Privacy Policy

Last updated on 03 April 2025.

For more info on OpinionX’s security, GDPR, approved subprocessors policies, see our data protection docs.

OpinionX is an online research platform for measuring people’s preferences and analyzing the differences in preference between groups of people. We recognize that our Users, Survey Participants, and Website Visitors value their privacy — this document (”Privacy Policy”) outlines how we collect, store, and protect their people’s personal data.

OpinionX conducts its processing of personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter the “GDPR”).

OpinionX provides products and services which enable Users to create and administer surveys and online discussions. We may host Users’ surveys on our servers and collect the responses to surveys on their behalf. Users may also upload contact information of potential survey participants to invite them to participate in a survey or collect it as part of their survey. We refer to this contact information and responses as “Survey Data”. Users remain the designated data controllers of this Survey Data and we process it solely in accordance with our agreement with Users.

Other than Survey Data, OpinionX acts as data controller in relation to all other personal information. If you are a survey participant, the data controller of the Survey Data relating to you is the User who created the survey and invited you to participate in it. For all other information, your data controller is OpinionX Limited. If you have any questions, comments or complaints regarding our privacy policy or practices, please contact us at dpo@opinionx.co.

— — —

Contents:

1. Basic Information

2. OpinionX as a Personal Data Controller (Users)

3. OpinionX as a Personal Data Processor (Survey Participants)

4. Further Information

— — —

1. Basic Information

Controller’s Identification and Contact Information: OpinionX Limited. Company registration number 672475. its registered address of Cois Abhann, Ballycahan, Kilcock, Co. Kildare, W23 KN2W, the Republic of Ireland (hereinafter also referred to as “OpinionX”, “us”, or “we”).

Data Protection Officer: OpinionX has appointed a Data Protection Officer to help address any data protection issues. If any such issues arise, please contact the Data Protection Officer directly (Daniel Kyne, dpo@opinionx.co). The Data Protection Officer is available to help you deal with inquiries regarding the handling of personal data or to provide additional information on the protection of personal data.

Transfer of Personal Data to a Third Country or International Organization: In cases where OpinionX transfers your personal data to non-EU countries, it always ensures compliance with Article 44, et seq., of the GDPR and also requires compliance from personal data processors. OpinionX will transfer data only to non-EU countries that are able to ensure the level of protection provided under the GDPR. This level of protection is ensured in particular by the adequacy decision issued by the EU Commission or the application of standard data protection clauses in accordance with Article 46(2)(c) of the GDPR. Any such recipients are detailed in our approved subprocessors list.

Supervisory Authority: The relevant supervisory authority according to OpinionX’s registered address is the Data Protection Commission of Ireland with its registered office at 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland.

OpinionX operates in the position of a personal data controller in relation to the personal data of Users and Website Visitors. OpinionX also operates in the position as a personal data processor in relation to personal data of survey participants that the User stores as Survey Data on OpinionX servers (as we only provides the User with data space for the purposes of their collection, storage, and analysis — the controller of such personal data is the User itself).

— — —

2. OpinionX as a Personal Data Controller

This section of the privacy policy applies to all personal information for which OpinionX is the data controller:

2a. The information we collect about you

2b. How we use your information

2c. Who we share your information with

2d. Links to other websites

2e. Updating your information

2f. Your rights as a data subject

2g. How long we keep your information

2h. Security of your information

2i. International transfers of information

2j. EU–US Data Privacy Framework

2k. Changes to our privacy policy

2a. The information we collect about you

We collect information about you when you provide it to us, when you use our products, services and website, and when other sources provide it to us, as follows:

Account information: where you subscribe to our products or services, or create an account with us, we collect information from you such as your name, email address and username. We also ask for and collect personal information such as an email address and name from any individual that you authorize to use our products or services.

Information that you provide to us: we collect the information that you give to us, for example when you:

contact us by phone, email, online chat, or otherwise.
fill in forms on our website.
sign up for our newsletters and promotions.
respond to a survey run by us.
participate in comment sections on our website or newsletter.
contact us for customer support.

