Data processing terms

• FeFe is the controller for participant accounts, screening data, quality records and payments. Researchers never receive participant identities from FeFe.
• The researcher is the controller for everything collected inside their own study, on their own survey tool. FeFe is not a processor for that data.
• FeFe acts as processor only for the researcher account data it handles on the researcher's behalf, such as study configuration and submission records.

Where FeFe acts as processor, it processes data only on the researcher's documented instructions and as needed to run the platform or meet legal obligations. Everyone with access is bound by confidentiality.

FeFe applies row level access control so each account reaches only its own data, restricts financial changes to validated server processes, encrypts traffic in transit, and limits administrative access to what is needed to operate the service.

FeFe uses the providers listed on the subprocessors page and remains responsible for their performance. We will tell researchers before adding a new one so they can object.

• FeFe assists researchers with data subject requests, impact assessments and regulator queries that relate to data FeFe holds.
• FeFe notifies affected researchers without undue delay, and in any case within 72 hours of becoming aware of a personal data breach affecting their data.
• FeFe provides the information reasonably needed to demonstrate compliance, and supports an audit no more than once a year unless a regulator requires otherwise.

Transfers outside the UK rely on appropriate safeguards such as the UK addendum to the EU standard contractual clauses. On request, or when a researcher closes their account, FeFe deletes the researcher's data except financial records kept for six years to meet UK tax and accounting rules.