Privacy Notice

Askable is a market research facilitation platform that operates globally. In this Privacy Policy, ‘Askable’, ‘we’, ‘us’, ‘our’, ‘ours’, refers to Askable Pty Ltd (ACN 621 754 096), Askable Limited (Company Number 14417002) and Askable Inc.

Askable is committed to ensuring the fair and appropriate handling of your personal data.

This Privacy Policy explains how we collect, use, store and disclose your personal data (also known as ‘personal information’), whether you interact with us or use:

• our website located at askable.com; or
• our online research platform, located at my.askable.com and app.askable.com ; or
• our mobile app, available on the Apple App store or Google Play store.

(together, the Platforms). 

Askable does not make decisions on insurability or creditworthiness, and the Platforms and services are not for the US Fair Credit Reporting Act (FCRA) purposes.

In this Privacy Policy, we use the terms: 

1. ‘Customer’, referring to corporate clients conducting research, interviews and studies (including ad-hoc customers, subscription customers or Askable partners); 
2. research ‘Participant’, referring to individuals who participate in research studies;  
3. certified ‘Researcher’, referring to individuals who assist with research studies; 
4. ’Supplier’, referring to individuals providing goods and services to Askable; 
5. ‘Applicant’, referring to individuals who apply for employment or other engagement with us; 
6. an ‘Event Attendee’, referring to individuals who register and attend an event we host; and
7. ‘Visitor’, referring to anyone browsing on our website, or enquiring about our functions or activities via electronic means. 

In some circumstances, you may belong to more than one of these groups, and multiple sections of this Privacy Policy will then apply to you.

Askable applies applicable data protection laws of the jurisdictions in which we are operating. Depending on where you are located, additional terms in the appendices may also apply to you. 

Data protection laws guide how we collect, use, store and disclose your personal data. Importantly, we:

• are transparent about our personal data handling practices;
• limit our collection of personal data to that which is necessary for our functions;
• understand our platform’s purposes, and restrict our use and disclosure of personal data in that regard; and
• take reasonable steps to keep the personal data we have secure.

We will update this Privacy Policy from time to time.  The current version will always be available on our website at https://www.askable.com/legal/privacy-policy. 

At Askable, we use the term ‘Privacy Notice’ as set out in the UK General Data Protection Regulation (UK GDPR) interchangeably with the term ‘Privacy Policy’ as set out in the Australian Privacy Act 1988. 

Privacy Collection Notices for Participant, Customer and Researcher account registration is set out below.

The types of personal data we collect and how we use it depend on your relationship with us. This includes whether you are a Customer, a Participant, Researcher, Visitor, or Event Attendee.

Askable as data controller: As a data controller (or Joint Controller between Askable entities) we are responsible for determining why and how we process personal data. We only collect and process personal data that is necessary for our functions and activities, as set out under this Privacy Policy. Askable acts as a data controller when it collects personal information directly from you, including when:

• you interact with our Platforms, including registering your account, visiting our social media channels, enquiring about our services, completing any online submission forms, participating in any marketing campaigns, participating in any research studies as a Participant (including Industry Stream studies), or responding to an offer to participate in research studies; 
• you apply for a job with us, including engaging in interviews (via any method) and contract negotiation in our employment and engagement process; 
• you submit a rights request or a privacy complaint; 
• you interact with us in person, by email, by phone, by enquiry or feedback form outside of our Platforms; 
• any other means when you provide us with your personal data; or 
• you register for or attend an event organised by Askable.

We may also need to collect personal data about you from third parties from time to time where it is necessary for us to do so and it is unreasonable or impractical to collect directly from you, where you have consented to us doing so, or where we are otherwise required to or authorised to by law.  Those third parties include: 

• if you are a Customer or Supplier, publicly available records such as company registration databases (in Australia: the Australian Securities Investment Commission, and Australian Business Register);
• if you are a Visitor, technology service providers and social media platforms; and
• if you are an Applicant, referees when they provide references, academic institutions or training and certification providers, providers of licence and background-checking services, recruiters and other service providers who assist in the engagement process, and other publicly available sources such as social media platforms. 

