Privacy policy

1. What we collect

While you register with a corporate email to receive your report securely, your survey responses are strictly separated from your identity. The information we collect falls into two categories:

• Contact details: if you sign up for early access, we store your name, email address, the type of participant you are (company, consultant/advisor, or academic/researcher), your organization's name, and its sector, so we can send you relevant updates.
• Survey responses: when a study is live, the answers you give describe your organization (its tools, processes, and practices), not you as an individual.

2. How we use your data

Your own survey responses are used to generate your personal Digital Maturity Snapshot and, later, your Benchmark Report. Beyond that, your individual responses are combined with everyone else's, anonymized, and aggregated to build the overall benchmark. No individual company's answers are ever shown to, or identifiable by, anyone else.

3. Who can see your data

• Your own results are visible only to you.
• Aggregated, anonymized statistics (covering many companies) appear in benchmark reports and may be shared publicly or sold as research findings.
• We do not sell or share your individual responses, contact details, or company-identifiable data with any third party.

4. Where your data is stored

Data is stored on servers located within the European Union. Access is limited to those operating Collective Research, and reasonable technical safeguards (encryption in transit, access controls) are used to protect it.

5. How long we keep it, and deletion

Contact details (for early access updates) are kept until you ask us to remove them, or until the related study concludes, whichever is sooner. Survey responses are kept for as long as needed to generate your report and contribute to aggregate benchmarks; once anonymized and aggregated, individual responses are not retained in identifiable form.

You can ask us to delete your contact details or withdraw your survey responses (before they have been anonymized and aggregated) at any time by emailing privacy@collectiveresearch.net.

6. Your rights (GDPR & CCPA)

Depending on your jurisdiction, under the General Data Protection Regulation (GDPR) or the California Consumer Privacy Act (CCPA), you may have the following rights:

• Right to Access: You have the right to request copies of your personal data.
• Right to Rectification: You have the right to request that we correct any information you believe is inaccurate.
• Right to Erasure: You have the right to request that we erase your personal data, under certain conditions.
• Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data.
• Right to Object to Processing: You have the right to object to our processing of your personal data.
• Right to Data Portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us at privacy@collectiveresearch.net.

7. Changes to this policy

As Collective Research develops, this policy may be updated. We'll note the date of the latest update at the top of this page.

8. Contact

Questions about this policy or how your data is handled can be sent to privacy@collectiveresearch.net.

Data Controller: Barış Eroğlu (Collective Research Initiative).