OpinionX does not process payment data (payment card numbers, interbank transactions, codes or payment tokens and other sensitive data necessary for payment processing) of Users. Payment data is processed by Stripe Payments Europe Limited, located at 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland.

As the controller of personal data, OpinionX does not process the personal data of Users that fall under special categories of personal data pursuant to Article 9 of the GDPR.

OpinionX processes your personal data for as long as there is a legal reason to keep it, after which we will delete the data immediately. Personal data processed for the purpose of fulfilling obligations arising from special legal regulations, such as legal data retention or documentation obligations, is processed by OpinionX for the period specified by the applicable laws. These include, in particular, data retention obligations under applicable civil, commercial or tax laws. If the data retention obligation ceases, the personal data will be deleted immediately.

Technical information: we may collect information relating to your interaction with our products, services and website, including the type of browser and/or device used, operating system, files viewed, date/time stamp, referrer page, and IP address.

Usage information: we may collect information about your usage of our products and services, including the version of any of our software that you are using and the number of users of that software. We also collect information about your use of our website including which webpages you view, the services you view or search for, your referring and exit pages, the length of visits to certain pages and the times and dates of these actions.

Cookies: we may use cookies to distinguish you from other Users of our products, services and website. This helps us to improve our website’s performance and your experience of using our website. You can control the use of cookies at the individual browser level. Some of these cookies are necessary for the use of our services. If you reject cookies, you can still use our website, but your ability to use some features or areas of our website may be limited.

Web beacons: when we send you emails, we may include a web beacon to allow us to determine the number of people who open our emails and information such as when and how many times the email was viewed, whether any links were clicked on, whether the email was forwarded, your geographic location and browser and device type. This helps us to measure the effectiveness of our email campaigns. When you click on a link in an email, we may record this individual response to customize our offerings to you. Web beacons can be refused when delivered via email. If you do not wish to receive web beacons via email, you will need to disable HTML images or refuse HTML emails via your email software, but please note that this is likely to reduce the functionality of such emails.

Social media features and widgets: our website includes social media features. These features may collect your IP address, which page you are visiting on our site, and may set a cookie to enable the feature to function properly. Social media features and widgets are either hosted by a third party or hosted directly on our website. Your interactions with these features are governed by the privacy policy of the company providing them.

Third party services: if you choose to enable or connect to a third party application or service in conjunction with our products and services, that third party service may make certain information about you available to us, for example your name and email address in order to authenticate you. You should check your privacy settings on these third party services to understand and control the information provided to us through these services.

Survey Data: if you are a User using our survey products and services you may upload contact information of potential survey participants to our products and services and we may collect your survey response data for you. You remain the data controller of this Survey Data and we process it solely in accordance with the agreement between us.

2b. How we use your information

We use the information that we hold about you in the following ways. This section does not relate to your Survey Data – we process this only in accordance with your instructions and our agreement with you.

Providing our products and services: we use your information to provide you with the products and services which you have subscribed to or requested. This may include providing you with customer support and with the benefits of any automated updates and new features associated with the relevant product or service. This processing is necessary to perform our contract with you for these products and services.

Responding to enquiries: we will use your contact information and any information that you send to us to respond to your questions, requests for information or complaints. Depending on the nature of your enquiry, we may do this on the basis of performing our contract with you, our legal obligations, or our legitimate interests of providing you with the best service and understanding how we can improve our products and services based on your experience.

Third party services: where you choose to enable or connect to a third party application or service we use the information provided about you by that application or service to enable it to work in conjunction with our products or services.

To protect our business, products, services and website: we will use your information in accordance with our legitimate interests of administering and maintaining our systems and ensuring network and information security, for example to prevent unauthorized access to our networks, to investigate faults, to control the abuse of our products or services, to prevent denial of service attacks and to monitor system usage and server load.

To develop, test and improve our products, services and website: we will use your information about how you use our products, services and website to improve the user experience for Users, for example to ensure we are offering appropriate features, supporting appropriate browsers and devices and to ensure our website content is presented in the most effective manner.