Askable as data processor for Customers: As a data processor, when we process personal data we are doing so purely on the instruction of the Customer (as data controller), unless otherwise stated in this Privacy Policy. It is important that you consider how your personal data may be handled by Customers by reading their privacy policies and any collection notices associated with their studies. Askable acts as a data processor when we collect and process your personal data on behalf of our Customers:

• to facilitate the recruitment of participants for research studies opportunities; 
• to provide our services and platform for the completion of research projects; and 
• to facilitate the use of our Platforms, including associated tools and services.

Where we seek personal data from you or someone on your behalf, we only collect: 

• Non-sensitive data, if it is reasonably necessary for the Platforms and services we provide; and 
• Sensitive data, if it is reasonably necessary for or directly related to the Platforms and service we provide and you have consented to its collection (which may be implied in the circumstances), or its collection is permitted or authorised by law. 

If you provide us with personal data about someone else, you must ensure that you are authorised to disclose that information to us and that, without us taking any further steps required by applicable data protection laws, we may collect, store, use and disclose such information for the purposes described in this Privacy Policy.  Where we request you to do so, you must assist us with any requests by the individual to access or update the personal data you have collected from them and provided to us.

Personal data is information that relates to an identified or identifiable individual.  The types of personal data we collect and process as a data controller depends on our relationship with you, and we limit the information we collect to what is reasonably necessary for one or more of our functions or activities.  Generally, we will collect your name, commentary or opinion about you, and other information relevant to providing you with the information, goods and services (as applicable) you or someone on your behalf is seeking. 

Personal data we collect from you includes:

• Analytics data - We collect analytics and cookie data collected from your use of the Platforms (including your IP address and other unique ID numbers). We collect this data from Visitors, Customers, and Participants. You may choose to enable or disable information you share with us via the website in your browser or device settings.  Disabling the sharing of some information may affect your ability to use certain features of the website, and your user experience generally; 
• Enquiries and chat data - When you contact us or use our chat function, we collect personal data provided by you during the enquiry or communication; 
• Event Attendee data - When you register and attend an Askable event, we collect your name, contact details, dietary requirements and accessibility requirements (where applicable).
• Customer contact data - As our Customers are generally companies, personal data related to our Customers is generally limited to details of a company’s nominated contact person; 
• Participant registration data - We collect your name, contact details, and payment details; 
• Researcher registration data - We collect you name and contact details; 
• Participant profile data - We collect personal data to build Participant profiles (including your locational attributes and demographic information, and information related to your interactions with us on the Platforms i.e. responses to research studies which form part of your profile history) and set Participant preferences (including for marketing and communications preferences).  We also collect any personal information you voluntarily provide during participation in a study, which may include sensitive information about your race or ethnicity, health, hobbies, religious or political beliefs, sexual practices and orientation, political opinions, trade union membership, and criminal record.  We record your responses via video and audio recordings, transcripts, and text collection.
• Supplier data – We collect the contact details, business name and registration number (for sole traders and partnerships), bank account details (for payment of invoices), and information about your role.
• Applicant data –Depending on your potential or actual position with us, we collect your personal data contained within an application and CV/resume, employment history, personal data derived from a reference, personal data derived from an interview, personal data derived through testing (including psychometric or aptitude testing, as applicable), licences and other certificates and qualifications, and information included in a passport, birth certificate, visa or other documentation demonstrating your right to work for us.
• Contact data - We collect contact data about Clients, Researchers and Participants;
• Request for access or correction data - We collect your contact details and personal data sufficient to verify your identity (such as a certified photo ID).

Further information about the personal data we collect, how we collect it, and why we collect it is set out in the sections below.

We support your ability to make decisions about the personal data you provide to us, however if you choose notto provide us with the information requested, or it’s incomplete or inaccurate, we may not be able to provide youwith the information, goods, and services you are seeking.

Askable uses personal data of individuals for the following purposes and under the lawful basis set out below.Askable will not use personal data not related to its services or functions.

Askable may use or disclose personal data for secondary purposes where it would be reasonable to expect us todo so, and that secondary purpose is related (or directly related in the case of sensitive data) to the primarypurpose set out above (or below in relation to specific categories of individuals).

Askable uses personal data of Platform Users for the following purposes and under the lawful basis set out below. Askable will not use personal data not related to its services or functions.

