Privacy Policy

2. Data Collected

Data Storage Location

The data controller responsible for your personal data is: Q&A Surveys
Landmark Building, 14 Tsar Osvoboditel Blvd., Sofia 1000, Bulgaria
Email: office@q-a.today

Information we collect 

We only collect data we need to provide our services and run reliable research. Depending on how you interact with us, this may include:

a. Information you give us directly

• Survey and research responses — the answers, opinions, ratings, and any free-text you submit when participating in a survey or study.
• Contact details — your name, email address, organization, and any information you include when you email us at office@q-a.today or contact us through the site.
• Newsletter subscription — your email address when you sign up for updates.
• Chatbot conversations — messages you send through our website customer service chat.
• Client/business information — contact and account details provided by organizations who commission research from us.

b. Information we collect automatically

• Technical and usage data — IP address, browser type, device type, operating system, referring pages, pages visited, and time spent on the site.
• Cookies and similar technologies — see Section 8 below.
• Server logs — standard records generated when you access our website.

We do not intentionally collect more personal data than necessary, and in much of our research we work with anonymized or aggregated data that does not identify individual respondents.

How we use your information

We use the information we collect to:

• Design, distribute, and run surveys and research studies;
• Analyze responses to produce insights, trend analysis, risk evaluation, and forecasts;
• Deliver aggregated and anonymized research findings to the organizations we work with;
• Respond to your enquiries and provide customer support, including through our chatbot;
• Send you updates, newsletters, or research-related communications you have requested;
• Operate, maintain, secure, and improve our website and services;
• Detect and prevent fraud, abuse, and security incidents;
• Comply with our legal and regulatory obligations.

Legal bases for processing

Where the General Data Protection Regulation (GDPR) applies, we rely on one or more of the following legal bases:

• Consent — for example, when you subscribe to our newsletter, voluntarily participate in a survey, or accept non-essential cookies. You may withdraw consent at any time.
• Contract — to deliver services to clients and to fulfil our obligations to them.
• Legitimate interests — to operate, secure, and improve our website and services, and to conduct research, provided these interests are not overridden by your rights.
• Legal obligation — where we are required to process data to comply with applicable law.

How we share your information

We do not sell your personal data. We share information only in the following limited circumstances:

• Research clients — the organizations who commission studies receive research outputs. Wherever possible these are aggregated and anonymized so individual respondents cannot be identified.
• Service providers (processors) — trusted third parties who help us operate, such as website hosting, email and newsletter delivery, analytics, and chatbot providers. They may only process data on our instructions and under appropriate safeguards.
• Legal and regulatory authorities — where required by law, court order, or to protect our rights, users, or the public.
• Business transfers — in connection with a merger, acquisition, or reorganization, subject to this Policy.

International data transfers

Q&A Surveys conducts research worldwide, and some of our service providers may be located outside your country or the European Economic Area (EEA). Where we transfer personal data internationally, we put appropriate safeguards in place — such as the European Commission’s Standard Contractual Clauses or transfers to countries recognized as providing adequate protection. These submissions are only kept for customer service purposes they are never used for marketing purposes or shared with third parties.

Google Analytics

We use Google Analytics on our site for anonymous reporting of site usage. So, no personalized data is stored. If you would like to opt-out of Google Analytics monitoring your behavior on our website please use this link: Google Analytics Opt-out.

Data retention

We keep personal data only for as long as necessary for the purposes described in this Policy, after which it is deleted or anonymized. Typical periods include:

• Survey responses — retained for the duration of the relevant study and for [INSERT PERIOD, e.g. 12–24 months] afterward for verification, then anonymized or deleted.
• Newsletter data — until you unsubscribe.
• Enquiry and chatbot records — for as long as needed to handle your request and a reasonable period thereafter.
• Technical/log data — for a limited period for security and analytics.

Specific retention periods may vary depending on legal requirements and contractual commitments.