Privacy Policy

Last Updated: 1/7/2020


Op4G (“Op4G,” “we,” “us,” and “our“) is a market research firm and sample provider headquartered in Portsmouth, New Hampshire in the United States of America.   As a user of our websites, a participant of our web surveys, or a member of our research panels (“Services”), your personal information is held in the strictest of confidence.

Please read this Privacy Policy carefully.  It explains our legal basis for processing your data, and our responsibilities as defined by the General Data Protection Regulation (“GDPR”).

1a.           As Data Controller

  • Interactions with,, and their subdomains (“Websites“),
  • Data submitted or generated while registering for or accessing our Panel application (“Platform”),
  • From the installation of mobile applications for the purpose of participating in research activities;

1b.            As Data Processor

  • Web surveys or data collection hosted by Op4G on behalf of a research partner or client;
  • Contact lists and targeted sample provided by client
  • Publisher or advertiser data collected from offer conversions

To the extent prohibited by applicable law, Op4G does not allow use of our Services and Websites by anyone younger than 16 years old. If you learn that anyone younger than 16 has unlawfully provided us with personal data, please contact us at and we will take steps to delete such information.


As a member of one or more of our panels, all of the data listed below is obtained directly from you through questions asked during registration or in a research study, unless otherwise noted.

Personally Identifiable Information (“PII”) – data that directly identifies you. We ask for your real name, e-mail address, and in certain cases, a phone number for verification.

Linkable Data – data that could not identify you standalone, but when combined with other details, could be linked to identify you.    We ask for your race, gender, income, profession, and other demographic questions that fall into this category.

Special Categories – sensitive topics of racial or ethnic origin that may require discretion and extra security.  This includes political opinions, religious beliefs, and your sexual orientation.

Technical – this is data we log and store when you are participating in our Services, so it is not directly requested from you.   Some of this, like IP address, browser type or network provider, must be treated as Non-PII personal data.

We collect this information:

  • Automatically as you interact with our Services,
  • Information collected automatically may include usage details, IP addresses, and information collected through cookies, and other tracking technologies,
  • From clients and research partners,
  • From service providers who provide services essential to our operations;

We do not request or accept personal data from children under the age of 16.   Services.   Data submitted by individuals 15 or younger violates our Terms of Use, and will result in deletion of the account and any data associated with it.

If you believe we may have information from or about a child under 16, please contact us at

1a.           Information You Provide to Us

To become a member and gain access to our Services, you are required to provide:

  • Valid email address to receive double opt-in
  • Determination of eligibility based on honest and complete data
  • Additional personal data to create a member profile

All members may provide us with data through the following:

  • Data collected through your participation in Surveys;
  • All correspondence with our help desk or support email;
  • Communications via social media accounts on Op4G branded pages

1b.           Information Collected with Data Collection Technologies

As you navigate through and interact with our Services, we may use automatic data collection technologies to collect certain information about your equipment, browsing actions, and patterns, including:

  • Details of your participation in our Services, including traffic data, logs, and session data.
  • Information about your computer and internet connection, including your IP address, operating system, and browser type.

The information we collect automatically is used for web analytics, quality control and fraud prevention, and may be combined with other data sources to detect outliers or other unusual patterns.   Technologies include:

  • Cookies are small file placed on the hard drive of your computer. See: Cookie Policy.
  • Digital fingerprinting, watermarking, and identity verification services;
  • We process the information collected, including your personal data,
    • Create and secure your account on our Platform;
    • Match you to relevant Services and Surveys that you are more likely to qualify for;
    • Send email or SMS invitations and reminders to you regarding Services that are available;
    • Provide you with nonprofit updates, newsletters, and technical support;
    • Process payments to you when your account balance becomes eligible;
    • Verify your identity and account status with service providers;
    • Accommodate any other purpose for which your personal data is provided;
    • Notify you of changes to our Services that may require you to grant consent.

    Legal Basis for Processing personal data (EU/EEA Requirement)

    As a controller of your personal data, we are required by the GDPR to justify our processing of personal data with one or more legal bases.    Our lawful basis for processing includes:

    • Data subjects’ consent –The legal basis for most of our offered Services.   Your informed consent allows us to process your personal data in order to provide access to our Platform, Survey invitations, and other correspondence.
    • Contractual performance – As a member of one or more research panels, you are eligible to receive payments each month where your account balance exceeds $10 USD.  The processing of your identifiable personal information to initiate this transaction is lawful as it fulfills our contract to you as a panelist.
    • Compliance with a legal obligation – Requests originating from law enforcement officials, fraud examiners or a public authority constitute the use of Legal Compliance as a lawful basis.