Visiting our website

When visiting our websites, Askable collects data about your navigation of the website to help us monitor and improve our platform and your user experience.

The data collected and processed when you visit our website includes your:

• IP Address
• Browser version
• Pages visited
• Time and date of your visit
• Time spent on pages
• Cookie data
• Approximate location

We generally collect this information through the use of cookies. Refer to our Cookie Notice for more information about our use of cookies.

When enquiring or chatting with us about our services

• ‍‍When you contact us or use our chat function, we collect your name, email, phone number and enquirydetails. We use your personal data to communicate with you and provide you with information about ourservices.
• When you use our chat feature, you may interact with our AI Chatbot. The AI Chatbot will instantlyrespond to your questions by referring and linking to Askable help pages. Your chat history will not beretained by an AI system or used to train an AI model.

Responding to an offer

If you choose to respond to an offer that we make on our website or social media pages (such as Meta), we will collect some of your personal data, including your email, approximate location, the landing page ID, and thetime you visited the page. We may include small graphic images or other web programming code, called webbeacons (also known as “pixel tags”, “web bugs” or “clear GIFs”), on our Services and in our messages. The webbeacons are minute graphics with a unique identifier. They are used to track the online movements of Site users.Web beacons help us better manage content on the Services by informing us what content is effective,monitoring how users navigate the Services, counting users of the Services, and counting how many e-mails sentby us were actually opened.

When you submit a rights request or a privacy complaint

When you submit a rights request or submit a privacy complaint, Askable collects your name, contact information and details regarding your request or concern, as well as processing data that validates your identity. We will always try to use data we already process for this purpose, but occasionally we may need tocollect new data, depending on the sensitivity of the data. We use this data to process your request or investigateyour concern and to communicate with you.

Askable uses research Participant personal data for the following purposes and under the lawful bases set out below. Askable will not use personal data not related to its services or functions.

During participant registration

When you register an account with Askable as a Participant, we collect a range of personal data to set upyour account, including:

• Email
• Password (Hashed)
• Name
• Gender
• Town/suburb location
• Date of birth
• Occupation status
• Mobile phone number
• Incentive payment preference
• Email address where incentive payment will be sent

You may also choose to sign up using Google. If you choose to do this, Google will provide us with information from your social media profile, such as your name, email address, language preference and profile picture.

If a Participant breaches the Askable Terms and Conditions when using the platform and services, theymay become ineligible to take part in research projects or studies. Should this occur, the status will benoted on the Participant’s account record.

When adding profile details to your account

You can optionally provide us with additional profile details in your Participant account. We collect these details to build your Participant profile and set your preferences (e.g., the types of research opportunitiesyou would like to be considered for).

You can provide the following additional personal data to build your Participant profile:

• Family status
• Level of education
• Occupation industry
• Job title
• Employment type
• Details from your LinkedIn public profile
• Voice clip (audio recording)
• Reading level
• Preferences for research opportunities
• Participants are able to connect to LinkedIn via the online Participant account. Where requested by you, LinkedIn will provide Askable with details about you that are included in your LinkedIn profile.

When applying for Customer research study opportunities

When you apply for a research opportunity, you will be asked to answer a few screening questions. Your answers are used to narrow down the Participant pool from which to select people to Participate in a particular study.

The Customer is the data controller of this data, and Askable only processes it on the Customer’s behalf and only in line with the Customer’s instructions. The answers are collected and held by Askable to match you with the research opportunity our Customer is seeking Participants for. Where a Customer chooses to auto-approve Participants, you may be automatically selected for the research study where your responses to screening questions meet certain criteria.

Screening questions may include details about your:

• Family and children
• Language
• Occupation
• Devices
• Household income
• Preferences
• Opinions
• Shopping behaviours
• Health

For quality assurance, it is important that all screening questions are answered by you to the greatest degree of accuracy (i.e., that you abide by our Terms by answering honestly and do not change youra nswers in order to appear to be a best-fit for the research opportunity). To facilitate this, we record your device’s screen when you are completing applications and answering the screening questions for each research opportunity.

Data shared with Askable clients: Askable Customers will be provided with some information about youwhen you apply for a research opportunity with them. Our Customers do not have access to all of yourinformation held by Askable.

