Information Security & Data Protection Commitment

1. Our Commitment

DataDiggers is committed to maintaining high standards of information security, confidentiality, and data protection across all business operations.

We are ISO 20252:2019 certified, demonstrating compliance with internationally recognized standards for market, opinion, and social research.

Our security and data governance framework is designed to ensure:

• Confidentiality of client and respondent data
• Integrity of research processes
• Secure handling of personal information
• Responsible use of AI-assisted tools

2. Governance and Accountability

Information security and data protection are managed through:

• Internal policies and documented procedures
• Role-based access controls
• Staff confidentiality agreements
• Periodic internal reviews
• Defined responsibilities within management structure

All employees and contractors are bound by confidentiality obligations.

3. Technical Safeguards

We implement appropriate technical measures, including:

• Encrypted communication (HTTPS/TLS)
• Secure cloud-based hosting infrastructure
• Access restrictions based on business need
• Authentication controls
• Monitoring of system integrity

We review technical safeguards periodically to maintain effectiveness.

4. Data Minimization and Purpose Limitation

We collect and process personal data strictly for defined purposes, including:

• Conducting market research projects
• Managing client relationships
• Operating research platforms

We do not sell personal data.

Survey responses are anonymized or pseudonymized where applicable before delivery to clients.

5. Vendor and Sub-Processor Management

Where third-party providers are used (e.g., hosting, CRM, analytics), we:

• Execute Data Processing Agreements where required
• Assess vendor security posture
• Limit access to necessary data only

International transfers are safeguarded through approved legal mechanisms.

6. Incident Management

We maintain internal procedures to:

• Detect and assess potential security incidents
• Contain and remediate issues
• Notify competent authorities and affected parties when legally required

7. AI and Synthetic Data Governance

Where AI-assisted tools or synthetic data methodologies are used, we apply:

• Transparency principles
• Methodological controls
• Responsible usage frameworks
• Clear differentiation between real and synthetic data

AI tools support human judgment and do not replace professional oversight.

8. Certification

DataDiggers is certified under ISO 20252:2019, reflecting adherence to rigorous standards governing:

• Research design
• Fieldwork execution
• Data handling
• Documentation
• Quality assurance

Certification details may be provided upon request.

9. Continuous Improvement

We continuously review and enhance our security and governance practices to reflect evolving regulatory requirements and industry standards.

For security-related inquiries:
‍📧 privacy@datadiggers-mr.com