We are extremely protective of our members’ personal information and do not sell personally identifiable data such as email address, real name, or date of birth.   Personal data may be disclosed to a variety of parties, depending upon the purpose for which the information was provided and the context in which it was provided.

Clients and Research Partners

  • As pseudonymous data in a deliverable file.
  • As aggregate data in Platform reporting and Survey project reports.

Our clients and research partners are not permitted to directly contact you, or any member of the Op4G Platform without documented approval by Op4G.   Methodologies that require personal contact (follow-up interviews, in-home and on-site product testing, focus groups) must be approved by Op4G and would require written or digital consent from you.

Op4G will oversee and approve all member and client communication in the event that a client wishes to include you in an interview, product test, or other service beyond the scope of Op4G’s Platform.

Service Providers

Service Providers critical to Op4G’s operations are authorized to process personal data when it is required to perform a business service, such as payment processing, identity verification or mass emailing services.

Legal Processing

We may also disclose your personal information as required by law, such as to comply with a subpoena or similar legal process; when we believe in good faith that disclosure is necessary to protect our rights, your safety or the safety of others, investigate fraud, or respond to a government or regulatory request.


Our Data Protection Statement establishes company-wide principles relating to the processing of personal data, and documents the steps we’ve taken to ensure the security of our members’ information.   Our managing hosts operate s with the following security certifications:

  • SSAE 18
  • SOC 2 Type II
  • ISO/IEC 27001: 2013
  • PCI DSS 3.2

To prevent loss, misuse, and unauthorized access, disclosure, alteration and destruction, we follow industry-standard technical, organizational and administrative security measures.


As a data controller, it is our responsibility to provide you with a clear list of rights and actions available to you as a Data Subject:

Right to be Informed

You have the right to know what personal data we are processing, why we process it, and who that data may be shared with.   This policy provides this information.

Right of Access

You have the right to request copies of your personal data.   This is provided through the Platform, which allows members viewing access to all profile data, survey activity, and full payment history.   A login with valid credentials is required to access this data.

You may also make a Data Subject Access Request (“DSAR”) via email.  All requests should be submitted to by the Data Subject and will require verification of identity.  Requests can take up to thirty (30) days to process.

Right to Rectification and Erasure

You have the right to request changes to your data record to correct inaccuracies.    Requests should be submitted to and will require verification of identity.

You also have the right to request the erasure of this data.   This requires you to log into our Platform with your credentials and selecting the “Delete your Account” menu option.   Deletion of your account is permanent and forfeits any account balance you have accrued.

Right to Restrict, Object, and Withdraw Consent

You have the right to request restrictions on the processing of your data, to object to the processing of that data, and the freedom to withdraw your consent to data processing at any time.   Op4G’s collection and processing of your personal data is entirely voluntary and requires your explicit consent, which can be revoked at any time by logging into our Platform with your credentials and selecting the “Delete your Account” menu option.

This will delete all data associated with your membership, remove you from all email campaigns, forfeit remaining account balance, and remove access to the Platform.  This option cannot be undone.

Right to Data Portability

You have the right to request a copy of your personal data and activity history over the past 12 months to retain and reuse for your own purpose.  All requests should be submitted to by the Data Subject and will require verification of identity.


Your personal information will be retained indefinitely while your panel membership is active and our lawful basis for processing your data is intact.

  • Your account is classified as Inactive in the following scenarios:
  • The account has no login or survey activity for over six months,
  • The email associated with the account is returned as undeliverable,
  • You request the account be closed but do not delete it.

Inactive accounts are disabled, but can be re-enabled by request of the panelist.   If the account is not reopened within one year, all personal information is deleted.  Data required for legal, tax or accounting requirements, or to enforce our agreements or comply with our legal obligations, is retained as business record.

If you received an account payout while an active member, identifiable personal data used in those transactions will be secured and archived as business records for a minimum of seven (7) years.


We provide full disclosure and consent options for cookies in our Cookie Policy.

We collect and parse web server logs, which include data such as IP addresses, browser type, internet service provider (ISP), referring/exit pages, operating system, date/time stamp, and clickstream data.

Pixel tags and web beacons are transparent image files designed to collect information regarding your interaction with an email message, webpage, or Survey.   While Op4G does not make use of these tracking technologies in our Platform and retains no data associated with them, some Clients or Research Partners may require this method as a means to track survey statuses or as a tool to detect fraud.


Op4G operates in and uses service providers located in the United States.   If you are outside the U.S. and submit personal data to us through our Websites or Services, that personal data will be transferred to and processed outside of your country of residence.


When participating in our Services, you may be routed or linked to a website or Survey hosted by a third party on behalf of a client or research partner.   We have no oversight or control of these websites and they are not governed by our policies.