Customers are provided with your details that are relevant to their research study such as your name,gender, age, email, phone, suburb or country, LinkedIn profile (if provided), voice clip (if provided),reading level, occupation status and industry, job title, and family status. As the data controller, they alsohave access to your responses to screening questions and your availability to participate in a researchopportunity.

Before our Customers can select Participants to complete their research study, they must request and beapproved to hold an account. Only then are our Customers provided with your information for thepurpose of selecting Participants and conducting their research study.

It is important that you consider how your personal data may be handled by Customers by reading anycollection/privacy notices associated with their studies.

When participating in Customer research studies‍

To participate in and complete research studies, you will generally be required to provide details aboutyourself, including your opinions and preferences.

The exact personal data that you are required to provide is dependent on the study being conducted andis determined by the Customer (or our Researcher conducting the research on behalf of the Customer).The Customer is the controller of this data, and Askable only processes it on the Customer’s behalf andonly in line with the Customer’s instructions.

Use of Askable Sessions: When clients choose to use the Askable Sessions (formerly Askable Live) tool tofacilitate a research study, Askable will process and store your personal data during the study on behalf of the client. Askable Sessions is a web conferencing tool provided by Askable that facilitates and recordsvirtual interviews. Askable records and stores the Askable Sessions recordings (including audio and visualrecordings) and transcripts of sessions, and makes them available to the Customer conducting theresearch study.

Askable will not provide your personal data collected during studies facilitated via the Askable Sessionstool to any other entity other than the Customer. Askable does not have control, however, of how theCustomer conducting the study will use and disclose your personal data. It is important that you considerthis prior to participating in research studies.

AI Moderator: Our Customers may choose to use an AI Moderated feature within Askable Sessions. AIModerated is a feature where an AI moderator facilitates a research interview and asks questions to aParticipant. We will also inform you prior to your research interview, where the interview will beconducted by an AI moderator.

Third party tools: Some Customers may choose to use tools provided by third parties when completingstudies (such as Survey Monkey or Validity). In this scenario, Askable is not involved in the collection orprocessing of personal data during this part of a study.

When participating in Industry Stream studies

‍Industry Stream studies are conducted directly by Askable.

To participate in and complete Industry Stream research studies, you will generally be required to provide details about yourself, including your opinions and preferences. The exact personal data that you are required to provide is dependent on the Industry Stream study being conducted.

During your participation in an Industry Streams study, Askable records your responses to the study via video and audio recordings, transcripts, and text collection (Records). These Records will include personal data you choose to share, and may include sensitive information. The Records are:

• aggregated with other Participant responses, reviewed, analysed, summarised, and otherwise made available to Askable Customers for their internal business and research use. Customers have agreed to not publish identifiable personal data publicly or distribute your personal data outside of their authorised internal teams, however Askable cannot control Customer behaviour and is not responsible for a Customer’s breach of its agreement; and
• sold to third parties for inclusion in their own data sets and for use for their own purposes. We will take reasonable measures (including contractual arrangements) to require that any third party purchasing your personal data will hold that data securely.

It is important that you consider this prior to participating in Industry Stream studies. We will seek your consent at the time you register to participate in Industry Stream studies. If you do not consent tothe sale of the Records, or to the disclosure of the Records to Askable Customers, then you cannot participate in an Industry Stream study.

Your responses to an Askable Industry Stream study (including video and audio recordings) may be reviewed, summarised, aggregated, and analysed by AI tools made available via the Platforms, and used to train or validate those AI tools and the underlying AI model(s). We take reasonable steps to ensure our employees are trained to monitor and review the AI tools to confirm the processing and disclosure of any personal data by these AI tools is appropriate and complies with this Privacy Policy.

Askable uses the personal data provided by you during participation in an Industry Stream study, and anyoutputs produced by AI tools using your personal data, for internal operations needs including productimprovement, quality assurance, technical diagnostics, customer support, and security compliance andaudit activities.

When we process data to send your incentive payment

‍The personal data we collect and process in order to pay your incentive to you includes:

• The incentive amount
• Your preferred payment currency
• Payment preferences (PayPal payment or GiftPay)
• Your email address
• The status of the incentive payment (when you can expect to receive the payment)

When we communicate with you

‍We may send you service emails or messages, including to notify you of potential research opportunities, provide communication from our clients, or remind you of your upcoming study sessions. We collect and process your personal data when we communicate with you, including:

• Name
• Email
• Phone number

Askable uses personal data of current and prospective Customers for the following purposes and under thelawful bases set out below. Askable will not use personal data not related to its services or functions.

