Data Protection and Privacy Policy
For the research study: Looking; Gay Men and the Search for Connection
Researcher: James Benenson, M.A. Student at CCPE, London, UK
1. Overview
This research project is committed to protecting your personal data and respecting your privacy, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy outlines how your data will be collected, used, stored, and protected throughout the research process.
2. Who is Responsible for Your Data?
The data controller for this research project is:
James Benenson, M.A. Student at The Centre for Counselling and Psychotherapy Education (CCPE)
Email: [email protected]
All data is collected solely for the purposes of academic research in fulfilment of the requirements for an M.A. degree and is supervised by an appointed academic supervisor at CCPE.
3. What Personal Data Will Be Collected?
Depending on the stage of your engagement with the study, the following data may be collected:
- Name and contact details (email, phone number)
- Demographic information (e.g., age, year of birth, cultural background)
- Your responses to application questions
- Participation Consent Forms (if you are selected as a participant)
- Audio recordings and transcriptions of your interview (if you are selected as a participant)
- Reflections, notes, or anonymised quotations relating to the research (as agreed on Consent forms prior to participation)
4. How Will Your Data Be Used?
Your data will be used exclusively for the purposes of this academic research project, including:
- Assessing eligibility for participation
- Contacting you to arrange participation
- Conducting interviews and analysing experiences
- Quoting anonymised extracts in the final dissertation or related presentations/publications (only with your full consent)
- Reflecting on researcher-participant dynamics (in autoethnographic form, where applicable)
4.1 Applicants Not Selected for Participation
If you apply to take part but are not selected, your personal data (application responses, demographic information, and contact details) will be securely deleted within three months of the final participant selection process, and no later than 31st January 2026. Your data will not be used for any other purpose. No data from unselected applicants will be used in the research project or included in any reports or publications.
5. Lawful Basis for Processing
If you are selected to participate in the study, the lawful basis for processing your data is consent. You have the right to withdraw your consent at any point up to the agreed withdrawal deadline (1st March 2026) without explanation or consequence. After that point, anonymised data may already be incorporated into the research analysis and final write-up.
6. Data Storage and Security
All data will be digitally stored securely on encrypted, password-protected cloud services, specifically Google Drive, which complies with UK GDPR standards. File and folder access permissions are strictly limited to the researcher, ensuring only authorised access. Google Drive’s security measures include:
- Data encryption at rest and in transit
- Secure identity and access management
- Compliance with recognised certifications (ISO 27001, ISO 27018, GDPR)
Audio recordings will be deleted promptly after transcription and verification.
7. Data Sharing
Your data will not be shared with any third parties. With your express consent, should anonymised quotations be used in publications, all identifying information will be removed or altered to preserve confidentiality.
8. Retention Period
- Unsuccessful applicants' data: securely deleted by 31st January 2026.
- Research participants' data (such as recordings, transcripts, and identifiable research notes) will be securely destroyed within one year of the dissertation submission, and no later than 1st December 2027.
- Consent forms will be retained securely for a period of 6 years after dissertation submission (until 1st December 2033) to ensure compliance with ethical and auditing requirements, after which they will also be securely destroyed.
- Anonymised data incorporated into the dissertation may be retained indefinitely according to CCPE’s academic requirements but will not contain any personally identifiable information.
9. Your Rights
Under UK GDPR, you have the right to:
- Access the personal data held about you
- Request corrections or updates
- Withdraw consent and request deletion (up until 1st March 2026)
- Lodge a complaint with the Information Commissioner’s Office (ICO) if you are concerned about data handling.
For more information, visit the ICO website: https://ico.org.uk
10. Contact
For questions, data access requests, or concerns regarding your data, please contact:
James Benenson
[email protected]
Supervised by: Debbie Charles, MA Research Supervisor, CCPE