We encourage you to carefully review the privacy policy of any unfamiliar website or survey provider prior to submitting any personal information.


Forums and comments within the Blogs section of our website are considered public discourse, and are available to be collected and processed by Op4G.    Comments shared within these public features may be read, collected, and used by others who access them.  Requests to remove your personal information from our blog or community forum can be sent to


We display personal testimonials of satisfied customers on our Websites in addition to other endorsements. With your consent, we may post your testimonial along with your name.  To update or remove testimonial content, email your request to


Our Services include several social media features that may store personal data such as IP address and site activity, and may require you to authenticate with your account credentials.    We do not access or capture such data anywhere in our Services, and content posted or displayed within these integrations is governed by the Privacy Policy of the social media provider.


Minor changes made to this Privacy Policy, our Cookie Policy, or the Terms of Use will be posted without notice on our Websites and dated accordingly.

In the event that material changes to these policies, we will be required to obtain your informed consent again to process your personal data.  In that event, we will send an email notification informing you of the changes, and your access to our Services may be temporarily halted until we record your consent.


For data security and compliance inquiries, please contact our compliance team:

By email:
By phone: 603-766-5858
By mail:

Op4G c/o Compliance
93 Middle Street
Portsmouth, NH 03801

EU / EEA Legislation (GDPR)


Op4G is committed to the correct and lawful handling of all personal data and adherence to the data protection principles outlined in EU Regulation 2016/679 General Data Protection Regulation (“GDPR”).

In the drafting of this Privacy Policy, many of the GDPR rights and requirements have been incorporated into the core Privacy Policy and have been made standard for all Data Subjects.

For our full, separated compliance statement on GDPR, see our supplemental EU Data Protection Policy.

California Consumer Protections Act (CCPA)


This Privacy Notice for California Residents supplements the information contained in our Privacy Policy above and applies solely to all respondents, panelists, and others who reside in the State of California.  We adopt this notice to comply with the California Consumer Privacy Act of 2018 (CCPA) and any terms defined in the CCPA have the same meaning when used in this notice.

  • Our offered Services collect information that identifies, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or device (“personal information”). In particular, our website has collected the following categories of personal information from our members within the last twelve (12) months:
    Category Types of Data Collected?
    Identifiers Name and surname, email address, IP address and other identifiers. YES
    Personal information under CA Sec. 1798.80. Education, employment. YES
    Protected classifications Race, gender, citizenship, religion or creed, marital status, medical conditions, gender identification, pregnancy or childbirth, and related medical conditions, sexual orientation. YES
    Commercial information Purchasing information related to a product or service, purchasing decisions related to targeted products YES
    Biometric information We do not collect this data. NO
    Electronic network activity information User agent, plug ins, cookies, resolution YES
    Geolocation data Web analytics data, IP address, digital fingerprinting YES
    Audio or Video data We do not collect this data. NO
    Professional or employment-related information: Profession, industry, company size, purchasing decisions related to role YES
    Education information Last completed education YES
    Inferences We do not collect this data. NO

    Other uncategorized data includes:

    • Publicly available information from government records,
    • Pseudonymous or de-identified aggregate data,
    • Information excluded from CCPA scope, such as:
      • Health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA) or clinical trial data;
      • personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FRCA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver’s Privacy Protection Act of 1994.

    We obtain the categories of personal information listed above from the following categories of sources:

    • Data provided during our panel registration and process;
    • Surveys you have completed while conducting Services;
    • Automated collection sources such as server access logs or captured user agents.

We may use, or disclose the personal information we collect for one or more of the following business purposes:

To fulfill or meet the reason you provided the personal information, e.g. PayPal account shared to process information. For example, if you share your name and contact information and inquire about an upcoming panel payment, we will use that personal information to respond to your inquiry. If you provide your personal information to request some form of opt-out or data accessibility, we may require verification of your identity and release this data in your possession,

  • We may also save your information to facilitate new product orders or process returns,
  • To provide you with support and to respond to your inquiries, including to investigate and address your concerns and monitor and improve our responses,
  • To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations,
  • As described to you when collecting your personal information or as otherwise set forth in the CCPA;

We will not collect additional categories of personal information or use the personal information we collect for materially different, unrelated, or incompatible purposes without providing you notice.


We disclose your personal information to service providers for a business purpose.  When we disclose personal information for a business purpose, we enter a contract that describes the purpose and requires the recipient to both keep that personal information confidential and not use it for any purpose except performing the contract, e.g. PayPal receives the email address you provided to us for the purpose of sending payments.

The CCPA prohibits third parties who purchase the personal information we hold from reselling it unless you have received explicit notice and an opportunity to opt-out of further sales.  We do not share your personal data with third parties in this capacity.


