Survey privacy notice — Beyond Expectations

In short: the survey is anonymous. We don't ask for your name or email address, your employer never sees individual answers, and results are only reported for groups of five or more people. The raw responses are kept securely and then deleted.

Who we are

This survey is run by Beyond Expectations, a trading name of Courtney Richards Ltd (company number 08381050, ICO registration ZB000960). Your employer has commissioned us to run it independently. For the raw survey responses, Beyond Expectations is the data controller. You can contact us at courtney@gobeyondexp.com.

What we collect

Your answers to the survey statements.
If the survey asks, the team or service area you mainly work in.
The date and time you submitted the survey, which the form records automatically.

We do not collect your name, email address or any other contact details. Please don't include anything that could identify you or anyone else in your answers.

Why we collect it, and our lawful basis

We use the responses to produce an aggregated report for your organisation. It shows how far its stated culture and standards are lived in practice, and where support and change are needed. Because the survey is anonymous, we expect most responses to fall outside personal data. Where a response could identify someone, for example in a small team, we rely on legitimate interests as our lawful basis. That covers our own interest and your organisation's in understanding and improving its working culture, and we protect your privacy through the safeguards below.

How we protect your anonymity

Only Beyond Expectations sees the raw responses. Your employer receives aggregated results only, never individual answers or the response file.
No result is reported for any group of fewer than five people.
We never try to identify any individual, and we won't do so if asked.
Results are used to understand culture, never to assess, rank or discipline anyone.

Who processes the data

The survey form and responses are hosted by Google (Google Forms and Google Sheets) or, where your organisation prefers, Microsoft (Microsoft Forms), acting as our processor under their standard data-protection terms. That may include processing outside the UK, with the legal safeguards their terms provide. The report is produced on our own secure systems.

How long we keep it

We keep the raw responses for 12 months after the final survey in the engagement, which allows before-and-after comparison if the survey is repeated. After that we delete them securely. The aggregated report contains no personal data and your organisation may keep it.

Your rights

You have rights under UK data-protection law, including rights to access, correct, object to or ask us to delete personal data about you. Because we collect no names or contact details, we usually can't identify which response is yours. If you think we hold information that identifies you, contact us and we'll help where we can. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).

Taking part is voluntary. Last updated: 29 September 2026. Beyond Expectations · www.gobeyondexp.com