Askable Privacy Policy

Askable is a market research facilitation platform that operates globally. In this Privacy Policy, ‘Askable’, ‘we’, ‘us’, ‘our’, ‘ours’, refers to Askable Pty Ltd (ACN 621 754 096), Askable Limited (Company Number 14417002) and Askable Inc.

Askable is committed to ensuring the fair and appropriate handling of your personal data.

This Privacy Policy explains how we collect, use, store and disclose your personal data (also known as ‘personal information’), whether you interact with us or use:

1. Askable is a market research facilitation platform that operates globally. In this Privacy Policy, ‘Askable’, ‘we’, ‘us’, ‘our’, ‘ours’, refers to Askable Pty Ltd (ACN 621 754 096), Askable Limited (Company Number 14417002) and Askable Inc.
2. Askable is committed to ensuring the fair and appropriate handling of your personal data.
3. This Privacy Policy explains how we collect, use, store and disclose your personal data (also known as ‘personal information’), whether you interact with us or use:
   (a) our website located at askable.com; or
   (b) our online research platform, located at my.askable.com and app.askable.com; or
   (c) our mobile app, available on the Apple App Store or Google Play Store
   (together, the Platforms).
4. Askable does not make decisions on insurability or creditworthiness, and the Platforms and services are not for the US Fair Credit Reporting Act (FCRA) purposes
5. In this Privacy Policy, we use the terms:
   (a) ‘Customer’, referring to corporate clients conducting research, interviews and studies (including ad-hoc customers, subscription customers or Askable partners);
   (b) research ‘Participant’, referring to individuals who participate in research studies;
   (c) certified ‘Researcher’, referring to individuals who assist with research studies;
   (d) ’Supplier’, referring to individuals providing goods and services to Askable;
   (e) ‘Applicant’, referring to individuals who apply for employment or other engagement with us;
   (f) an ‘Event Attendee’, referring to individuals who register and attend an event we host; and
   (g) ‘Visitor’, referring to anyone browsing on our website, or enquiring about our functions or activities via electronic means.
   ‍
   In some circumstances, you may belong to more than one of these groups, and multiple sections of this Privacy
   Policy will then apply to you.
6. Askable applies applicable data protection laws of the jurisdictions in which we are operating. Depending on where
   you are located, additional terms in the appendices may also apply to you.
7. Data protection laws guide how we collect, use, store and disclose your personal data. Importantly, we:
   (a) are transparent about our personal data handling practices;
   (b) limit our collection of personal data to that which is necessary for our functions;
   (c) understand our platform’s purposes, and restrict our use and disclosure of personal data in that regard; and
   (d) take reasonable steps to keep the personal data we have secure.
8. We will update this Privacy Policy from time to time. The current version will always be available on our website at askable.com/legal/privacy-policy.
9. At Askable, we use the term ‘Privacy Notice’ as set out in the UK General Data Protection Regulation (UK GDPR) interchangeably with the term ‘Privacy Policy’ as set out in the Australian Privacy Act 1988.

2.Account Registration Privacy Collection Notices

Privacy Collection Notices for Participant, Customer and + Researcher account registration is set out below.

1. Participant account registration
   When you sign up for a Participant account with Askable, we will collect the personal data you provide during registration and process it for the purposes of registering and managing your account with us, contacting you about any future research studies you may be eligible for, reminding you of upcoming studies you have selected to participate in, and otherwise in accordance with our Privacy Policy and as required or authorised by law. You may also provide additional information to your account profile after registration. By setting up a Participant account, you will be able to apply for, participate in, and be paid for research studies via the Platforms.
   ‍
   Askable may not be able to set up your account or provide you with research opportunities if you do not provide the requested information. This Privacy Policy also contains further information about how we collect, use, store or disclose your personal data, how you may seek access and correction of your personal data, and how you may make a complaint about a breach of privacy. If you are located in certain jurisdictions, you may also be entitled to further data rights. If you have questions, please contact the relevant Privacy Officer in accordance with this Privacy Policy.
   ‍
2. Customer account registration
   When you sign up for a Customer user account with Askable, we collect personal data you provide during registration (i.e. in relation to your nominated users or representative) and process this data for the purposes of registering and managing your account with Askable, reminding you of current and upcoming studies you have created, and otherwise in accordance with this Privacy Policy, and as required or authorised by law. By setting up a Customer account, you will be able to utilise the Platform and services to find Participants and manage and facilitate research studies.
   ‍
3. Askable may not be able to set up your account if you do not provide the requested information. This Privacy Policy also contains further information about how we collect, use, store or disclose your personal data, how you may seek access and correction of your personal data, and how you may make a complaint about a breach of privacy. If you are located in certain jurisdictions, you may also be entitled to further data rights. If you have questions, please contact the relevant Privacy Officer in accordance with this Privacy Policy. Researchers account registration
   ‍
   When you sign up for a Researcher account with Askable, we will collect personal data you provide during registration and process this data for the purpose of registering and managing your account with us, communicating with you to notify of potential research opportunities, and otherwise in accordance with this Privacy Policy, and as required or authorised by law. The personal data we collect includes your name, contact details, a short video recording of you responding to a series of onboarding questions, and details of your qualifications and experience as a certified researcher. We may also conduct a recorded interview session with you as part of the onboarding process.
   
