Privacy Policy

This Privacy Policy describes how SRF Research and Training Centres Ltd (“SRF-RTC”, “we”, “us”) collects, uses, stores and protects personal information when you use the Delphi Expert Consultation Platform (“the Platform”). More about our organisation is available at www.soarresearch.org.

1. Data controller

2. Information we collect

We collect information you provide when joining a Delphi session, such as your name, email address, organisation, rejoin code and your responses to consultation questions. We also process limited technical data (browser type, device information, connection status) for security, offline synchronisation and service improvement.

3. How we use your information

We use personal information to identify participants, attribute responses correctly across consultation rounds, allow you to resume after disconnection, compute consensus statistics, generate aggregate research reports, communicate session updates, and maintain platform security.

4. Legal basis for processing

Processing is based on your consent to take part in the consultation, on the performance of a research agreement, or on our legitimate interest in conducting and safeguarding research, depending on the context and applicable law. Participants are informed of the purpose of each study before joining.

5. Data sharing and processors

Data is accessible to authorised SRF-RTC facilitators and administrators, and to service providers acting on our instructions: our cloud database and hosting provider, and KoboToolbox, where responses are mirrored for research data management. Only the data necessary for each integration is transferred. We do not sell personal data.

6. International transfers

Because our hosting and survey infrastructure operate internationally, your data may be stored or processed outside Uganda, including in the European Union and the United States. Where required, transfers are made under appropriate safeguards such as standard contractual clauses.

7. Data retention

Personal data is retained for as long as needed to complete the consultation and the associated research analysis, and thereafter in line with SRF-RTC research records and donor requirements, unless a longer period is required by law. Retention periods for a specific study are set out in that study’s participant information.

8. Your rights

Depending on your jurisdiction, you may have rights to access, correct, delete, restrict or object to processing of your personal data, to withdraw consent, and to data portability. To exercise these rights, write to soar.research.f@gmail.com. You may also lodge a complaint with your local data protection authority.

9. Security

Access to consultation data requires authentication, database row-level security policies restrict who can read or write records, and all traffic is encrypted in transit. No system is completely secure, so we ask participants to keep rejoin codes confidential. Suspected security issues can be reported to the contact address above.

10. Changes to this policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date.