In the preceding 12 months, Op4G has disclosed personal information for the following business purposes, as categorized in Section 1798.140:

  • Auditing Interactions with Consumers: Help desk ticketing, verification of identity
  • Security: Fraud prevention, digital fingerprinting
  • Certain Short-term Uses: Invitation emails, Newsletters
  • Performing Services: Processing payments, technical support, identity verification, accounting, gift card services

Under the CCPA, the term “sale” is defined as:

selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a consumer’s personal information by the business to another business or a third party for monetary or other valuable consideration.

Within those parameters, we believe your personal information qualifies as a ‘valuable consideration’, as we require it to place you in relevant, qualifiable surveys that compensate us upon completion.


The CCPA provides consumers (California residents) with specific rights regarding their personal information. This section describes your CCPA rights and explains how to exercise those rights.


You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months. Once we receive and confirm your verifiable consumer request, we will disclose to you:

  • The categories of personal information we collected about you.
  • The categories of sources for the personal information we collected about you.
  • Our business or commercial purpose for collecting or selling that personal information.
  • The categories of third parties with whom we share that personal information.
  • The specific pieces of personal information we collected about you (also called a data portability request).
  • If we sold or disclosed your personal information for a business purpose, two separate lists disclosing:
  • sales, identifying the personal information categories that each category of recipient purchased; and
  • disclosures for a business purpose, identifying the personal information categories that each category of recipient obtained.

You have the right to request deletion of all personal information that we collected and retained, subject to certain exceptions listed below.  Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies.

We may deny your deletion request if retaining the information is necessary for us or our service provider(s) to:

  • Complete the transaction for which we collected the personal information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you.
  • Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
  • Debug products to identify and repair errors that impair existing intended functionality.
  • Exercise free speech, ensure the right of another consumer to exercise their free speech rights or exercise another right provided for by law.
  • Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et. seq.).
  • Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information’s deletion may likely render impossible or seriously impair the research’s achievement if you previously provided informed consent.
  • Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.
  • Comply with a legal obligation.
  • Determine a lawful basis for processing the data that is compatible with the context in which you provided it.

To exercise your access, data portability, and deletion rights as listed, please submit a verifiable consumer request to us by sending us a message on our website. Only you, or a person registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable consumer request related to your personal information. You may only make a verifiable consumer request for access or data portability twice within a 12-month period. The verifiable consumer request must:

  • Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative.
  • Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide you with personal information if we cannot verify your identity or confirm the credentials of the authority making the request. We will only use personal information provided in a verifiable consumer request for the purpose of verification.


We make every effort to respond to all verifiable consumer requests within forty-five (45) days of its receipt.  If we require more time (up to 90 days), we will inform you of the reason and extension period in writing. We will deliver our written response by mail or electronically, at your option. Any disclosures we provide will only cover the 12-month period preceding the verifiable consumer request’s receipt. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance, specifically by electronic mail communication.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.


All members and Data Subjects have the right to direct us to not sell your personal information at any time (the “right to opt-out”). This is your right to withdraw consent and you may do so at any time.  See our Terms of Use for more information on how closed accounts are handled.

We do not collect personal information of consumers we actually know are less than 17 years of age.   Consumers who opt-in to personal information sales may opt-out of future sales at any time. To exercise the right to opt-out, you (or your authorized representative) may submit a request to us by visiting the following our webpage and sending us a message.

Once you make an opt-out request, we will wait at least twelve (12) months before asking you to reauthorize personal information sales. However, you may change your mind and opt back into personal information sales at any time by visiting our website and sending us a message. We will only use personal information provided in an opt-out request to review and comply with the request.


We will not discriminate against you for exercising your rights. Should your make requests for information or clarification, we will not:

  • Impose penalties or limitations on your participation in research activities,
  • Provide you a different level or quality of support or service,
  • Suggest that you may receive a different level of payment.

However, we require your continued consent to our Privacy Policy and Terms of Use to participate in our research studies.   Should you revoke consent of exercising your rights, we cannot by law process data on your behalf and your panel account will be closed until consent can be reestablished.

California’s “Shine the Light” law (Civil Code Section § 1798.83) permits users of our Website that are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please send us an electronic message through our website or write us at


Minor changes made to this policy, our Cookie Policy, or Terms of Use will be posted without notice on our Websites and dated accordingly.

For material changes to these policies, we will be required to reobtain your informed consent to process your personal data.  In that event, we will send an email notification informing you of the changes, and your access to our Services may be temporarily halted until we record your consent.


Questions or requests regarding this addendum? Contact us:

By email:
By phone: 603-766-5858
By mail:

Op4G c/o Compliance
93 Middle Street
Portsmouth, NH 03801
Contact Op4G