Monitoring and enforcing our rights: we may use your information to ensure that you are using our products and services in accordance with the terms on which they are supplied, and to enforce those terms, our website terms of use, or other relevant agreements that we have with you, in accordance with our legitimate interests of being able to enforce our rights.

Legal requests: we may need to use your information to comply with a legal obligation such as to respond to a court order or a request from a supervisory authority or government, or to prevent fraud.

Notifications: we will use your information to send you communications which are required by law or to notify you of changes to our terms or this privacy policy, or changes (permanent or temporary) to our products or services. Such messages will not include any promotional content. Depending on the nature of the communication we may do this on the basis of performing our contract with you or complying with our legal obligations.

Surveys and feedback requests: we may use your information to invite you to participate in surveys run by us on our own behalf, for example to invite your feedback on our products, services and website. These communications will not contain any promotional content and will be sent on the basis of our legitimate interests of improving our products, services and website. However, if you would prefer not to receive such communications, please contact us at dpo@opinionx.co.

Marketing: we may use your information to provide you with information about our products and services, offers and events that we consider may be of interest to you. This information will relate to our own products and services only, and we will not provide your information to third parties for marketing purposes. We send these communications either on the basis of your consent (where you have specifically consented to receiving such communications) or in accordance with our legitimate interests of growing our business.

You may stop receiving marketing communications from us at any time. To withdraw your consent or to opt-out of receiving marketing communications, you may contact us at dpo@opinionx.co or follow the unsubscribe instructions contained in the communication itself. All programmatic email communication you receive from us will include unsubscribe links.

Legal basis for processing (EEA and UK only): where your data is processed by OpinionX Limited or if you are an individual from the EEA or the UK, we must have a legal basis for collecting and using your information when we act as data controller. This will be one of the following:

where we require the information to perform a contract with you (eg. to deliver the services that you have requested);
where we have your consent to do so, and in this case you have the right to withdraw or refuse to give your consent at any time. This will not however affect the lawfulness of any processing based on your consent before you withdraw it;
where the processing is necessary for our legitimate interests (and those legitimate interests are not overridden by your interests or fundamental rights and freedoms); or
where we need to comply with a legal or regulatory obligation.

If you have any questions about or require further information concerning the legal basis on which we collect and use your information, including regarding our legitimate interests, please contact us.

2c. Who we share your information with

We will only disclose your information in the circumstances below:

Our service providers: we may disclose your information to our third party service providers. In each case we have agreements in place with the service provider to ensure that they provide appropriate protection for your information and to ensure that they are only permitted to use your information in accordance with our instructions and as necessary to provide the relevant service to us. For example, we engage third parties to provide the following services:

hosting our online survey services and our website.
sending Users communications.
providing online chat services.
provide analytics information.
manage credit card processing.

Professional advisers: we may need to disclose your information to our professional advisers, including our lawyers, bankers, auditors, and insurers.

Compliance with legal obligations and enforcement of our rights: we may also have to disclose your information if this is reasonably required to:

comply with any applicable law, regulation or legal process or to respond to a request from a government or a regulatory body.
enforce our agreements, policies and website terms of use.
protect the security or integrity of our products and services.

Other users within your organization: where your organization purchases products or services from us covering multiple authorized users and contacts, we may disclose your information to other users within your organization, for example to verify licensing and billing information.

Survey Data: our agreement with you specifies the authorized subprocessors to whom we may disclose your Survey Data. We will not disclose your Survey Data to anyone else, unless we are required to do so by law.

2d. Links to other websites

This privacy policy covers our products, services and website. Our website may contain links to and from third party websites. The information practices and the content of such other websites are governed by the privacy policy of that website. If you click on a link to those websites you will leave our website to go to the website that you selected. Please note that we cannot accept responsibility or liability for any use of your personal information by such third parties, and we cannot guarantee that they will adhere to the same privacy practices as us. We encourage you to review the privacy policies of any third party before you submit any personal data to them.