   Askable may not be able to assess your eligibility for participation in studies as a Researcher, or complete your account registration, if you do not provide a complete response or a response at all. This Privacy Policy also contains further information about how we collect, use, store or disclose your personal data, how you may seek access and correction of your personal data, and how you may make a complaint about a breach of privacy. If you are located in certain jurisdictions, you may also be entitled to further data rights. If you have questions, please contact the relevant Privacy Officer in accordance with this Privacy Policy.

3. Our role

1. The types of personal data we collect and how we use it depend on your relationship with us. This includes whether you are a Customer, a Participant, Researcher, Visitor, or Event Attendee.
2. Askable as data controller: As a data controller (or Joint Controller between Askable entities) we are responsible for determining why and how we process personal data. We only collect and process personal data that is necessary for our functions and activities, as set out under this Privacy Policy. Askable acts as a data controller when it collects personal information directly from you, including when:
   (a) you interact with our Platforms, including registering your account, visiting our social media channels,
   enquiring about our services, completing any online submission forms, participating in any marketing
   campaigns, participating in any research studies as a Participant (including Industry Stream studies), or
   responding to an offer to participate in research studies;
   (b) you apply for a job with us, including engaging in interviews (via any method) and contract negotiation in our
   employment and engagement process;
   (c) you submit a rights request or a privacy complaint;
   (d) you interact with us in person, by email, by phone, by enquiry or feedback form outside of our Platforms;
   (e) any other means when you provide us with your personal data; or
   (f) You register for or attend an event organised by Askable.
3. We may also need to collect personal data about you from third parties from time to time where it is necessary for us to do so and it is unreasonable or impractical to collect directly from you, where you have consented to us doing so, or where we are otherwise required to or authorised to by law. Those third parties include:
   (a) if you are a Customer or Supplier, publicly available records such as company registration databases (in Australia: the Australian Securities Investment Commission, and Australian Business Register);
   (b) if you are a Visitor, technology service providers and social media platforms; and
   (c) if you are an Applicant, referees when they provide references, academic institutions or training and certification providers, providers of licence and background-checking services, recruiters and other service providers who assist in the engagement process, and other publicly available sources such as social media platforms.
4. Askable as data processor for Customers: As a data processor, when we process personal data we are doing so purely on the instruction of the Customer (as data controller), unless otherwise stated in this Privacy Policy. It is important that you consider how your personal data may be handled by Customers by reading their privacy policies and any collection notices associated with their studies. Askable acts as a data processor when we collect and process your personal data on behalf of our Customers:
   (a) to facilitate the recruitment of participants for research studies opportunities;
   (b) to provide our services and platform for the completion of research projects; and
   (c) to facilitate the use of our Platforms, including associated tools and services.
5. Where we seek personal data from you or someone on your behalf, we only collect:
   (a) Non-sensitive data, if it is reasonably necessary for the Platforms and services we provide; and
   (b) Sensitive data, if it is reasonably necessary for or directly related to the Platforms and service we provide and you have consented to its collection (which may be implied in the circumstances), or its collection is permitted or authorised by law.
6. If you provide us with personal data about someone else, you must ensure that you are authorised to disclose that information to us and that, without us taking any further steps required by applicable data protection laws, we may collect, store, use and disclose such information for the purposes described in this Privacy Policy. Where we request you to do so, you must assist us with any requests by the individual to access or update the personal data you have collected from them and provided to us.

4. What types of personal data do we collect?

1. Personal data is information that relates to an identified or identifiable individual. The types of personal data we collect and process as a data controller depends on our relationship with you, and we limit the information we collect to what is reasonably necessary for one of more of our functions or activities. Generally, we will collect your name, commentary or opinion about you, and other information relevant to providing you with the information, goods and
   services (as applicable) you or someone on your behalf is seeking.
2. Personal data we collect from you includes:
   (a) Analytics data - We collect analytics and cookie data collected from your use of the Platforms (including your
   IP address and other unique ID numbers). We collect this data from Visitors, Customers, and Participants. You may choose to enable or disable information you share with us via the website in your browser or device settings. Disabling the sharing of some information may affect your ability to use certain features of the website, and your user experience generally;
   (b) Enquiries and chat data - When you contact us or use our chat function, we collect personal data provided by you during the enquiry or communication;
   (c) Event Attendee data - When you register and attend an Askable event, we collect your name, contact details, dietary requirements and accessibility requirements (where applicable).
   (d) Customer contact data - As our Customers are generally companies, personal data related to our Customers is generally limited to details of a company’s nominated contact person;
   (e) Participant registration data - We collect your name, contact details, and payment details;
   (f) Researcher registration data - We collect you name and contact details;
   (g) Participant profile data - We collect personal data to build Participant profiles (including your locational attributes and demographic information, and information related to your interactions with us on the Platforms i.e. responses to research studies which form part of your profile history) and set Participant preferences
   (including for marketing and communications preferences). We also collect any personal information you voluntarily provide during participation in a study, which may include sensitive information about your race or ethnicity, health, hobbies, religious or political beliefs, sexual practices and orientation, political opinions, trade union membership, and criminal record. We record your responses via video and audio recordings, transcripts, and text collection.
   (h) Supplier data – We collect the contact details, business name and registration number (for sole traders and partnerships), bank account details (for payment of invoices), and information about your role.
   (i) Applicant data –Depending on your potential or actual position with us, we collect your personal data contained within an application and CV/resume, employment history, personal data derived from a reference, personal data derived from an interview, personal data derived through testing (including psychometric or aptitude testing, as applicable), licences and other certificates and qualifications, and information included in a passport, birth certificate, visa or other documentation demonstrating your right to work for us.
   (j) Contact data - We collect contact data about Clients, Researchers and Participants ;
   (k) Request for access or correction data - We collect your contact details and personal data sufficient to verify your identity (such as a certified photo ID).
3. Further information about the personal data we collect, how we collect it, and why we collect it is set out in thesections below.
4. We support your ability to make decisions about the personal data you provide to us, however if you choose not toprovide us with the information requested, or it’s incomplete or inaccurate, we may not be able to provide you with the information, goods, and services you are seeking.