Marketing to prospective Customers

• We use a prospective Customer’s contact email, name, phone number, sector and company details tosend you marketing communications.
• You can ask us to stop sending you marketing messages at any time by following the opt-out links on anymarketing message sent to you or by contacting us at any time. Where you opt out of receiving thesemarketing messages, this will not apply to personal data provided to us as a result of a purchase, productor service experience or other transactions.

During Customer registration

Customer users can register an account with Askable. During registration, personal data collected fromCustomer platform users is generally limited to details of the Customer’s nominated contact person, including name, email and phone number. We process this data on behalf of our Customer (as data controller) to set you up with an Askable account.

When purchasing credits or subscriptions‍

• When Customers purchase credits or subscriptions with Askable, they will generally provide payment information of a company, as opposed to an individual. However, there may be limited circumstanceswhere personal payment information is provided and processed by Askable for the purpose ofpurchasing credits or subscriptions (such as name on card, card type, and amount purchased).
• We do not knowingly receive payment information associated with a person; rather, we ask ourCustomers to use their approved corporate payment facilities.

‍

Facilitating Askable Sessions

‍

• ‍‍Askable provides a virtual video conferencing tool that works in conjunction with other Askable products.The tool is referred to as Askable Sessions. Customers can use the tool to conduct virtual research studies with their selected Participants.
• Through Askable Sessions, we collect audio, visual recording, and transcriptions of the research session and the individuals involved in the research session. The Customer is the controller of this data, and Askable only processes it on the Customer’s behalf and only in line with the Customer’s instructions.

Askable uses Researcher personal data for the following purposes and under the lawful bases set out below. Askable will not use personal data not related to its services or functions.

During Researcher registration

When you register an account with Askable as a Researcher, we collect a range of personal data to set upyour account, including:

• Email
• Password (Hashed)
• Name
• Mobile phone number
• Video recording of your response to a series of questions
• Details of your qualifications and experience as a certified researcher (such as the number of yearsof experience you have, or details about your skills)

‍

You may also choose to sign up using Google. If you choose to do this, Google will provide us with information from your social media profile, such as your name, email address, language preference, and profile picture.

Askable Customers will be provided with your name, and details of your experience (including your previous employment) and qualifications as a certified researcher when you accept an offer to undertake a research project.

Facilitating Askable Sessions

‍Researchers must use the Askable Session tool to conduct virtual research studies with selected participants.Through the Askable Sessions tool, Askable collects audio, visual recording, and transcriptions of the researchsession and the individuals involved in the research session. The Customer is the controller of this data, and Askable only processes it on the Customer’s behalf and only in line with the Customer’s instructions.

When you get paid

‍We pay you when you complete research projects on behalf of our Customers. To receive payment, you will berequired to send us an invoice. The personal data we collect and process in order to pay you includes:

• The payment amount
• Your preferred payment currency
• Payment method and details
• The status of the payment

When we communicate with you‍

We may contact you via a number of communication channels (such as email, phone or message). Wemay send you service emails and other communications including to notify you of a potential researchproject that may suit you, provide communications from our Customers, or remind you of an upcomingstudy session.

We collect and process your personal data when we communicate with you, including:

• Email
• Phone number
• Details of the communication or message

‍

Askable uses personal data of our Event Attendees for the following purposes and under the lawful bases set out below. Askable will not use personal data not related to its services or functions.