2e. Updating your information

If you wish to update, amend, correct or request deletion of your personal information you may do so by making the change within your account once logged in or by emailing us at dpo@opinionx.co We will respond to your request within 30 days.

2f. Your rights as a data subject

Your right to access: at your request we will provide you with information about whether we hold any of your personal information and provide a copy of this information to you. To request this information please contact us at dpo@opinionx.co. You may update, amend, correct or request deletion of your personal information as described above. Where your information is processed by OpinionX Limited or if you are from the EEA or the UK you may have the right to exercise additional rights available to you, including:

Right of Erasure: in certain circumstances you have the right to erasure of personal information held about you, although this may be qualified where e.g. it is necessary for that information to be retained for record keeping purposes or compliance with our obligations. If we are unable to comply with your request, we will explain why.

Right of Rectification: you have the right to have your personal information rectified if it is inaccurate or incomplete.

Right to Object: you have the right to request that we stop processing your personal information for marketing purposes, and can request that we stop processing your personal information for other purposes based on our legitimate interests. In some cases, we may be able to demonstrate that we have compelling legitimate grounds to continue to process your information.

Right of Restriction: you may have the right to request that we restrict the processing of your personal information (eg. where you believe that the personal information we hold about you is inaccurate or unlawfully held).

Right to Data Portability: you may have the right to be provided with your personal information in a structured, machine readable and commonly used format and to request that we transfer the personal information provided by you to another data controller.

You also have the right to withdraw consent at any time where we are relying on consent to process your personal information. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent.

If you would like to exercise such rights, please contact us at dpo@opinionx.co. To protect your privacy and security, we may take steps to verify your identity before complying with the request.

You also have the right to complain to a data protection authority about our collection and use of your personal information. For more information, please contact your local data protection authority. In the UK, this is the Information Commissioner’s Office. A list of EU Supervisory Authorities is available here.

2g. How long we keep your information

We will retain your information for as long as your account is active or as needed to provide our products or services or otherwise fulfil the purposes described in this policy, including for the purposes of satisfying any legal, accounting or reporting requirements. If you wish to delete your personal information at any time, you can do so by logging into OpinionX and deleting your account via the account settings page. Alternatively, please contact us at support@opinionx.co if you need help with account deletion. If we are unable to comply with that request, for example because we need to retain some or all of your information to comply with a legal obligation, we will let you know and will explain why.

Survey Data: you are in control of the management of your Survey Data and can delete it from our online systems or download it to your own systems at any time. Please refer to our contract with you for the specific period for which we retain your Survey Data when we cease providing you with our products and services and for how long your Survey Data remains in our back ups before being permanently deleted.

2h. Security of your information

We take the security of your information extremely seriously. Where you use a password to access certain areas of our website and services you are responsible for keeping this password confidential. You can find a detailed information about data security on OpinionX here.

2i. International Transfers of Information

Your information may be processed by some of our third-party service providers, including those operating outside the European Economic Area (EEA) or the United Kingdom (UK). When transferring your data internationally, we ensure that it is protected in accordance with GDPR requirements by implementing one or more of the following safeguards:

EU–US Data Privacy Framework (DPF): For transfers to US-based organizations, we rely on the DPF adequacy decision, which certifies that participating US companies provide adequate protection for personal data in line with GDPR standards.
Standard Contractual Clauses (SCCs): For transfers to countries without an adequacy decision, we use SCCs approved by the European Commission to ensure GDPR-compliant safeguards are in place.
Supplementary Measures: Where necessary, we apply additional measures such as encryption or pseudonymization to protect your data during international transfers.

You can find more information about our subprocessors and their compliance mechanisms here.

2j. EU–US Data Privacy Framework

For transfers of personal data to the United States, OpinionX relies on the EU–US Data Privacy Framework (DPF), adopted by the European Commission in July 2023. This framework ensures that certified US organizations provide adequate protection for personal data transferred from the EEA, UK, or Switzerland.

