Last Updated: 9 September 2026
This Privacy Policy explains how iReach Insights Limited (“iReach”, “we”, “us” or “our”) collects, uses, shares, stores and protects personal data in connection with iReach Conversations, our research community, ireachconversations.com (the “Site”), surveys and other research activities.
It is intended primarily for members of the iReach Conversations research community and people considering becoming members.
This Privacy Policy should be read together with the iReach Conversations Member Terms & Conditions, our Cookie Policy and any additional privacy information provided for a particular research project.
1. Who We Are
iReach Insights Limited is an Irish market research and insights company and operates the iReach Conversations research community.
For the core activities involved in recruiting, profiling, communicating with and managing iReach Conversations members, iReach generally acts as Data Controller and determines why and how member personal data is processed.
Contact details:
iReach Insights Limited
Ireland
Email: info@ireachconversations.com
Website: ireachconversations.com
Registered Office: --
Company Registration Number: --
2. Our Role as Data Controller
As Data Controller, iReach is responsible for processing member personal data in accordance with applicable data protection law, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the Data Protection Act 2018.
Our role may differ in particular research projects or where we process information on behalf of another organisation. Where this is relevant to you, additional information will be provided where appropriate.
Where iReach conducts research for a client, we will determine and document the appropriate data protection roles having regard to the actual purposes and means of the processing.
3. Personal Data We Collect
The personal data we collect depends on your membership, profile, research participation and use of the Site.
It may include:
We aim to collect only information that is relevant and reasonably necessary for legitimate research, community administration and the other purposes described in this Policy.
4. Registration and Member Profile Data
When you join iReach Conversations, we ask for information needed to create and administer your membership and to build your research profile.
Profile information helps us identify research activities that may be relevant to you and helps us understand the composition of the research community.
We may periodically ask you to update or confirm profile information so that it remains accurate.
You are responsible for providing genuine information. Our Member Terms explain how materially inaccurate or deliberately false information may affect research eligibility or membership.
5. Survey and Research Data
When you participate in research, we may collect your answers to survey questions and other information you choose to provide.
Depending on the project, research may collect opinions, attitudes, experiences, purchasing behaviour, brand usage, service experiences, media habits, financial attitudes, health-related opinions or other information relevant to the research question.
We may also record operational information such as whether you opened or completed a survey, when you participated, completion time, screening status and quality-validation outcomes.
The information collected for a particular study will depend on the purpose of that research.
6. Demographic and Profiling Information
We use demographic and profile information to understand our panel, identify potentially eligible participants, manage research quotas and analyse differences between groups.
Profile information may be used to select members for research without asking the same screening questions repeatedly.
Profiling for research selection does not mean that you are guaranteed an invitation or that you will qualify for a particular study.
We may create derived or grouped research variables from information you provide, for example age bands, household groups, geographic groups or audience segments.
7. Technical, Device and Usage Information
When you use the Site, open research invitations or participate in online research, we may collect technical information such as IP address, browser type, device type, operating system, timestamps and information about how the Site or survey is used.
This information may be used for security, troubleshooting, analytics, fraud prevention, duplicate-participation checks and research-quality validation.
8. Why We Use Personal Data
We may use member personal data to:
9. Our GDPR Lawful Bases
Where GDPR applies, iReach will rely on an appropriate lawful basis for each processing activity. The appropriate basis depends on what we are doing with the information.
Contract - where processing is necessary to administer your membership or provide a member service you have requested.
Consent - where consent is the appropriate or legally required basis, including certain research activities or uses of information. Where we rely on consent, you may withdraw it for future processing.
Legitimate interests - where processing is reasonably necessary for legitimate interests such as conducting and improving research, maintaining panel quality, protecting the Site, preventing fraud and administering our research community, provided those interests are not overridden by your rights and freedoms.
Legal obligation - where processing is necessary for iReach to comply with applicable law.
Where Special Category Personal Data is processed, an additional condition under Article 9 GDPR will also be required.
10. Special Category and Sensitive Personal Data
Some legitimate research topics may involve information that receives additional protection under data protection law.
This may include information concerning health, racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic or biometric information, or information concerning a person's sex life or sexual orientation.
We will not treat membership of iReach Conversations as blanket consent to process Special Category Personal Data for every research purpose.
Where a study involves Special Category Personal Data, iReach will identify an appropriate Article 6 lawful basis and an applicable Article 9 condition and will provide additional information or obtain explicit consent where required.
You may choose not to participate in a research activity that asks for sensitive information.
11. How We Select Members for Research
Research projects frequently require responses from particular groups of people. We may use member profile information to identify members who appear to meet the initial criteria for a study.
Additional screening questions may then be used to confirm eligibility.
We may also use profile information to manage quotas so that a research sample reflects the groups required for the project.
Selection for research is intended to support legitimate research sampling and does not normally produce legal or similarly significant effects on members.
12. Research Quality, Validation and Fraud Prevention
Reliable research depends on genuine participation. We may process profile, response, technical and participation information to assess research quality and protect the integrity of the community.
Quality controls may identify duplicate participation, inconsistent or implausible answers, unusually rapid completion, failed attention checks, automated activity, account misuse or other indicators that a response may not be reliable.
Information from these checks may be used to approve or withhold points, investigate an account, prevent fraud, restrict research access or take action under the Member Terms.
We aim to apply such controls fairly and proportionately.
