- +44 7791 158 265
- admin@theconsultants-e.com
- Mon - Fri: 09:30 - 17:00
At TCE we are committed to working with integrity and ensuring our work – including our training, our research and our monitoring and evaluation – meets the highest ethical standards.
TCE is committed to equality and diversity in the workplace. Specific actions undertaken within our Workplace Equality policy include:
Data management system
As a company demonstrating strong compliance with the GDPR and its relationship to the UK GDPR and amended UK DPA 2018, we take data collection, retention and removal very seriously. For more information on our general privacy policy and data collection practices, please see here. Our Data Protection Officer – Gavin Dudeney – can be contacted at gavin.dudeney@theconsultants-e.com. Apart from UK GDPR and UK DPA 2018 compliance, we are familiar with working in environments where other practices may be more commonplace, or lawful requirement. We aim to maintain our data practices outlined below, whilst recognising that local factors may be brought to bear on any individual project.
Data collection
Data collection for M&E projects of this nature is carried out by authorised staff, using a variety of on-the-ground tools and devices, as well as secure online forms and other collection tools. Our consultants will only collect the data needed for any given project, as agreed with the contractor. When data collection is carried out, participants are made fully aware of what data is being collected, how it will be stored and used, and what measures are in place for its automatic removal, or for its removal on request (where such a request is in line with UK GDPR and UK DPA 2018 regulations and the project aims). Where physical data collection involving hard-copy matter is necessary, paper-based data will be input and transferred to digital storage as soon as feasibly possible, and hard copies destroyed where appropriate. All digital collection is carried out using secure online tools and sites.
Data storage
Once collected, data is transferred to secure storage online, and access limited only to those working on any given project, and then on a more granular level within the given project. Collected and current data stored online for the purposes of carrying out data analysis is backed up on an hourly basis to a secure storage facility at the registered UK address of the company, where secure daily on-site backups are also made. This level of redundancy ensures that data is both available to project consultants, but also safe, secure and easily recoverable in the case of any storage failure at any given node in the process. Data storage is limited not only by agreements set at the time of the data collection, but also by UK GDPR and UK DPA 2018 rules regarding data retention. For projects of a sensitive nature, we are able to offer encrypted data storage and sharing. TCE operates a clean desk policy in its physical offices.
Data sharing
Data sharing is only carried out upon agreed lines with the contractor, and with company staff on a role-by-role basis. TCE consultants will only be given access to the data that they need to successfully carry out any given part of a project. This access will normally be via secure online services but may also be in the form of physical media such as a secure USB drive or similar, as required. Data is never transferred using unsecured or non-encrypted means.
Data removal
Once a project has successfully finished – and with the agreement of the contractor – all stored copies of the data may, where appropriate, be deleted from both the online and local storage facilities. If this is not carried out as standard, TCE will apply workable GDPR practices to ensure that data is deleted at an appropriate juncture and point in time. For longitudinal projects, data can be safely stored if so requested by the client, for later retrieval and review.
Data breaches
Data breaches, should they happen, should be reported in the first instance to the TCE Data Protection Officer (see above) who will take any and all appropriate steps to minimise the potential damage of such a breach, and to inform involved parties so that they make take similar actions as appropriate. It should be noted that in sixteen years of operation we have never suffered a data breach.