your rights under the UK GDPR and DPA 2018. Where we act as Data Processor, under the instructions of the clients we work with (the Data Controllers), we may assist in facilitating the exercise of your rights. These rights, granted under the UK GDPR and DPA 2018, include:

The right to be informed
You have the right to be informed about the collection and use of your personal data, the purposes for processing, retention periods for that personal data and who it will be shared with. We have set out this information in this privacy notice.

The right of access
You have the right to ask us for copies of the data we hold about you. If you ask us, we’ll confirm whether we’re processing your personal information and, if so, provide you with a copy of that personal information (along with certain other details).

The right to object
You have the right to ask us to stop processing your personal information in some circumstances, such as when we are relying on our own (or someone else’s) legitimate interests to process your personal information, when we are processing your personal information for direct marketing or when we are processing your personal information for research.

The right to rectification
You have the right to ask us to rectify the personal information you think is inaccurate or to complete information you think is incomplete. When you ask us to rectify your information, if we’ve shared your personal information with others, we’ll let them know about the rectification where possible.

The right to erasure
You have the right to ask us to erase your personal information, in some circumstances, such as where we no longer need it or you withdraw your consent (where applicable).

The right to restrict processing
You have the right to ask us to restrict the processing of your personal information for a period of time in some circumstances, such as where you contest the accuracy of that personal information or object to us processing it. This right is separate from the right to object and will only stop us from using your personal information further, not from processing it. If we’ve shared your personal information with others, we’ll let them know about the restriction where possible.

The right to data portability
You have the right to ask that we transfer the personal information you gave us to another organisation, or to someone else, in some circumstances.

You don't have to pay anything in order to exercise your rights.

Please contact us at privacy@study-stream.com, or  1/1 132 Dorchester Avenue, Glasgow, G12 0EA if you wish to make a request under your rights. We have one calendar month to get back to you with a response. Please ensure to check your junk/spam folders as our responses can sometimes end up there.

How to contact us or complain

We are Study Stream Ltd. (Company Number SC818419), trading as StudySetGo (hereafter ‘StudySetGo’), which is the entity responsible for processing your personal data. Our registered office address is 1/1 132 Dorchester Avenue, Glasgow, G12 0EA

If you have any concerns about our use of your personal information, please let us know by:

Emailing us at privacy@study-stream.com, or writing to us at 1/1 132 Dorchester Avenue, Glasgow, G12 0EA

If you are dissatisfied with our response or how we have handled your data, you can file a complaint with the Information Commissioner's Office (ICO), you can find their details below:

ICO Address: Information Commissioner's Office, Wycliffe House
Water Lane 
Wilmslow
Cheshire
SK9 5AF
Helpline number: +44 (0)303 123 1113ICO
Website: https://www.ico.org.uk

Ready to join a study?

Discover relevant studies in your area and enroll by creating a StudySetGo profile!
Discover Studies & Enroll