Humanly Privacy Notice
Introduction
Humanly is a design studio specialising in human-centred design for social impact. (Registered Company No: 10622903)
Humanly takes your privacy very seriously and we are committed to protecting your personal information. This privacy policy explains how we collect and use the information you give us. We encourage you to read this policy carefully.
Humanly is committed to fostering a culture of transparency and accountability by demonstrating compliance with the principles set out in the General Data Protection Regulation (GDPR) – as laid out in our Data Protection Policy.
What kind of information do we collect?
The personal information that we collect from you will vary depending on the context of your interactions with us. It may include, but is not limited to, the following information about you:
name;
demographic data such as your date of birth, gender, educational background; job role; income bracket;
contact data such as email address; phone number;
image and/or voice captured through photography, filming, videotaping and/or audio recording;
information you provide relating to your opinions, attitudes, experiences and use of certain products or services; and
any other information which may be collected in the course of our interactions with you.
Please note that participating in specific projects run by Humanly is completely voluntary and may involve you providing additional personal information, and sometimes sensitive personal information including information about your race, health, and/or disability if this is required for research purposes.
Please make sure that any personal details you provide are accurate and up to date, and let us know about any changes. Please get consent first before giving us anyone else’s information.
How do we use the information we collect?
We use your personal information:
to provide services to our clients;
to contact you for your views on our client’s services;
to send you invitations to take part in our surveys or events and to update you on issues relating to those events;
to enable us to issue incentives to you;
to analyse the data for research purposes;
to enable us to supply you with information which you have requested;
to deal with any complaints, queries or problems you experience;
for all other purposes consistent with the proper performance of our operations and business
What legal basis do we have for processing your personal information?
The GDPR requires us to rely on one or more lawful bases to use your personal information. We consider the bases listed below to be relevant:
Where you have provided your consent for us to use your personal information in a certain way (for example, we will ask for your consent to participate in a research study, to confirm arrangements by e.g. email; when appropriate to be filmed as part of the research; and we may ask for your explicit consent to collect special categories of your personal information).
Where there is a legitimate interest in us doing so if it is reasonably necessary to achieve our or our clients’ legitimate interests (as long as that processing is fair, balanced and does not unduly impact your rights).
‘Legitimate Interests’ refers to our clients’ interests in conducting research with you. For example, where they have an interest in making sure their services are relevant for you, or that you are satisfied as a service user.
When we process your personal information for our clients’ legitimate interests, we make sure to consider and balance any potential impact on you (both positive and negative), and your rights under data protection legislation. Our clients’ legitimate interests do not automatically override your interests – we will not use your personal information for activities where our clients’ interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law).
If you have any concerns about our processing, you have the right to object to processing that is based on our legitimate interests.
When do we share your information?
The nature of Humanly’s work means we often work in partnership with other organisations, however, we will not share your information with any other organisation unless we have your permission first. In exceptional circumstances, we may share your information when we are legally required to do so.
Where do we store and process your information?
Third party processors: As is indicated below, we may use third party platforms and processors for storage, surveys and event registrations. In using these third parties we are pursuing our legitimate interest to use third party technology to achieve greater efficiency within our organisation. To balance our interests against yours, we have taken steps to ensure these third parties maintain appropriate technical and organisational measures to keep your personal information secure.
Storage: We use a third party to provide cloud based data security, storage and disaster recovery service to backup data that we hold, we currently use GoogleWorkspace and GoogleCloud. Our data is stored in the EU by GoogleWorkspace and GoogleCloud.
Surveys: If you agree to participate in any survey that will form part of any research project, we will tell you at the time you take part how your information will be used for the particular research project, and how long it will be kept for. We usually use Google Forms or SurveyMonkey to process surveys, and they only process your information on our instructions. Google stores Humanly’s data in the EU.
SurveyMonkey operates in the US and complies with the EU-U.S. Privacy Shield Framework. For more information see the SurveyMonkey privacy policy: https://www.surveymonkey.co.uk/mp/privacy/
Events: If you register to attend one of our events we will use your personal information to process your application to attend the event and to send you any updates or information regarding the event. Our legal basis for doing so is to fulfil the agreement with you for your attendance. We use Eventbrite as the registration system for many of our events and their servers are based in the United States (U.S.) and may store and process your information outside the European Economic Area (EEA). Eventbrite complies with the EU-US Privacy Shield Framework. See the Eventbrite privacy policy for more information: https://www.eventbrite.com/support/articles/en_US/Troubleshooting/eventbrite-privacy-policy?lg=en_US
How long will we keep your information for?
The length of time we hold your personal information varies depending upon the type of information and its use.
We will only keep any personal information that you provide to us for as long as is necessary to provide research services to our clients, and we will securely delete information when it is no longer needed for that purpose.
We may retain your personal information for other essential purposes such as complying with our legal obligations, statutory or regulatory obligations and resolving disputes.
If you want to know how long we will keep your information, please email us at hello@designhumanly.com or write to us at the address below.
Your rights
Under data protection law, you are entitled to know what personal information we hold about you and how that information is processed, which includes the right to:
Know what information we hold about you
Ask us to correct any mistakes in your information which we hold
Ask us to delete your personal information
Ask us to stop using your personal information or restrict how we can use it, for example if you feel it is inaccurate or no longer needs to be used by Humanly
To object to us using of your personal information
To object to any automated decision making that we may do using your personal information
Where consent has been used as the lawful basis for processing your information, you have the right to withdraw said consent.
If you have a question or concern about how your personal information is being handled then please email us at hello@designhumanly.com or write to us at Humanly, 86-90 Paul Street, London, EC2A 4NE. You also have a right to raise issues with the Information Commissioner’s Office: https://ico.org.uk/concerns/
When you contact us to exercise your rights, we will:
Respond to acknowledge your request has been received
If your request is not applicable, we will write to tell you of this whilst providing the reasons why
We will act on your request within the time period as per the current data protection law
Should we need to extend the period of time required to respond due to the complexity, we will write to inform you of this
Changes to this privacy notice
We may change this privacy notice and we encourage you to check this privacy notice from time to time.
Contacting us
If you have any questions or comments about this privacy policy, please contact:
hello@designhumanly.com
Humanly
86-90 Paul Street
London
EC2A 4NE