5. All individuals

1. Why we collect and process your personal data

Askable uses personal data of individuals for the following purposes and under the lawful basis set out below. Askable willnot use personal data not related to its services or functions.

Askable may use or disclose personal data for secondary purposes where it would be reasonable to expect us to do so, and that secondary purpose is related (or directly related in the case of sensitive data) to the primary purpose set out above (or below in relation to specific categories of individuals).

ii. How we collect and process your personal data

Askable collects and processes your personal data when you interact with us as set out in section 3 (Our Role). Depending on why you are interacting with us, we may be able to interact with you anonymously or using a pseudonym in some instances.
‍

6. All Platform users

• Why we collect and process your personal data

Askable uses personal data of Platform Users for the following purposes and under the lawful basis set out below. Askable will not use personal data not related to its services or functions.

ii. How we collect and process your personal data, and what personal data we collect

Askable collects and processes your personal data in a number of instances, which have been set out below.
Depending on why you are interacting with us, we may be able to interact with you anonymously or using a
pseudonym in some instances.
Visiting our website

1. ‍‍When visiting our websites, Askable collects data about your navigation of the website to help us monitor and improve our platform and your user experience.
2. The data collected and processed when you visit our website includes your:
   (i) IP Address
   (ii) Browser version
   (iii) Pages visited
   (iv) Time and date of your visit
   (v) Time spent on pages
   (vi) Cookie data
   (vii) Approximate location
3. We generally collect this information through the use of cookies. Refer to our Cookie Notice for more
   information about our use of cookies.

‍
When enquiring or chatting with us about our services

1. ‍‍When you contact us or use our chat function, we collect your name, email, phone number and enquiry details. We use your personal data to communicate with you and provide you with information about our services.
2. When you use our chat feature, you may interact with our AI Chatbot. The AI Chatbot will instantly respond toyour questions by referring and linking to Askable help pages. Your chat history will not be retained by an AI system or used to train an AI model.

‍
Responding to an offer
If you choose to respond to an offer that we make on our website or social media pages (such as Meta), we will collect some of your personal data, including your email, approximate location, the landing page ID, and the time you visited the page. We may include small graphic images or other web programming code, called web beacons (also known as “pixel tags”, “web bugs” or “clear GIFs”), on our Services and in our messages. The web beacons are minute graphics with a unique identifier. They are used to track the online movements of Site users. Web beacons help us better manage content on the Services by informing us what content is effective, monitoring how users navigate the Services, counting users of the Services, and counting how many e-mails sent by us were actually opened.
‍
When you submit a rights request or a privacy complaint
When you submit a rights request or submit a privacy complaint, Askable collects your name, contact information and details regarding your request or concern, as well as processing data that validates your identity. We will always try to use data we already process for this purpose, but occasionally we may need to collect new data, depending on the sensitivity of the data. We use this data to process your request or investigate your concern and to communicate with you.

‍

7. Participants

i. Why we collect and process your personal data
Askable uses research Participant personal data for the following purposes and under the lawful bases set out below. Askable will not use personal data not related to its services or functions.

ii. How we collect and process your personal data and what personal data do we collect
Askable collects and processes Participant personal data in a number of instances, which have been set out below. We generally collect this information directly from you. There are some circumstances, however, where you can choose to provide us with information from your Google or LinkedIn accounts (such as registration information or Participant profile information). If you choose to remain anonymous, you will not be able to participate in or receive payment for any studies.
‍
During participant registration

