Who this notice applies to
This notice applies to visitors to grcplc.com, prospective clients and partners who contact GRC through the website, and applicants who use an online recruitment form. It concerns information handled through this website; project-specific research data is governed by the protocols and agreements established for the relevant assignment.
Information we may receive
When you submit an enquiry, GRC may receive your name, organisation, country, email address, telephone number, service interest, assignment locations, expected sample or fieldwork volume, methods or language requirements, project timeline, proposal or procurement deadline, pricing-format information, the message you choose to send, and any TOR/RFQ document you intentionally attach. If you apply for a published vacancy, GRC may also receive recruitment information requested by the application form and any document you intentionally upload. The web server may record limited technical information needed for security, reliability and troubleshooting.
Why we use this information
Enquiry information is used to understand and respond to your request, consider prospective assignments or partnerships, and communicate about next steps. Recruitment information is used to administer the relevant recruitment process, assess applications, communicate with applicants and maintain necessary recruitment records. Technical server information may be used to protect and maintain the website.
Analytics and privacy choices
Google Analytics is optional on this website. It is not loaded until you choose to allow analytics. Your preference is stored in your browser so the website can remember the choice. You can reopen “Cookie settings” from the footer at any time and switch analytics off. When you withdraw analytics consent, the website disables further analytics collection from that browser session and attempts to remove Google Analytics cookies associated with this site.
External links and services
The website contains links to external services such as Google Maps and may link to client, partner or social-media websites. These services operate under their own privacy practices. The GRC contact page uses a direct map link rather than automatically loading an embedded map.
What you should not submit through public forms
Please do not use the public website forms to submit identifiable research-participant data, confidential datasets, passwords, financial credentials, medical information or other highly sensitive material. Contact GRC first so that an appropriate transfer method can be agreed.
Enquiry document security
The proposal form accepts one optional procurement document in PDF, DOCX or XLSX format, subject to file-size and file-type checks. The upload is processed through protected storage outside the publicly accessible website directory, attached to the enquiry email, and the temporary server-side working copy is removed after the email attempt. The form is intended for a TOR, RFQ or similar procurement document—not respondent-level data, passwords, banking credentials or highly sensitive datasets.
Recruitment document security
Where a vacancy form accepts an uploaded document, the website is designed to store it outside the publicly accessible web directory. If protected private storage is unavailable, the upload function is designed to fail rather than place applicant documents in a public website folder. Access should be limited to personnel involved in the relevant recruitment process.
Retention and deletion
Website enquiry and recruitment information should be retained only for as long as reasonably necessary for the relevant communication, recruitment, contractual, legal, security or operational purpose. Temporary TOR/RFQ upload copies are removed from the web server after the submission email is processed; any copy received through GRC email becomes part of the corresponding enquiry record. Retention needs may differ between an active procurement enquiry, a completed recruitment exercise and routine server logs. GRC should periodically review information that no longer has a continuing purpose and securely delete or archive it as appropriate.
Access and sharing
Access should be limited to people who need the information for the relevant purpose. GRC may use hosting, email and analytics service providers to operate the website and communications. Information should not be sold or disclosed for unrelated marketing purposes.
Your requests
You may contact GRC to ask about personal information you submitted through the website or to request correction or deletion where appropriate. Some information may need to be retained for legitimate contractual, recruitment, legal, security or record-keeping reasons. If a request affects an active recruitment or procurement process, GRC will explain any practical consequence.
Updates to this notice
This notice may be revised when website features, service providers or organisational practices change. The latest revision date is displayed on this page.