Data handling & security

Before anything is shared

• No company data is collected through this website. The qualification check only asks general questions.
• We sign a mutual NDA with you before discussing what your data contains in any detail.
• Together we confirm that you own the data, or have the right to license it, and check for client contracts or regulations that restrict sharing.

Export and transfer

• You decide exactly which systems, fields and date ranges are in scope.
• Data moves only through encrypted channels and is encrypted at rest.
• Access is limited to the named people working on your deal and is logged.

De-identification

Before any buyer sees a sample or dataset, we remove or anonymise personal data such as names, contact details, account and payment identifiers and free-text references to individuals. We also remove commercially sensitive information you flag, such as client names or pricing. Where data relates to individuals, we assess the residual risk of re-identification and apply further techniques (aggregation, generalisation, pseudonymisation) where needed.

Buyers

• Buyers sign an NDA before seeing any sample, and every buyer must be approved by you.
• Licences restrict use to the agreed purpose (for example AI training or evaluation) and prohibit re-identification and resale.
• You choose exclusive or non-exclusive terms, the licence length and any restrictions on use.

Retention and deletion

We keep working copies only for as long as a deal needs them. We delete them once delivery is confirmed, or if you withdraw before a sale, and confirm the deletion in writing on request.

Personal data and GDPR

Where any personal data is processed during preparation, we act under a data processing agreement with you, in line with UK and EU GDPR. You remain the controller of your data.

Reporting a concern

To report a security concern, email privacy@databounties.com.