1. ‍‍When you register an account with Askable as a Participant, we collect a range of personal data to set up your account, including:
   (i) Email
   (ii) Password (Hashed)
   (iii) Name
   (iv) Gender
   (v) Town/suburb location
   (vi) Date of birth
   (vii) Occupation status
   (viii) Mobile phone number
   (ix) Incentive payment preference (PayPal or GiftPay)
   (x) Email address where incentive payment will be sent (PayPal or GiftPay)
2. You may also choose to sign up using Google. If you choose to do this, Google will provide us with information from your social media profile, such as your name, email address, language preference and profile picture.
3. Identity verification: when you sign up, or if we ask you to verify an existing account, you must verify youraccount using our verification provider, Jumio. You can choose either a face check (Jumio captures a facial image and liveness/biometric data to check that you do not already have an account, and to confirm you are 18 or over where needed) or an identity document check (Jumio checks your document details against other documents it has seen). Jumio is an independent controller of this data and handles it under its own privacy notice. Askable does not receive or store your facial image, biometric data or identity document - we receive and store only the result of the check (verified / not verified / duplicate-flagged), a Jumio reference number and the time of the attempt, which we keep for the life of your account.
4. If a Participant breaches the Askable Terms and Conditions when using the platform and services, they maybecome ineligible to take part in research projects or studies. Should this occur, the status will be noted on the Participant’s account record.‍

When adding profile details to your account‍

1. You can optionally provide us with additional profile details in your Participant account. We collect these details to build your Participant profile and set your preferences (e.g., the types of research opportunities you would like to be considered for).
2. You can provide the following additional personal data to build your Participant profile:
   (i) Family status
   (ii) Level of education
   (iii) Occupation industry
   (iv) Job title
   (v) Employment type
   (vi) Details from your LinkedIn public profile
   (vii) Voice clip (audio recording)
   (viii) Reading level
   (ix) Preferences for research opportunities
   (x) Participants are able to connect to LinkedIn via the online Participant account. Where requested by you, LinkedIn will provide Askable with details about you that are included in your LinkedIn profile.

‍
When applying for Customer research study opportunities

1. ‍‍When you apply for a research opportunity, you will be asked to answer a few screening questions. Your answers are used to narrow down the Participant pool from which to select people to Participate in a particular study.
2. The Customer is the data controller of this data, and Askable only processes it on the Customer’s behalf and only in line with the Customer’s instructions. The answers are collected and held by Askable to match you with the research opportunity our Customer is seeking Participants for. Where a Customer chooses to auto-approve Participants, you may be automatically selected for the research study where your responses to screening questions meet certain criteria.
3. Screening questions may include details about your:
   (i) Family and children
   (ii) Language
   (iii) Occupation
   (iv) Devices
   (v) Household income
   (vi) Preferences
   (vii) Opinions
   (viii) Shopping behaviours
   (ix) Health
4. For quality assurance, it is important that all screening questions are answered by you to the greatest degree of accuracy (i.e., that you abide by our Terms by answering honestly and do not change your answers in order to appear to be a best-fit for the research opportunity). To facilitate this, we record your device’s screen when you are completing applications and answering the screening questions for each research opportunity.
5. Data shared with Askable clients: Askable Customers will be provided with some information about you when you apply for a research opportunity with them. Our Customers do not have access to all of you information held by Askable.
6. Customers are provided with your details that are relevant to their research study such as your name, gender, age, email, phone, suburb or country, LinkedIn profile (if provided), voice clip (if provided), reading level, occupation status and industry, job title, and family status. As the data controller, they also have access to your responses to screening questions and your availability to participate in a research opportunity.
7. Before our Customers can select Participants to complete their research study, they must request and be approved to hold an account. Only then are our Customers provided with your information for the purpose of selecting Participants and conducting their research study.
8. It is important that you consider how your personal data may be handled by Customers by reading any collection/privacy notices associated with their studies.

‍
When participating in Customer research studies

1. ‍‍To participate in and complete research studies, you will generally be required to provide details about yourself, including your opinions and preferences.
2. The exact personal data that you are required to provide is dependent on the study being conducted and is determined by the Customer (or our Researcher conducting the research on behalf of the Customer). The Customer is the controller of this data, and Askable only processes it on the Customer’s behalf and only in line with the Customer’s instructions.
3. Use of Askable Sessions: When clients choose to use the Askable Sessions (formerly Askable Live) tool to facilitate a research study, Askable will process and store your personal data during the study on behalf of the client. Askable Sessions is a web conferencing tool provided by Askable that facilitates and records virtual interviews. Askable records and stores the Askable Sessions recordings (including audio and visual recordings) and transcripts of sessions, and makes them available to the Customer conducting the research study.
4. Askable will not provide your personal data collected during studies facilitated via the Askable Sessions tool to any other entity other than the Customer. Askable does not have control, however, of how the Customer conducting the study will use and disclose your personal data. It is important that you consider this prior to participating in research studies.
5. AI Moderator: Our Customers may choose to use an AI Moderated feature within Askable Sessions. AI
   Moderated is a feature where an AI moderator facilitates a research interview and asks questions to a
   Participant. We will also inform you prior to your research interview, where the interview will be conducted by an AI moderator.
6. Third party tools: Some Customers may choose to use tools provided by third parties when completing studies (such as Survey Monkey or Validity). In this scenario, Askable is not involved in the collection or processing of personal data during this part of a study.

