Games User Research

Privacy Policy

Last updated: February 2026

This privacy notice explains how Steve Bromley User Research Ltd (“Company”, “we”, “us”, or “our”) collects, uses, and protects personal information when you interact with our website or participate in user research activities.

If you have questions, contact: steve@gamesuserresearch.com

1. Who We Are

Steve Bromley User Research Ltd is an independent consultancy providing user research services for video game developers and publishers.

Our activities include:

  • Website and business communications
  • User research studies (playtests, interviews, surveys, usability testing)
  • Remote and in-person research sessions

For data protection purposes, we act as a data controller for our business operations and research activities, and may act as a data processor on behalf of clients depending on the project.

Address:
Suite 1, The Courtyard, The Old Monastery, Windhill, Bishop’s Stortford, Hertfordshire, England, CM23 2ND

2. When This Notice Applies

This notice applies when you:

  • Visit our website
  • Contact us or request information
  • Participate in a research study conducted by us
  • Attend a remote or in-person playtest

3. Information We Collect

A. Website and Business Communications

When you contact us or use our website, we may collect:

  • Name
  • Email address
  • Information you include in messages or enquiries

We do not use website data for advertising profiling or marketing tracking.

B. Research Participants (Recruited via Partners)

Participants in research studies are recruited through third-party recruitment agencies or panel providers.

These partners collect initial participant information and provide their own privacy information at recruitment.

We typically receive only information necessary to conduct the study, such as:

  • First name or participant ID
  • Contact details for scheduling
  • Relevant screening characteristics (e.g. gaming experience)

C. Research Session Data

During studies we may collect:

  • Gameplay feedback and opinions
  • Survey and interview responses
  • Researcher observation notes

D. Recordings

Where stated in advance, research sessions may include:

  • Screen recordings
  • Audio recordings
  • Video or webcam recordings
  • Photographs or recordings during in-person sessions

Participants are informed before recording takes place.

4. How We Use Personal Information

We use personal information to:

  • Communicate with website visitors or clients
  • Conduct and analyse user research
  • Produce research findings for clients
  • Administer research sessions and incentives
  • Maintain business and legal records
  • Protect security and prevent misuse

We do not sell personal data or use participant data for marketing.

5. Legal Bases for Processing

Under UK GDPR, processing relies on:

  • Legitimate interests — conducting professional user research services
  • Consent — participation in studies and recordings
  • Legal obligations — accounting or regulatory requirements

Consent may be withdrawn at any time.

6. Sharing Information

We may share information with:

  • The video game developer or publisher commissioning research
  • Trusted service providers (e.g., video conferencing, survey tools, secure cloud storage)
  • Professional advisers where legally required

Research findings are anonymised or pseudonymised wherever possible.

We do not sell personal data.

7. International Transfers

Some service providers may process data outside the UK. Where this occurs, appropriate safeguards are used in accordance with UK data protection law.

8. Data Security

We implement appropriate technical and organisational safeguards, including:

  • Encrypted and password-protected devices
  • Multi-factor authentication on accounts
  • Restricted access (authorised researcher only)
  • Secure cloud storage with encryption in transit and at rest
  • Regular software and security updates

9. Data Retention

We retain data only as long as necessary:

  • Website enquiries: typically up to 24 months
  • Research administration data: up to 12 months
  • Research recordings and raw data: normally up to 24 months
  • Anonymised findings may be retained longer
  • Financial records retained as required by law

Data is securely deleted when no longer required.

10. Children and Young Participants

Where research involves participants under 18, recruitment partners obtain parental or guardian consent before participation.

11. Your Rights

Under UK data protection law, you have the right to:

  • Access your personal data
  • Request correction or deletion
  • Restrict or object to processing
  • Withdraw consent
  • Lodge a complaint with the Information Commissioner’s Office (ICO)

Contact: steve@gamesuserresearch.com

12. Updates to This Notice

We may update this notice periodically. The latest version will always be available on our website.

13. Contact

Steve Bromley User Research Ltd
Suite 1, The Courtyard, The Old Monastery, Windhill, Bishop’s Stortford, Hertfordshire, England, CM23 2ND

Email: steve@gamesuserresearch.com