Privacy Policy
Last updated: September 2026
At Tessa Horvath Research, I am committed to protecting your privacy and handling personal information responsibly, transparently, and in accordance with UK data protection law.
This Privacy Policy explains how I collect, use, store and protect personal information when you visit this website, contact me, or participate in research and evaluation activities.
I comply with:
The UK General Data Protection Regulation (UK GDPR)
The Data Protection Act 2018
Relevant professional research and evaluation standards and ethical guidelines
______________________________________
Who I Am
Tessa Horvath Research provides research, evaluation and learning services to charities, social enterprises, partnerships, funders and public sector organisations.
For the purposes of data protection legislation, Tessa Horvath Research is the Data Controller for personal information collected through this website and during research and evaluation activities, unless otherwise agreed with a commissioning organisation.
Contact details
Tessa Horvath Research
Email: tessahorvathresearch@gmail.com
Website: www.tessahorvathresearch.co.uk
______________________________________
Information Collected
Depending on how you interact with me, I may collect:
Website enquiries
When you contact me through the website, email or other communication channels, I may collect:
Name
Email address
Telephone number
Organisation name
Information included in your enquiry
Research and evaluation participants
Where you participate in research or evaluation activities, I may collect:
Contact information
Demographic information relevant to the project
Survey responses
Interview or focus group responses
Audio recordings (where consent has been provided)
Other information necessary for the agreed research purposes
I only collect information that is relevant to the specific research or evaluation project.
______________________________________
How Personal Information Is Used
Personal information may be used to:
Respond to enquiries
Deliver contracted research and evaluation services
Arrange interviews, focus groups and workshops
Conduct surveys and research activities
Communicate project updates where appropriate
Meet legal, regulatory and contractual obligations
Personal information will never be sold to third parties for marketing purposes.
______________________________________
Lawful Basis for Processing
Under UK GDPR, personal information is processed on one or more of the following lawful bases:
Consent
Performance of a contract
Legitimate interests
Compliance with legal obligations
For research participants, consent will normally be obtained where required and participants will be provided with project-specific information explaining how their data will be used.
______________________________________
Research Data and Confidentiality
Maintaining participant confidentiality is a core principle of my work.
Unless you have explicitly agreed otherwise:
Individual responses will remain confidential.
Findings will be reported in an anonymised or aggregated form.
Names and identifying details will not be included in reports shared with clients unless explicit consent has been obtained.
Information will only be disclosed where required by law or where there is a safeguarding concern that creates a legal or ethical duty to act.
______________________________________
Data Storage and Security
I take appropriate technical and organisational measures to protect personal information.
Personal data is stored using secure, password-protected systems and devices.
Research materials and project files are stored in Dropbox, a trusted provider that maintains appropriate security measures and complies with applicable data protection requirements.
Security measures include:
Password-protected computers and accounts
Secure cloud storage
Restricted access to project files which contain personal information
Regular review of stored data
Confidential handling of research materials
While no method of electronic transmission or storage can be guaranteed to be completely secure, reasonable steps are taken to protect personal information from unauthorised access, loss, misuse or disclosure.
______________________________________
Anonymisation of Research Data
Where possible, research data is anonymised as early as practical within the project process.
Personal identifiers are removed from research datasets, transcripts and analysis files wherever they are not required.
Reports and findings are normally presented in a way that prevents individuals from being identified unless explicit consent has been obtained.
______________________________________
Retention and Deletion of Data
Personal information is retained only for as long as necessary to fulfil the purposes for which it was collected.
As a general principle:
Contact information is retained only as long as necessary for business and contractual purposes.
Research recordings, personal data and identifiable project materials are securely deleted when they are no longer required.
Identifiable research data, recordings and participant information will normally be deleted no later than six months following completion of a project, unless a different retention period has been agreed with the client or is required by law.
Anonymised research findings and reports may be retained for professional record-keeping purposes where individuals cannot be identified.
______________________________________
Sharing Personal Information
Personal information will not be sold or shared for marketing purposes.
Information may be shared only where necessary with:
Clients commissioning research or evaluation services
Trusted service providers supporting delivery of services (such as secure cloud storage providers)
Professional advisers where legally required
Regulatory authorities or law enforcement where disclosure is required by law
Where third-party providers are used, reasonable steps are taken to ensure they process information in accordance with applicable data protection requirements.
______________________________________
Website Information and Cookies
This website is hosted by Squarespace. As part of providing its hosting and website services, Squarespace may collect and process certain technical information about visitors, such as:
IP address
Browser type
Device information
Website usage statistics
This information helps ensure the website functions correctly, supports security and performance, and provides insights into website usage. For more information about how Squarespace processes personal data, please see Squarespace's Privacy Policy.
Cookies are not currently used on this website. If they are introduced, you will be able to manage your preferences through your browser settings or any cookie banner provided.
______________________________________
Your Rights
Under UK GDPR, you have the right to:
Request access to your personal information
Request correction of inaccurate information
Request deletion of your personal information
Request restriction of processing
Object to certain types of processing
Request transfer of your information where applicable
Withdraw consent at any time where processing is based on consent
To exercise any of these rights, please contact: tessahorvathresearch@gmail.com
______________________________________
Complaints
If you have concerns about how your personal information has been handled, please contact me in the first instance and I will do my best to resolve the issue.
You also have the right to make a complaint to the Information Commissioner's Office (ICO):
Website: https://ico.org.uk/make-a-complaint/
______________________________________
Changes to This Policy
This Privacy Policy may be updated from time to time to reflect changes in legal requirements, services or working practices.
The most current version will always be available on this website.