‍
When participating in Industry Stream studies

1. ‍‍Industry Stream studies are conducted directly by Askable.
2. To participate in and complete Industry Stream research studies, you will generally be required to provide details about yourself, including your opinions and preferences. The exact personal data that you are required to provide is dependent on the Industry Stream study being conducted.
3. During your participation in an Industry Streams study, Askable records your responses to the study via videoand audio recordings, transcripts, and text collection (Records). These Records will include personal data you choose to share, and may include sensitive information. The Records are:
   
   (i) aggregated with other Participant responses, reviewed, analysed, summarised, and otherwise made available to Askable Customers for their internal business and research use. Customers have agreed to not publish identifiable personal data publicly or distribute your personal data outside of their authorised internal teams, however Askable cannot control Customer behaviour and is not responsible for a Customer’s breach of its agreement; and
   (ii) sold to third parties for inclusion in their own data sets and for use for their own purposes. We will take reasonable measures (including contractual arrangements) to require that any third party purchasing your personal data will hold that data securely.

‍
It is important that you consider this prior to participating in Industry Stream studies. We will seek your
consent at the time you register to participate in Industry Stream studies. If you do not consent to the sale of the Records, or to the disclosure of the Records to Askable Customers, then you cannot participate in an
Industry Stream study.

d. Your responses to an Askable Industry Stream study (including video and audio recordings) may be reviewed, summarised, aggregated, and analysed by AI tools made available via the Platforms, and used to train or validate those AI tools and the underlying AI model(s). We take reasonable steps to ensure our employees are trained to monitor and review the AI tools to confirm the processing and disclosure of any personal data by these AI tools is appropriate and complies with this Privacy Policy.
e. Askable uses the personal data provided by you during participation in an Industry Stream study, and any
outputs produced by AI tools using your personal data, for internal operations needs including product
improvement, quality assurance, technical diagnostics, customer support, and security compliance and audit activities.
When we process data to send your incentive payment
The personal data we collect and process in order to pay your incentive to you includes:
(a) The incentive amount
(b) Your preferred payment currency
(c) Payment preferences (PayPal payment or GiftPay)
(d) Your email address
(e) The status of the incentive payment (when you can expect to receive the payment)
‍
When we communicate with you
We may send you service emails or messages, including to notify you of potential research opportunities, provide communication from our clients, or remind you of your upcoming study sessions. We collect and process your personal data when we communicate with you, including:
(a) Name
(b) Email
(c) Phone number

8. Customers

i. Why we collect and process your personal data

Askable uses personal data of current and prospective Customers for the following purposes and under the lawful bases set out below. Askable will not use personal data not related to its services or functions

‍

ii. How we collect and process your personal data and what personal data do we collect

As our current and prospective Customers are generally companies (and/ or corporations, organisations, government agencies), personal data collected from Customers is usually limited to details of the nominated contact person, which we process in a number of circumstances, set out below. We will collect this information directly from you (e.g., when you fill out a webform or submit your details at an event) or from other sources such as your employer (i.e., our Customer) or LinkedIn. The nature of our business means that we are unable to provide our market research services anonymously.

Marketing to prospective Customers

1. We use a prospective Customer’s contact email, name, phone number, sector and company details to send you marketing communications.
2. You can ask us to stop sending you marketing messages at any time by following the opt-out links on any marketing message sent to you or by contacting us at any time. Where you opt out of receiving these marketing messages, this will not apply to personal data provided to us as a result of a purchase, product or service experience or other transactions.

‍
During Customer registration
Customer users can register an account with Askable. During registration, personal data collected from Customer platform users is generally limited to details of the Customer’s nominated contact person, including name, email and phone number. We process this data on behalf of our Customer (as data controller) to set you up with an Askable account.
‍
When purchasing credits or subscriptions

1. ‍‍When Customers purchase credits or subscriptions with Askable, they will generally provide payment
   information of a company, as opposed to an individual. However, there may be limited circumstances where personal payment information is provided and processed by Askable for the purpose of purchasing credits or subscriptions (such as name on card, card type, and amount purchased).
2. We do not knowingly receive payment information associated with a person; rather, we ask our Customers to use their approved corporate payment facilities.

Facilitating Askable Sessions

1. ‍‍Askable provides a virtual video conferencing tool that works in conjunction with other Askable products. The tool is referred to as Askable Sessions. Customers can use the tool to conduct virtual research studies with their selected Participants.
2. Through Askable Sessions, we collect audio, visual recording, and transcriptions of the research session and the individuals involved in the research session. The Customer is the controller of this data, and Askable only processes it on the Customer’s behalf and only in line with the Customer’s instructions.
   ‍

9. Researchers

i. Why we collect and process your personal data

Askable uses Researcher personal data for the following purposes and under the lawful bases set out below. Askable will not use personal data not related to its services or functions

ii. How we collect and process your personal data and what personal data do we collect

Askable collects and processes Researcher personal data in a number of instances, which have been set out below. We will collect this information directly from you. The nature of our business means that we are unable to provide our market research services anonymously.
During Researcher registration

1. ‍‍When you register an account with Askable as a Researcher, we collect a range of personal data to set up your account, including:
   (i) Email
   (ii) Password (Hashed)
   (iii) Name
   (iv) Mobile phone number
   (v) Video recording of your response to a series of questions
   (vi) Details of your qualifications and experience as a certified researcher (such as the number of years of experience you have, or details about your skills)
2. You may also choose to sign up using Google. If you choose to do this, Google will provide us with information from your social media profile, such as your name, email address, language preference, and profile picture.
3. Askable Customers will be provided with your name, and details of your experience (including your previous employment) and qualifications as a certified researcher when you accept an offer to undertake a research project.

