Privacy & Data Protection
At E³, protecting personal information is a core part of our professional research practice.
Every stage of data collection, storage, analysis and reporting is designed to safeguard the
privacy, security and rights of individuals whose information is entrusted to us.
Personal data is handled with transparency, accountability and respect for the people behind
the information.
Our Approach
Data protection is built into research processes from the start.
Policies, operational procedures, technical safeguards and staff responsibilities are designed
to ensure that personal information remains secure, confidential and used only for legitimate purposes.
Protection measures extend beyond technology alone. Secure systems, access controls,
staff training, risk monitoring and internal accountability all contribute to a culture of
responsible data stewardship.
Lawful and Fair Processing
Personal data is collected and processed only for legitimate, specific and clearly defined
purposes.
Depending on the nature of a project, processing may be based on informed consent, contractual obligations, legal requirements or other lawful grounds recognized under applicable legislation.
Individuals are informed about the purpose of data collection, the type of information being collected and the intended use of that information before processing begins.
Data Minimization
Only information that is necessary for the intended purpose is collected.
Data collection instruments, databases and workflows are designed to avoid unnecessary
collection of personal information. Information is retained only for as long as required by project objectives, contractual obligations or applicable legal requirements.
When personal information is no longer needed, it is securely deleted or anonymized.
Security and Confidentiality
Personal data is protected through a combination of technical, organizational and
operational safeguards.
Every E³ report is designed to provide:
• Encrypted storage and transmission of information
• Multi-factor authentication and access controls
• Restricted access based on business need
• Staff confidentiality obligations
• Security monitoring and risk assessments
• Regular reviews of data management practices
Access to personal information is limited to authorized personnel whose responsibilities require such access.
Data Sharing
Personal information is never sold or disclosed for unrelated purposes.
Information may be shared with trusted partners, contractors or service providers only when
necessary for project implementation and only under appropriate confidentiality and security obligations.
Where required by law, information may also be disclosed to competent authorities in
accordance with legal requirements.
Any third party handling personal data on behalf of E³ is expected to maintain equivalent standards of privacy and security.
International Research Projects
Many E³ projects involve international partners, donors, universities and research
institutions.
Where personal information is transferred across borders, appropriate safeguards are
applied to ensure that data remains protected throughout the transfer and subsequent
processing. International transfers are conducted in accordance with applicable legal
requirements and recognized data protection standards.
Rights of Data Subjects
Individuals retain control over their personal information.
Subject to applicable laws and project requirements, data subjects may have the right to:
• Request access to their personal information
• Correct inaccurate or outdated information
• Withdraw consent where consent is the basis for processing
• Request deletion of personal data when appropriate
• Raise questions or concerns regarding data processing activities
Requests are reviewed and addressed in accordance with applicable legal requirements.
Accountability
Protecting personal information is a shared responsibility across the organization.
Research teams receive regular training on privacy, confidentiality and responsible data handling. Internal procedures are continuously reviewed to ensure compliance with evolving
legal requirements, professional standards and operational risks.
Potential incidents, complaints or breaches are investigated promptly and addressed through established response procedures.
Our Commitment
The quality of research depends on trust. Trust depends on responsible stewardship of information.
E³ is committed to protecting personal data with the same level of rigor applied to research
design, fieldwork and analysis. Every reasonable measure is taken to ensure that personal
information remains secure, confidential and used only for legitimate purposes.
Questions regarding privacy, personal data or data protection practices may be directed to
our team using the contact information provided on this website.