Attending an event

‍(When you register and attend an Askable event, we collect personal data about you to process your registration, facilitate and manage the event, share photos, and follow up with you after the event. The personal data that we collect may include:

• Name
• Company and role
• Email
• Phone number
• Dietary requirements
• Accessibility requirements
• Photo
• Event attendance details
• Clothing size, if we are providing swag

We generally disclose your personal data for the purposes for which it was collected. We may disclosepersonal data about you to:

• Our Customers: Where Participants choose to participate in research studies (or whereResearchers choose to complete research projects on behalf of our Customers), Askable sharesParticipant (or Researcher) personal data with Customers that have an account with us via thePlatform. In data protection terms, the Customer is the controller of this data, and Askable is actingas a processor on their behalf.That means that Askable does not control how personal data collected by our Customers (i.e.,during a research study) may be used or disclosed. Your personal data (including video and voicerecordings) may be published, reproduced or stored by our Customers. It is important that youconsider how your personal data may be handled by Customers by reading their privacy policiesand any collection notices associated with their studies.
• Sharing between Askable entities: We share your personal data between Askable entities, including Askable Pty Ltd (Australia), Askable Limited (UK), and Askable Inc. (US). Within Askable, we have an agreement that ensures your data is handled in accordance with applicable data protection laws.
• Our service providers: Askable uses external parties (i.e., service providers) to provide service sand functions on our behalf. For our service providers to provide these services, we may share personal data that relates to the services being provided, or they may collect the information on our behalf (including insurers, IT and technology service providers, recruitment providers and professional advisers).We take reasonable steps to ensure we have contractual arrangements in place with all service providers that include privacy, security and data breach reporting controls. We also take reasonable steps to ensure that service providers only process personal data for the purposes itwas provided to them, and not for any other purpose. A list of our service providers is available at https://trust.askable.com/subprocessors. In data protection terms, these are our processors or sub-processors.
• Government departments, agencies, and enforcement bodies: where required or authorisedby law.
• Third parties by consent: Askable will disclose your personal data to third parties to whom you have agreed we may disclose your personal data and where the personal data was collected from you (or from a third party on your behalf) for the purposes of passing it on to the third party.
• Sale of business: Askable may expand or reduce our business, and this may involve the sale and/or transfer of control of all or part of our business. Personal data, where it is relevant to any part of the business for sale and/or transfer, may be disclosed to a proposed new owner or newly controlling entity for their due diligence purposes, and upon completion of a sale or transfer, will be transferred to the new owner or newly controlling party to be used for the purposes for which it was collected.
• Marketing: We also use data for marketing purposes including retargeting/suppressing you from retargeting. The vendor we use for this is an independent controller, which means that Askable and the vendor determine their own data processing purposes and means of processing. Thisvendor is Taboola. Taboola collects and processes data via its pixel for ad targeting and analytics,only if you accept their cookie on our cookie banner. The types of personal data collected byTaboola are browser type, truncated IP address and click events. Their Privacy Notice isavailable here. There is a contract in place between Taboola and Askable.
• Other sharing: Askable will not otherwise sell or share your personal data with advertisers,sponsors, content providers or anyone else – unless:
  - we have your express permission, or
  - there is a lawful ability or requirement for us to do so, or
  - in the case of Participants who participate in Industry Stream studies, in which case yourpersonal data may be sold to third parties (see further information under section 7 above(Participants). Participants who do not consent to sale of their personal data cannotparticipate in Industry Stream studies.

A note about international transfers for UK and EEA individuals: Askable operates its platform and services globally, providing services to clients and participants from a number of countries. As such, we need to share information that we collect outside of the jurisdiction it was collected from. This may include transfers to jurisdictions where our Askable offices and third-party service providers are located, such as Australia, the United Kingdom, and the United States.

When transferring information outside of the United Kingdom or the European Union, Askable applies appropriate safeguards (i.e., we undertake transfer risk assessments and enter into agreements incorporating standard data protection clauses including EU Standard Contractual Clauses and UKInternational Data Transfer Addendum).

How we store your personal data‍

Askable will only store your personal data in electronic format, either on-site or in ‘the cloud’.

Askable uses a cloud storage service provider, MongoDB, to store personal data, including yourregistration data, purchase or payment data, communications data, profile data and data from studysessions including recorded video responses. This information is stored on AWS servers located inSydney, Australia.

Askable also uses other third-party service providers to store specific types of personal data (such aspayment processing data, email and communications data). The personal data stored by third partyproviders, relates to their functions and services. A full list of our service providers is available on request.