Facilitating Askable Sessions
Researchers must use the Askable Session tool to conduct virtual research studies with selected participants. Through the Askable Sessions tool, Askable collects audio, visual recording, and transcriptions of the research session and the individuals involved in the research session. The Customer is the controller of this data, and Askable only processes it on the Customer’s behalf and only in line with the Customer’s instructions.
When you get paid
We pay you when you complete research projects on behalf of our Customers. To receive payment, you will be required to send us an invoice. The personal data we collect and process in order to pay you includes:
(a) The payment amount
(b) Your preferred payment currency
(c) Payment method and details
(d) The status of the payment
‍
When we communicate with you

1. ‍‍We may contact you via a number of communication channels (such as email, phone or message). We may send you service emails and other communications including to notify you of a potential research project that may suit you, provide communications from our Customers, or remind you of an upcoming study session.
2. We collect and process your personal data when we communicate with you, including:
   (i) Email
   (ii) Phone number
   (iii) Details of the communication or message
   ‍

10. Event Attendees

i. Why we collect and process your personal data

Askable uses personal data of our Event Attendees for the following purposes and under the lawful bases set out below. Askable will not use personal data not related to its services or functions

ii. How we collect and process your personal data

Askable collects and processes your personal data in a number of instances, which have been set out below.Depending on how you are interacting with us, we may be able to interact with you anonymously or using apseudonym in some instances.

Attending an event

1. When you register and attend an Askable event, we collect personal data about you to process yourregistration, facilitate and manage the event, share photos, and follow up with you after the event. Thepersonal data that we collect may include:
   (i) Name
   (ii) Company and role
   (iii) Email
   (iv) Phone number
   (v) Dietary requirements
   (vi) Accessibility requirements
   (vii) Photo
   (viii) Event attendance details
   (ix) Clothing size, if we are providing swag

i. Data sharing and transfers

1. We generally disclose your personal data for the purposes for which it was collected. We may disclosepersonal data about you to:
   (i) Our Customers: Where Participants choose to participate in research studies (or where Researcherschoose to complete research projects on behalf of our Customers), Askable shares Participant (orResearcher) personal data with Customers that have an account with us via the Platform. In data protection terms, the Customer is the controller of this data, and Askable is acting as a processor ontheir behalf.
   That means that Askable does not control how personal data collected by our Customers (i.e., during aresearch study) may be used or disclosed. Your personal data (including video and voice recordings)may be published, reproduced or stored by our Customers. It is important that you consider how yourpersonal data may be handled by Customers by reading their privacy policies and any collectionnotices associated with their studies.
   (ii) Sharing between Askable entities: We share your personal data between Askable entities, includingAskable Pty Ltd (Australia), Askable Limited (UK), and Askable Inc. (US). Within Askable, we have anagreement that ensures your data is handled in accordance with applicable data protection laws.
   (iii) Our service providers: Askable uses external parties (i.e., service providers) to provide services andfunctions on our behalf. For our service providers to provide these services, we may share personaldata that relates to the services being provided, or they may collect the information on our behalf(including insurers, IT and technology service providers, recruitment providers and professionaladvisers).
   We take reasonable steps to ensure we have contractual arrangements in place with all service providers thatinclude privacy, security and data breach reporting controls. We also take reasonable steps to ensurethat service providers only process personal data for the purposes it was provided to them, and not forany other purpose. A list of our service providers is available here: trust.askable.com/subprocessors. Indata protection terms, these are our processors or sub-processors.
   (iv) Government departments, agencies, and enforcement bodies: where required or authorised bylaw.
   (v) Third parties by consent: Askable will disclose your personal data to third parties to whom you haveagreed we may disclose your personal data and where the personal data was collected from you (orfrom a third party on your behalf) for the purposes of passing it on to the third party.
   (vi) Sale of business: Askable may expand or reduce our business, and this may involve the sale and/ortransfer of control of all or part of our business. Personal data, where it is relevant to any part of thebusiness for sale and/or transfer, may be disclosed to a proposed new owner or newly controlling entityfor their due diligence purposes, and upon completion of a sale or transfer, will be transferred to thenew owner or newly controlling party to be used for the purposes for which it was collected.
   (vii) Marketing: We also use data for marketing purposes including retargeting/suppressing you fromretargeting. The vendor we use for this is an independent controller, which means that Askable and thevendor determine their own data processing purposes and means of processing. This vendor isTaboola. Taboola collects and processes data via its pixel for ad targeting and analytics, only if youaccept their cookie on our cookie banner. The types of personal data collected by Taboola are browsertype, truncated IP address and click events. Their Privacy Notice is available here. There is a contractin place between Taboola and Askable.
   (viii) Identity verification: We use Jumio for identity verification and duplicate detection (see "Duringparticipant registration" section above). Jumio is an independent controller of any data it collectsdirectly from you, and this data does not pass through Askable’s systems; we pass Jumio a referencelinked to your account and receive back only the outcome of the check. Jumio's privacy notice is available here. There is a contract in place between Jumio and Askable governing the verificationservice.
   (ix) Other sharing: Askable will not otherwise sell or share your personal data with advertisers, sponsors,content providers or anyone else – unless:
   (A) we have your express permission, or
   (B) there is a lawful ability or requirement for us to do so, or
   (C) in the case of Participants who participate in Industry Stream studies, in which case yourpersonal data will be aggregated and sold to third parties (see further information under section7 above (Participants). Participants who do not consent to sale of their personal data cannotparticipate in Industry Stream studies.
2. A note about international transfers for UK and EEA individuals: Askable operates its platform andservices globally, providing services to clients and participants from a number of countries. As such, we needto share information that we collect outside of the jurisdiction it was collected from. This may include transfersto jurisdictions where our Askable offices and third-party service providers are located, such as Australia, theUnited Kingdom, and the United States.
   When transferring information outside of the United Kingdom or the European Union, Askable applies appropriatesafeguards (i.e., we undertake transfer risk assessments and enter into agreements incorporating standarddata protection clauses including EU Standard Contractual Clauses and UK International Data TransferAddendum).

