How we intend to handle data

• No data is received until legal review is complete and the deal is signed.
• The data owner confirms it has the right to license the data, including under its customer and vendor contracts, and that personal data was collected lawfully. We help check this; the lawyer confirms it.

• Direct identifiers (names, emails, phone numbers, addresses, usernames): removed or replaced with consistent placeholders (e.g. PERSON_1).
• Indirect identifiers (exact dates of birth, precise locations, IP addresses, rare combinations of facts): generalised or removed.
• Sensitive data (health, ethnicity, religion, politics, union membership, biometrics, criminal records, anything about children): removed entirely.
• Secrets (passwords, API keys, tokens): removed.
• Third-party confidential material (clients' confidential information, privileged communications): removed.
• Anything you exclude (any folder, field, client or topic): never passed on.

No de-identification method is perfect. That's why we combine automated tools with human review, why the owner checks a sample before delivery, and why anything you cannot risk sharing in any form should simply stay out of scope. If a dataset can't be brought to the agreed standard, it won't be delivered.

• Never attempt to identify any person or the source company.
• Never contact anyone who appears in the data.
• Use the data only for the agreed purpose; no resale or sharing.
• Keep it secure and delete it when the licence ends, confirming in writing.
• Report anything that slipped through, stop using it and delete it.

• Encrypted transfer and storage; access limited to named people.
• Original data deleted within the period defined in the contract after delivery or after your request, with written confirmation.
• If personal information is found in delivered data, delivery stops, buyers are told to delete it, and you are notified in writing within the timeframe defined in the contract.