Last updated 23 September 2026

Privacy

We ask for very little and keep it apart. Survey answers carry nothing about the person who gave them, visits are counted without cookies, and nothing collected here is sold or passed on.

Who we are

Hill + Gliga is a research practice run by Tom Hill and Andrei Gliga. For data protection, the controller is Reyor Ltd, a company registered in England and Wales (number 17069133), registered with the Information Commissioner’s Office under registration number ZC187824. Its registered office is Belmont Suite, Paragon Business Park, Chorley New Road, Bolton, BL6 6HG.

Any question about your data goes to[email protected], and Tom Hill answers it.

If you take a survey

Your answers are stored with nothing attached to them: no name, no email address, no IP address, and no identifier of any kind. We record which kind of link brought you to the survey (a LinkedIn post or a community, for example) so a paper can say where its answers came from. It names a route in, never a person.

Because nothing links your answers to you, we cannot find them again. That means they cannot be withdrawn once submitted. Free-text answers are read before anything is published, and anything that names a person or an organization is removed. Findings are only ever published in aggregate.

Your email address is required, because it is what stops the same person answering twice. It is stored in a separate database that holds addresses and nothing else. If you leave “send me the paper” ticked, we also use it to send you the paper for that study before it is published anywhere else. If you untick it, the address does that one job and nothing more.

We keep it until the paper has been sent, or, if you did not ask for it, until the study closes. Then we delete it within 30 days. You can ask us to delete it sooner at any time.

If you also tick “send me future findings”, which is never ticked for you, we add your address to the mailing list below. You get the same confirmation email as anyone who signs up there, and nothing is added until you confirm. Without that tick, a survey address is never added to the list.

We use your answers and your address on the basis of your consent, which you give by submitting the survey.

If you join the mailing list

The list sends new papers and findings when they land, and nothing else. We keep your email address, when you signed up, and when you confirmed. Nothing is added until you click the link in the confirmation email we send, so nobody can sign you up without you.

We do not track whether you open an email or which links you follow. Every email has an unsubscribe link, and from the same page you can see or delete everything we hold about you. We use your address on the basis of your consent, which you give by confirming, and it is kept until you unsubscribe. It then leaves our backups within five weeks.

The list runs on our own server in Germany, with open-source software called Listmonk, and the emails are sent through Google Workspace, which handles them on our behalf. An address given for a survey is only added if you tick the box to subscribe, and confirm.

Proving you are a person

The survey form uses Cloudflare Turnstile to check that a person, not a script, is filling it in. It loads only once you start the survey, and it reads signals from your browser to decide. We receive a pass or a fail and nothing else. Cloudflare’s handling of it is described inthe Turnstile privacy policy. We rely on our legitimate interest in keeping the research free of automated answers.

Counting visits

We count visits to this site so we can tell whether it is doing its job. The counting runs on our own server in Germany, with open-source software called Umami. It uses no cookies. Your IP address is used for a moment to tell one visit from another and is never stored, and that link resets every month.

What is recorded: the page, the site that sent you here, your country and city worked out from your connection, your browser, operating system, device type, screen size, and language, and which buttons you press on our pages. The survey pages are never counted. Records are deleted after 25 months. We rely on our legitimate interest in understanding how the site is used, with as little as possible to do it.

Where it is kept

On a server we run with Hetzner in Germany, with encrypted backups on separate Hetzner storage, also in Germany. The site is delivered through Cloudflare, which sees each request the way any host does, and some of that processing can happen outside the UK under Cloudflare’s own safeguards. A deleted address leaves our backups as they roll over, within five weeks.

What we will not do

We do not sell anything collected here or use it to sell to you. The only companies that handle it are the ones named on this page, and they do so on our behalf. We each run a consulting practice of our own, and nothing collected by Hill + Gliga is passed to either of them or used by them.

What you can ask for

You can ask to see the personal data we hold about you, to correct it, to delete it, to restrict how we use it, or to object to how we use it. Write to[email protected] and we will answer within a month. The one thing we cannot do is find your survey answers, for the reason above.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk.

If you write to us

Your message stays in our inbox and goes nowhere else.