ii. How we store your personal data

1. Askable will only store your personal data in electronic format, either on-site or in ‘the cloud’.
2. Askable uses a cloud storage service provider, MongoDB, to store personal data, including your registrationdata, purchase or payment data, communications data, profile data and data from study sessions includingrecorded video responses. This information is stored on a server located in Sydney, Australia, and a backup isstored in the eu-west-2 AWS region.
3. Askable also uses other third-party service providers to store specific types of personal data (such as paymentprocessing data, email and communications data). The personal data stored by third party providers, relatesto their functions and services. A full list of our service providers is available on request.

iii. How we secure your personal data

1. At Askable, we securely manage and dispose of personal data, by implementing a range of data securitypractices, including (but not limited to):
   (i) Data stored securely on a cloud database with strong automated security features
   (ii) Use of PCI-DSS compliant service providers for our payment solutions
   (iii) We engage external security advisors to conduct penetration testing of our systems
   (iv) Access to personal data is only provided to staff that require the information to undertake their role
   (v) Data access controls within Askable, including multi factor authentication
   (vi) Encryption of data in transfer and at rest
2. Protection of personal data from unauthorised access and disclosure is a priority for us. Any concerns aboutthe security of personal data held by Askable should be reported to us without delay viasecurity@askable.com

iv. How long we keep your personal data

1. We retain your personal data for differing periods, depending on the purpose for which it was collected.
2. We will destroy or de-identify personal data when our legal obligations to retain the information have expiredand we no longer need the information for the purposes for which it was collected (or any secondary purposewhere allowed at law). For the avoidance of doubt, we may reasonably consider that information is stillrequired by us in order to recommence providing our goods and services.

1. Askable maintains a number of social media accounts (including LinkedIn, Facebook, Instagram and Google),for the purposes of:
   (i) Pushing information about the Askable company and services
   (ii) Advertising research opportunities that Participants may be interested in;
   (iii) Recording and sharing reviews of Askable and pushing out information about our platform to those withan interest
   (iv) Directly messaging platform users (where our Participants or Customers have chosen to be contactedin this way);
   (v) Signing up Participants and Customers to the Askable platform (i.e., via Google);
   (vi) Posting articles to inform, blog and attract new clients, and
   (vii) Advertising employment opportunities at Askable.
2. Social media platforms generally apply their own privacy policies to any personal data that is captured orshared while on their sites. As such, you may prefer to deal with us directly via askable.com, and not viasocials, when sharing your personal data.

i. Askable is committed to ensuring the fair and appropriate handling of your personal data. We support your ability toexercise rights regarding your personal data held by us, as set out in the table below.

ii. Askable handles rights requests directly, only for data that we are the controller of. To exercise your rights about datathat we collect on behalf of our Customers, you can contact that Customer directly. If you contact us to exercise rightsabout personal data that we process on behalf of the Customer (as a processor), then we are required to pass rightsrequests on to them.

‍

iii. Askable will not discriminate against you because you exercised your individual rights set out above.

15. Updating personal data online

i. You can change and update your personal data in your Askable account such as, your name, date of birth or emailaddress, by logging on to your account with your username and password. You will then be able to update yourdetails and personal data.

1. Please contact us to make a rights request – that is, to request access to your personal data held by us,request a correction of your personal data or to ask us to act in relation to your other rights set out above.
2. For more information please visit our Data Subject Rights page.

1. If you have a concern or complaint about our personal data handling practices, please get in touch with us!You can contact us using our contact information.
2. In the United States, if you remain dissatisfied after we respond, you may, where permitted by applicable USlaw, submit a complaint to the Attorney General or other regulatory authority responsible for enforcing theprivacy laws applicable in your state of residence.

1. If we decline to take action on your request, we will explain the reasons for our decision.
2. Where required by applicable US law, you may appeal our decision by following the instructions included inour response or by contacting us at privacy@askable.com.
3. We will review your appeal and respond within the timeframe required by applicable law.

