Our approach
OnePlusOne Marriage and Partnership Research is the controller for the personal information described in our privacy notices. We handle personal information under the UK GDPR and Data Protection Act 2018, as amended by the Data (Use and Access) Act 2025. Cookies and electronic marketing are also subject to the Privacy and Electronic Communications Regulations.
The principles we follow
We aim to use personal information fairly, lawfully and transparently; collect it for clear purposes; use only what we need; keep it accurate; retain it only as long as necessary; and protect it against unauthorised access, loss or misuse. We keep records to demonstrate how we meet these responsibilities.
How we protect information
Our policies cover access controls, secure storage and transfer, staff training, written agreements with suppliers, privacy by design and procedures for responding to personal data breaches. Information about health, ethnicity and other special categories, and criminal offence information, receives additional safeguards. Our Appropriate Policy Document explains the relevant conditions and protections.
How long we keep information
Retention depends on the purpose, legal obligations, research requirements and the need to handle complaints or claims. We review information and arrange secure deletion or anonymisation when it is no longer needed. Our privacy notices explain the relevant periods. Genuinely anonymous information is different from coded information that can still be linked to a person.
Information shared outside the UK
Some suppliers operate or store information outside the UK. Where a restricted transfer takes place, we use applicable safeguards, such as an adequacy decision or approved contractual protection, and assess the relevant risks. You can ask the Data Protection Officer for details of safeguards for a particular transfer.
Your rights
You can ask to access or correct your personal information, request deletion or restriction, object to certain uses, and request data portability where it applies. Where we rely on consent, you can withdraw it. Rights depend on the circumstances and lawful basis. We will explain any limits that apply.
We normally respond to rights requests within one month, subject to the applicable rules on identity checks, clarification and extensions for complex or multiple requests. See our privacy policy for details.
Questions or complaints
Contact our Data Protection Officer at privacy@oneplusone.org.uk, or write to Data Protection Officer, OnePlusOne, c/o MHA MacIntyre Hudson, 6th Floor, 2 London Wall Place, London EC2Y 5AU.
You can complain to us about how we handle your information. We will acknowledge your complaint within 30 days, investigate and keep you informed. You can also complain to the Information Commissioner’s Office at any time. You do not have to complain to us first.