In October 2026, the UK National Cyber Security Centre (NCSC) warned more than 50,000 organisations about critical, actively exploited vulnerabilities affecting web systems. This warning showed that even well-protected systems can be at risk. Lingua Research has therefore adopted the following precautionary policy to protect its clients. This policy applies from 1 November 2026.
Why?
Our reports contain confidential information about our clients’ consumers, brands and strategies, and this information sometimes includes consumers’ personal data. The safest way to protect data is not to keep it for longer than necessary. Data that is no longer on our systems cannot be compromised in a cyber attack.
What we do
After a report is delivered, we give the client a 14-day review and revision period. When this period ends, or once any revisions have been completed and the final report has been delivered, we permanently delete the report, all project data and working files from our systems. Communications relating to the report are permanently deleted 30 days after final delivery. We do not keep any backup or second copy.
What we ask of you
Clients are responsible for downloading the delivered report and storing it securely. Once the data has been deleted, we will not be able to send the report again. We therefore ask you to check, within 14 days of receiving the report, that the files are complete and open correctly, and to send us any revision requests within the same period. If we receive no feedback or requests within this period, the report will be deemed accepted as delivered.
Existing reports
This policy also applies to reports and project data from previous projects that are still held on our systems. Before deleting them, we will email the clients concerned so that they can make sure they have their own copy. These reports, together with the related project data and correspondence, will be permanently deleted 30 days after that email is sent.
Exceptions
This policy does not apply to contracts and invoices, which we retain as required by UK law. Clients who need a longer retention period may request this in writing before the project begins.
For more information about how we handle personal data, please see our Privacy Policy. If you have any questions about this policy, please contact us at info@linguaresearch.co.uk.