Key points regarding the DPF:

Certification: We only transfer data to US organizations that are self-certified under the DPF and listed on the official registry maintained by the US Department of Commerce. All of OpinionX’s non-EU subprocessors have been verified as listed entities on this official registry.
Accountability: If a certified US organization processes your data inconsistently with DPF principles, OpinionX remains responsible for ensuring compliance unless it can demonstrate it is not liable for any resulting harm.
Redress Mechanisms: Data subjects have access to robust redress mechanisms under the DPF, including complaints through national supervisory authorities and binding arbitration via the Data Protection Review Court.

For transfers outside DPF-certified organizations, we rely on SCCs or other GDPR-compliant mechanisms. If you have questions about how your data is transferred internationally or wish to exercise your rights under GDPR, please contact us at dpo@opinionx.co.

2k. Changes to our privacy policy

We may change this privacy policy from time to time. We will post any privacy policy changes on this page and, if the changes are significant, we will post a notice on the homepage of our website, the login screens for our services, and/or we will send an email notification to our account holders.

— — —

3. OpinionX as a Personal Data Processor

This section of the privacy policy applies to all personal information for which OpinionX is the data processor (ie. Survey Data collected from Survey Participants).

OpinionX’s products and services enable Users to create and administer surveys. We may host Users’ surveys on our servers and collect the responses to those surveys on their behalf. Users may also upload contact information of potential survey participants to invite them to participate in a survey. We refer to this contact information and responses as “Survey Data”. Users remain data controllers of this Survey Data and we process it solely in accordance with our agreement with Users. Aside from Survey Data, we are likely to process very limited information about you.

Users have total discretion to determine what information they collect, who they invite to participate in a survey, whether they upload participant information, what the Survey Data will be used for, whether it will be combined with other information and data, who it will be shared with and how long it will be stored. We strongly recommend you read the privacy notices and/or obtain privacy information from the User who has invited you to participate in the survey to fully understand how your Survey Data will be used.

Users may also install our products on their own servers in which case the survey is hosted by Users and we do not process any Survey Data relating to that survey. The rest of this policy applies only where we host surveys on behalf of Users or otherwise process Survey Data for them (for example, where we carry out paper surveys for them).

3a. The information we collect about you

3b. How we use your information

3c. Who we share your information with

3d. Your rights as a data subject

3e. How long we keep your information

3f. Security of your information

3g. International transfers of information

3h. EU–US Data Privacy Framework

3i. Changes to our privacy policy

3a. The information we collect about you

We collect the following information about you:

Survey Data: we collect your survey responses. Users may also have uploaded your contact information to enable them to invite you to participate in the survey, and send reminder emails to you. Users can also import additional data about Survey Participants to assist them in analyzing their survey results. As explained above, we process this Survey Data on our user’s behalf and make no use of it ourselves.

Technical information: we may collect information relating to your interaction with our software and services, including the type of browser and/or device used, operating system, referrer page, and IP address. We do not link this information to your Survey Data.

Cookies: our online survey services use a limited number of cookies. The most relevant one to you as a Survey Participant is that a product cookie will ensure you do not accidentally lose your place in a survey within 24 hours of starting it.

Your contact information: we will collect information from you if you contact us directly, for example for product support or in relation to a survey invitation that you have received.

In the event that data belonging to special data categories is stored as Survey Data on the OpinionX servers, the User is responsible for the lawfulness of obtaining and handling such data in accordance with the GDPR and the applicable national laws. OpinionX reserves the right to remove such personal data from its servers if OpinionX finds non-compliance with the conditions for processing personal data of special categories. Before deleting the personal data of respondents, OpinionX contacts the user with a request for correction.

3b. How we use your information

We use the information that we hold about you in the following ways:

Survey Data – to provide our products and services: we hold, store, and process Survey Data that contains your personal data solely to provide our products and services to Users, in accordance with our agreement with them. We only use your Survey Data for our own purposes if required to do so by law. We will never use Survey Data or personal data about Survey Participants for sales or marketing activities.