How we secure your personal data‍

At Askable, we securely manage and dispose of personal data, by implementing a range of data securitypractices, including (but not limited to):

• Data stored securely on a cloud database with strong automated security features
• Use of PCI-DSS compliant service providers for our payment solutions
• We engage external security advisors to conduct penetration testing of our systems
• Access to personal data is only provided to staff that require the information to undertake theirrole
• Data access controls within Askable, including multi factor authentication
• Encryption of data in transfer and at rest

Protection of personal data from unauthorised access and disclosure is a priority for us. Any concernsabout the security of personal data held by Askable should be reported to us without delay viasecurity@askable.com

How long we keep your personal data‍

We retain your personal data for differing periods, depending on the purpose for which it was collected.

We will destroy or de-identify personal data when our legal obligations to retain the information haveexpired and we no longer need the information for the purposes for which it was collected (or any secondary purpose where allowed at law). For the avoidance of doubt, we may reasonably consider that information is still required by us in order to recommence providing our goods and services.

Askable maintains a number of social media accounts (including LinkedIn, Facebook, Instagram andGoogle), for the purposes of:

• Pushing information about the Askable company and services
• Advertising research opportunities that Participants may be interested in;
• Recording and sharing reviews of Askable and pushing out information about our platform to those with an interest
• Directly messaging platform users (where our Participants or Customers have chosen to becontacted in this way);
• Signing up Participants and Customers to the Askable platform (i.e., via Google);
• Posting articles to inform, blog and attract new clients, and
• Advertising employment opportunities at Askable.

Social media platforms generally apply their own privacy policies to any personal data that is captured or shared while on their sites. As such, you may prefer to deal with us directly via askable.com, and not via socials, when sharing your personal data.

Askable is committed to ensuring the fair and appropriate handling of your personal data. We support yourability to exercise rights regarding your personal data held by us, as set out in the table below.

Askable handles rights requests directly, only for data that we are the controller of. To exercise your rights aboutdata that we collect on behalf of our Customers, you can contact that Customer directly. If you contact us toexercise rights about personal data that we process on behalf of the Customer (as a processor), then we arerequired to pass rights requests on to them.

Askable is committed to ensuring the fair and appropriate handling of your personal data. We support your ability to exercise rights regarding your personal data held by us, as set out in the table below.

Askable handles rights requests directly, only for data that we are the controller of. To exercise your rights about data that we collect on behalf of our clients, you can contact that client directly. If you contact us to exercise rights about personal data that we process on behalf of the client (as a processor), then we are required to pass rights requests on to them.

Askable will not discriminate against you because you exercised your individual rights set out above.

You can change and update your personal data in your Askable account such as, your name, date of birth oremail address, by logging on to your account with your username and password. You will then be able to updateyour details and personal data.

Please contact us to make a rights request – that is, to request access to your personal data held by us, request a correction of your personal data or to ask us to act in relation to your other rights set outabove.

For more information please visit our Data Subject Rights page.

If you have a concern or complaint about our personal data handling practices, please get in touch with us! You can contact us using our contact information.

Askable does not use your personal data in any automated processes to make decisions about you.

In some circumstances, our Customers (as data controllers) may choose to auto-approve Participants for theirresearch study, where responses to screening questions meet certain criteria. It is important that you considerhow your personal data may be handled by Customers by reading their privacy policies and any collectionnotices associated with their studies.

Askable further provides several AI features that are integrated into our platform and services set out below.These AI features assist our Customers to conduct, analyse and synthesis research – they do not make decisions about you.

• AI Moderated: A feature within the Askable Sessions tool where an AI moderator facilitates a research interview with a research participant. We will inform research participants prior to a research interview, where the interview will be conducted by an AI moderator.
• Automated continuous discovery: Live insights dashboard that leverages AI to summarise insights, trends and summaries from research interview transcripts.
• Ask AI: A tailored LLM designed for research, that can be used to summarise and analyse a research interview transcript.
• Askable Industry Streams: Where Askable collects and stores personal data from Participants, and this data can be reviewed and summarised by AI tools to create business insights for Customers (see section 7of this Policy).

If you have a question about our Privacy Policy or a concern or complaint about our personal data handling practices, please get in touch with us! You can contact us using our contact information set out below.

We will confirm receipt of your questions or complaint within 24 hours. In most cases, we will be able to assist you immediately, however, there are some circumstances where we may need additional time to respond to you (such as where additional details are needed to understand your concern or investigate the matter).