1. AI Moderated: A feature within the Askable Sessions tool where an AI moderator facilitates a researchinterview with a research participant. We will inform research participants prior to a research interview, wherethe interview will be conducted by an AI moderator.
2. Automated continuous discovery: Live insights dashboard that leverages AI to summarise insights, trendsand summaries from research interview transcripts.
3. Ask AI: A tailored LLM designed for research, that can be used to summarise and analyse a researchinterview transcript.
4. Askable Industry Streams: Where Askable collects and stores personal data from Participants, and this datacan be reviewed and summarised by AI tools to create business insights for Customers (see section 7 of thisPolicy).

i. Questions or concerns?

1. If you have a question about our Privacy Policy or a concern or complaint about our personal data handlingpractices, please get in touch with us! You can contact us using our contact information set out below.
2. We will confirm receipt of your questions or complaint within 24 hours. In most cases, we will be able to assistyou immediately, however, there are some circumstances where we may need additional time to respond toyou (such as where additional details are needed to understand your concern or investigate the matter).
3. You also have the right to lodge a complaint with the data protection supervisory authority relevant to you, asset out in the table above.

ii. How to contact us

Please contact us at:

This appendix applies to individuals subject to Australian or New Zealand privacy laws. The information in this appendix supplements the main Privacy Policy.

i. There are no charges for requesting access to or the correction of your personal data, however we reserve our rights to charge you any reasonable administration fees associated with your request. We will notify you in advance of any applicable fees.

ii. We may decline a request for access to personal data in circumstances prescribed by the Australian Privacy Act.If we decline a request for access, where reasonable, we will provide you our reasons and information about your ability to complain about such refusal.

iii. If you believe the information we hold about you is incomplete, not up to date, or is inaccurate, please advise us as soon as practicable. We will take reasonable steps to correct the information if we agree that it is incomplete, out of date, or inaccurate. We will strive to process any request within 30 days.

Complaints about our Privacy Policy or the way we handle your personal data should first be directed to us at the details set out above in section 17 (How do I make a complaint).

We will investigate and attempt to resolve your complaint in accordance with the Australian Privacy Act. If you are not satisfied with the outcome of this process, then you may contact the Office of the InformationCommissioner, Australia. To lodge a complaint, visit the ‘Complaints’ section of the Information Commissioner’s website, located at http://www.oaic.gov.au/privacy/privacy-complaints, to obtain the relevant complaint forms, or contact the Information Commissioner’s office:

Office of the Australian Information Commissioner (OAIC)

Address: GPO Box 5288, Sydney NSW 2001

Phone: 1300 363 992

Email: enquiries@oaic.gov.au

Website: www.oaic.gov.au

‍

This appendix applies to individuals subject to the UK or EU GDPR. The information in this appendix supplements the main Privacy Policy.

i. Complaints about our Privacy Policy or the way we handle your personal data should first be directed to us at thedetails set out above in section 17 (How do I make a complaint).

ii. We will investigate and attempt to resolve your complaint in accordance with the UK or EU GDPR (as applicable).If you are not satisfied with the outcome of this process, then you may contact the relevant regulator:

UK Data Subjects:

Information Commissioner’s Office (ICO)

Website: https://ico.org.uk/make-a-complaint/

Phone: 0303 123 1113

Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK95AF

EU Data Subjects:

Contact your national Data Protection Authority (DPA) in the EU member state where you live/work,or where the organisation that concerns you is based. or where the alleged violation occurred.

You can find your country's DPA at:https://edpb.europa.eu/about-edpb/about-edpb/members_en.

‍

This appendix applies to individuals subject to U.S. privacy laws. The information in this appendix supplements themain Privacy Policy.

i. Your rights and our obligations may vary depending on your state of residence. For state-specific information, please contact your state's Attorney General's office or consumer protection agency.

i. This section supplements our Privacy Policy and provides information to California residents in relation to howAskable handles their personal data and individual rights requests.

ii. For the purposes of this section, the term ‘personal data’ has the same meaning as the term “personalinformation” in the California Consumer Privacy Act of 2018 (CCPA) as amended by the California Privacy RightsAct of 2020 (CPRA). It does not include information exempted from the scope of the CCPA.

iii. Collection, use and disclosure of personal data

‍The categories of personal data (including sensitive personal information) that Askable has collected aboutCalifornian individuals in the preceding 12 months, as well as the source of that data, business purpose forcollection, are set out in our Privacy Policy.

iv. The types of third parties that Askable shares or discloses personal data to are set in the Data Sharing andTransfers section.

v. Selling or sharing of personal data

1. ‍‍Askable may sell personal data of Participants that is collected as part of the Askable Industry Stream tothird party entities, subject to your consent prior to collection. See further details in section 7.2(c)(Participants).
2. If Askable uses third party cookies for analytics, personalisation of Askable’s services and platform, andAskable’s own marketing purposes, this may also be considered a sale of personal data or a share ofpersonal data for cross-context behavioural advertising under US laws, including the CCPA.
3. We do not knowingly sell or share personal data of minors under 16.
4. If you wish to opt-out of the sale or sharing of your personal data, please email us at privacy@askable.com

‍

vi. Individual rights

1. Individual rights, including CCPA rights, are included in the Individual Rights section. This section details howyou can submit an individual rights request and what information you must provide to Askable to process yourrequest.