13. Points, Rewards and Incentive Administration
We process information about points earned, pending and approved points, redemption requests and rewards issued in order to administer the iReach Conversations incentive programme.
We may need to share limited information with a payment, voucher or reward provider where necessary to fulfil a redemption.
We may retain transaction records where required for accounting, fraud prevention, dispute handling or legal purposes.
14. How Research Findings Are Shared with Clients
iReach conducts research for organisations that need to understand consumers, customers, members or other audiences.
Our normal approach is to provide clients with research findings in aggregated, anonymised or pseudonymised form rather than identifying individual iReach Conversations members.
Research outputs may include statistics, charts, tables, analysis, audience segments and anonymous or pseudonymised verbatim comments.
Where a project requires a different form of disclosure, members will be provided with appropriate information before or during participation.
15. When Identifiable Information May Be Shared
We will not normally provide a research client with information that directly identifies you simply because you participated in a survey.
Identifiable information may be shared where:
Where possible and appropriate, we will minimise the amount of identifiable information disclosed.
16. Service Providers
We may use trusted third-party service providers to help operate iReach Conversations and deliver research.
These may include providers supporting:
Where a service provider processes personal data on our behalf, we will put appropriate contractual and data protection safeguards in place.
17. Cookies and Analytics
The Site may use cookies and similar technologies to operate essential functionality, remember preferences, understand usage, measure performance, support security and, where applicable, measure marketing activity.
Non-essential cookies and similar technologies will be managed in accordance with applicable consent requirements.
Our separate Cookie Policy will explain the technologies used, their purposes, providers and relevant retention periods.
18. International Data Transfers
iReach aims to use appropriate data protection safeguards when personal data is processed outside the European Economic Area (“EEA”).
Where a service provider processes or accesses personal data outside the EEA, we will use an appropriate lawful transfer mechanism where required, such as an adequacy decision or European Commission Standard Contractual Clauses, together with supplementary safeguards where necessary.
19. Data Security
We use appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
Measures may include access controls, authentication, encryption, system monitoring, backups, security procedures, restricted access and staff confidentiality obligations, depending on the nature and risk of the processing.
No internet-based service can guarantee absolute security.
20. How Long We Keep Personal Data
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including membership administration, research integrity, rewards, accounting, legal obligations and dispute resolution.
Different information may require different retention periods. For example, active member profile information may be retained while membership continues, while financial or reward records may need to be kept for a separate statutory period.
Research data may be retained in identifiable, pseudonymised, anonymised or aggregated form depending on the research purpose and applicable requirements.
When information is no longer required, we will delete, anonymise or otherwise securely dispose of it in accordance with our retention arrangements.
21. Your GDPR Rights
Subject to applicable law and the circumstances of the processing, you may have rights including:
These rights are not absolute and legal exemptions may apply.
We may need to verify your identity before acting on a request in order to protect your information.
22. Withdrawing Consent and Objecting to Processing
Where we rely on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place before consent was withdrawn.
Where we rely on legitimate interests, you may have the right to object to processing based on your particular circumstances.
You may opt out of research invitations by using the relevant account or communication options, or by contacting us.
Some processing may still be required to administer account closure, protect research integrity, meet legal obligations or resolve outstanding reward or security matters.
23. Closing Your Account
You may request closure of your iReach Conversations membership through the available account process or by contacting us.
Following closure, we will stop using your profile to invite you to new panel research, subject to any processing necessary to complete closure and meet legal or operational requirements.
Account closure does not necessarily mean that all information can or should be deleted immediately. For example, we may retain records required for research integrity, financial obligations, fraud prevention, legal claims or compliance.
Research results that have already been anonymised or aggregated may no longer constitute personal data and may continue to be used.
The treatment of outstanding points and rewards is governed by the Member Terms.
24. Children and Young People
The ordinary iReach Conversations membership programme is subject to a minimum age requirement.
Where iReach undertakes research involving children or young people outside ordinary panel membership, additional privacy information, consent and safeguarding measures will be applied as required by the nature of the research and applicable law.
25. Personal Data Breaches
iReach maintains procedures for responding to suspected or confirmed Personal Data Breaches.
Where a breach creates a risk to individuals, we will assess and meet applicable notification obligations to the Data Protection Commission and, where required, affected individuals.
We will take reasonable steps to investigate, contain and mitigate relevant incidents.
26. Complaints and the Data Protection Commission
If you have a concern about how we use your personal data, we encourage you to contact iReach first so that we can investigate and respond.
You also have the right to lodge a complaint with the Data Protection Commission, Ireland's supervisory authority for data protection.
Data Protection Commission website: www.dataprotection.ie
27. Third-Party Websites and Services
The Site or research activities may contain links to websites or services operated independently by third parties.
Those organisations are responsible for their own privacy practices. We recommend reviewing the privacy information provided by a third party before providing personal data directly to it.
This does not affect iReach's responsibility for processing undertaken by service providers acting on our behalf.
28. Changes to this Privacy Policy
We may update this Privacy Policy to reflect changes to iReach Conversations, research practices, technology, service providers or applicable law.
The latest version will be published on the Site and the 'Last Updated' date will be revised.
Where a material change significantly affects how member personal data is processed, we will provide additional notice where appropriate.
29. Contacting iReach
For privacy questions or to exercise your data protection rights, please contact:
iReach Insights Limited
Ireland
Privacy/Data Protection Contact: --
Email: info@ireachconversations.com
Website: ireachconversations.com
Copyright © 2026 iReach Conversations All Rights Reserved.