You also have the right to lodge a complaint with the data protection supervisory authority relevant toyou, as set out in the table above.

How to contact us

Please contact us at:

This appendix applies to individuals subject to Australian or New Zealand privacy laws. The information in this appendix supplements the main Privacy Policy.

There are no charges for requesting access to or the correction of your personal data, however we reserve our rights to charge you any reasonable administration fees associated with your request. We will notify you in advance of any applicable fees.

We may decline a request for access to personal data in circumstances prescribed by the Australian Privacy Act.If we decline a request for access, where reasonable, we will provide you our reasons and information about your ability to complain about such refusal.

If you believe the information we hold about you is incomplete, not up to date, or is inaccurate, please advise us as soon as practicable. We will take reasonable steps to correct the information if we agree that it is incomplete, out of date, or inaccurate. We will strive to process any request within 30 days.

Complaints about our Privacy Policy or the way we handle your personal data should first be directed to us at the details set out above in section 17 (How do I make a complaint).

We will investigate and attempt to resolve your complaint in accordance with the Australian Privacy Act. If you are not satisfied with the outcome of this process, then you may contact the Office of the InformationCommissioner, Australia. To lodge a complaint, visit the ‘Complaints’ section of the Information Commissioner’s website, located at http://www.oaic.gov.au/privacy/privacy-complaints, to obtain the relevant complaint forms, or contact the Information Commissioner’s office:

Office of the Australian Information Commissioner (OAIC)

Address: GPO Box 5288, Sydney NSW 2001

Phone: 1300 363 992

Email: enquiries@oaic.gov.au

Website: www.oaic.gov.au

‍

This appendix applies to individuals subject to the UK or EU GDPR. The information in this appendix supplements the main Privacy Policy.

Complaints about our Privacy Policy or the way we handle your personal data should first be directed to us at thedetails set out above in section 17 (How do I make a complaint).

We will investigate and attempt to resolve your complaint in accordance with the UK or EU GDPR (as applicable).If you are not satisfied with the outcome of this process, then you may contact the relevant regulator:

UK residents:

Information Commissioner’s Office (ICO)

Website: https://ico.org.uk/make-a-complaint/

Phone: 0303 123 1113

Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK95AF

EU residents:

Contact your national Data Protection Authority (DPA) in the EU member state where you live/work,or where the organisation that concerns you is based. or where the alleged violation occurred.

You can find your country's DPA at:https://edpb.europa.eu/about-edpb/about-edpb/members_en.

‍

This appendix applies to individuals subject to U.S. privacy laws. The information in this appendix supplements themain Privacy Policy.

Your rights and our obligations may vary depending on your state of residence. For state-specific information, please contact your state's Attorney General's office or consumer protection agency.

This section supplements our Privacy Policy and provides information to California residents in relation to howAskable handles their personal data and individual rights requests.

For the purposes of this section, the term ‘personal data’ has the same meaning as the term “personalinformation” in the California Consumer Privacy Act of 2018 (CCPA) as amended by the California Privacy RightsAct of 2020 (CPRA). It does not include information exempted from the scope of the CCPA.

Collection, use and disclosure of personal data

‍The categories of personal data (including sensitive personal information) that Askable has collected aboutCalifornian individuals in the preceding 12 months, as well as the source of that data, business purpose forcollection, are set out in our Privacy Policy.

The types of third parties that Askable shares or discloses personal data to are set in the Data Sharing andTransfers section.

Selling or sharing of personal data

• ‍‍Askable may sell personal data of Participants that is collected as part of the Askable Industry Stream tothird party entities, subject to your consent prior to collection. See further details in section 7.2(c)(Participants).
• If Askable uses third party cookies for analytics, personalisation of Askable’s services and platform, andAskable’s own marketing purposes, this may also be considered a sale of personal data or a share ofpersonal data for cross-context behavioural advertising under US laws, including the CCPA.
• We do not knowingly sell or share personal data of minors under 16.
• If you wish to opt-out of the sale or sharing of your personal data, please email us at privacy@askable.com.2.6

‍

Individual rights

Individual rights, including CCPA rights, are included in the Individual Rights section. This section detailshow you can submit an individual rights request and what information you must provide to Askable toprocess your request.