Service Privacy Policy

Introduction

We value your privacy. This Services Privacy Policy explains how Human Made Machine Limited ("we", "us", "our") collects, uses, protects, and discloses data when you use our creative testing and market research services (the "Services"). It also explains your choices for managing your information preferences.

‍

This policy applies specifically to the data processed during the performance of a Service Agreement and does not cover our public website. By entering into a Service Agreement with us, you consent to this Privacy Policy.

THE DATA WE PROCESS

In providing our Services, we process two distinct categories of data: Client Personal Data and Respondent Data.

• Client Personal Data: We collect and process the personal information of your employees or representatives to manage our business relationship. This includes:
  • Contact Information: Name, email address, telephone number, and job title.
  • Billing Information: Company name, address, and other details required for invoicing.
  • How we use it: To enter into a Service Agreement, communicate about project deliverables, provide support, and manage billing.
  • Legal Basis: Our legal basis for processing this data is the performance of our contract with you.
• Respondent Data: We process survey data from research participants ("Respondents") on your behalf to deliver the insights for your project.
  • What we process: We process demographic, attitudinal, and perceptual responses to survey questions as defined in the Service Agreement.
  • What we DO NOT process: As stipulated in our Service Agreement, we do not receive, access, or process any personally identifiable information (PII) of Respondents, such as names, email addresses, or specific dates of birth. This PII is held exclusively by our third-party panel providers who manage the recruitment process.
  • Legal Basis: We act as a Data Processor on your behalf. The legal basis for processing this data is the consent obtained from the Respondent by our panel providers in accordance with local laws.

DATA SHARING AND SUB-PROCESSORS

We do not sell any personal data. We only share data with trusted third-party service providers ("sub-processors") who are necessary for us to deliver the Services. These include:

• Panel Providers
• Hosting Providers
• Analytics and Software Partners

All sub-processors are bound by strict data protection agreements and are prohibited from using the data for any other purpose.

data security

We are committed to protecting the security of the data we process. We implement robust technical and organizational measures, including access controls, encryption of data at rest and in transit, and regular security assessments to prevent unauthorized access, use, disclosure, or loss of information.

international data transfer

When we transfer personal data across borders, we ensure that appropriate legal safeguards are in place in accordance with Applicable Data Protection Laws.

data retention

• Client Personal Data is retained for the duration of our business relationship and for a subsequent period as required by law.
• Respondent Data is retained in accordance with the terms of the Service Agreement, typically for a minimum of two years post-project, to allow you to access historical data.

Your rights

As our client, you have certain rights regarding the personal data of your employees that we hold. You can request access to, correction of, or deletion of this data by contacting us.

your rights under us pRIVACY LAWS

For clients and respondents in the United States, we comply with applicable state privacy laws, including the California Consumer Privacy Act (CCPA).

• Our Role: For the purposes of our Services, we act as a "Service Provider" under the CCPA. We process Respondent data on behalf of you, the "Business."
• Sale and Sharing: We do not "sell" or "share" personal information, as those terms are defined by the CCPA.
• Consumer Rights: If you are a resident of a state with applicable privacy laws, you have rights such as the Right to Know and the Right to Delete. To exercise these rights regarding your survey responses, you should submit your request directly to the panel provider who recruited you for the study.

Contact Us

If you have any questions about this Privacy Policy, please contact our data protection officer at privacy@humanmademachine.com, or at:

‍

Human Made Machine Limited

Unit 6, 2-4 Hoxton Square

London, N1 6NU

United Kingdom

‍

Please allow up to 30 days for a response.