Dear Charity Connect, I hope you can help me.

I am the research manager at CharityJob. I’d like to do a survey to find out about the demographics of our candidates. But as it is special category data it is extra sensitive under GDPR.

I wouldn’t be asking anyone for their name, email or anything identifiable, just the demographic data, and that in aggregate only. One complicating factor is that we do check email addresses to see who has been sent the survey, so we don’t send it to them again. I will have this information but won’t share it. As soon as I download the survey results I will remove the email information.

I went on the Information Commissioner's Office site and got guidance. Our lawful basis is that this should be acceptable under legitimate interest. But I want to be doubly sure.

Does anyone know if there are any other steps I need to take before going live with the survey?

Thank you.

Martin Rogers.