Technical information – to protect our services, and for analysis: we will use your information in accordance with our legitimate interests of administering and maintaining our systems and ensuring network and information security, for example to prevent unauthorized access to our networks, to investigate faults, to control the abuse of our products or services, to prevent denial of service attacks and to monitor system usage and server load. We may also use this information in aggregate form for our legitimate interests of improving our products and services.

Cookies – to prevent multiple survey completion: if a User has enabled this feature, our online survey services may use a cookie to prevent you completing the same survey multiple times.

Your contact information – to respond to your enquiry: we will only use your contact information where you contact us directly, in order to respond to your enquiry. This is in accordance with our legitimate interests of providing user service. In many cases (for example where you wish to exercise your rights as a data subject) this is likely to involve referring you to our user for them to respond to you directly.

3c. Who we share your information with

Survey Data: unless we are required to do so by law, we will not disclose your Survey Data to any third parties other than our users and our approved subprocessors (such as our affiliates and our hosting providers) that have been authorized by our user in our agreement with them.

Your contact information: where you contact us directly we may, if appropriate, refer your enquiry to the relevant User who is managing the research project you participated in or were invited to.

3d. Your rights as a data subject

Your right to access: at your request we will provide you with information about whether we hold any of your personal information (other than your Survey Data) and provide a copy of this information to you. To request this information please contact us at dpo@opinionx.co. You may also request that we update, amend, correct, or delete your personal information.

If you wish to access, correct, or delete your Survey Data, opt out of any use or disclosure of your Survey Data, or exercise any of the other rights described below in relation to your Survey Data, you will need to contact the User responsible for that survey directly. Where necessary, we will provide assistance to Users to deal with your request.

Where we are the data controller, you may have the right to exercise the following additional rights:

If you would like to exercise such rights, please contact us at dpo@opinionx.co. To protect your privacy and security, we will take steps to verify your identity before complying with the request.

You also have the right to withdraw consent at any time where we are relying on consent to process your personal information. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent.

You also have the right to complain to a data protection authority about our collection and use of your personal information. For more information, please contact your local data protection authority. In the UK, this is the Information Commissioner’s Office. A list of EU Supervisory Authorities is available here.

3e. How long we keep your information

Survey Data: Users determine how long they store your Survey Data in our products and services, so if you have any questions about this please ask them directly. Aside from Survey Data we are likely to hold only very limited information about you.

3f. Security of your information

3g. International transfers of information

EU–US Data Privacy Framework (DPF): For transfers to US-based organizations, we rely on the DPF adequacy decision, which certifies that participating US companies provide adequate protection for personal data in line with GDPR standards.
Standard Contractual Clauses (SCCs): For transfers to countries without an adequacy decision, we use SCCs approved by the European Commission to ensure GDPR-compliant safeguards are in place.
Supplementary Measures: Where necessary, we apply additional measures such as encryption or pseudonymization to protect your data during international transfers.

You can find more information about our subprocessors and their compliance mechanisms here.

3h. EU–US Data Privacy Framework

Key points regarding the DPF:

Certification: We only transfer data to US organizations that are self-certified under the DPF and listed on the official registry maintained by the US Department of Commerce. All of OpinionX’s non-EU subprocessors have been verified as listed entities on this official registry.
Accountability: If a certified US organization processes your data inconsistently with DPF principles, OpinionX remains responsible for ensuring compliance unless it can demonstrate it is not liable for any resulting harm.
Redress Mechanisms: Data subjects have access to robust redress mechanisms under the DPF, including complaints through national supervisory authorities and binding arbitration via the Data Protection Review Court.

3i. Changes to our privacy policy

— — —

4. Further Information

Last modified 03 April 2025. All users joining OpinionX after 03 April 2025 are informed that creating an account includes opting into this policy. All existing OpinionX users (including those who have unsubscribed from email marketing) received an email on April 3rd 2025 informing them of the changes made along with a link to read the full policy.

For more info on specific security standards, our approved subprocessors policies, and other privacy practices, please refer to our data protection docs.