Privacy policy
Last updated 6 October 2026
We collect only what you give us through our forms, use it to respond to you and run our brokerage, never sell it, and delete it when it's no longer needed. You can ask us to see, correct or delete it at any time.
Who we are
Databounties ("Databounties", "we", "us") runs databounties.com, which connects companies that hold valuable data with AI labs and researchers that want to license it. For the personal information described in this policy, we are the data controller.
What we collect
- Enquiry and request forms: name, work email, company or organisation, role, phone number (optional), and what you tell us about the data you hold or need.
- Qualification check: your answers (sector, systems, history and company size) and the result shown to you, when you submit an enquiry.
- Technical information: the page you came from and your browser type, recorded with form submissions to help prevent spam and abuse.
- Correspondence: emails, call notes and meeting details when you work with us.
This policy covers personal information about the people who contact us. Company datasets shared later in the process are covered by separate agreements and our data handling & security policy.
How we use it, and our lawful basis
- To respond to your enquiry and arrange calls (legitimate interests and your consent).
- To assess whether we can help you sell or buy data, and to prepare proposals (legitimate interests).
- To enter into and perform agreements with you (contract).
- To meet legal, tax and accounting obligations (legal obligation).
- To protect our site from spam and abuse (legitimate interests).
We don't sell the personal information you give us through this website, and we don't use it for automated decisions with legal or similarly significant effects.
Who we share it with
- Service providers who host and run our systems under contract: Google Firebase (data storage), Vercel (website hosting), Resend (email) and Cal.com (scheduling).
- Counterparties, only with your agreement. For example, we introduce a seller to a buyer only once both sides have agreed and signed an NDA.
- Professional advisers and authorities where the law requires it.
International transfers
Some of our providers process data outside the UK and EEA, including in the United States. Where they do, we rely on appropriate safeguards such as the UK International Data Transfer Addendum, EU Standard Contractual Clauses, or an adequacy decision.
How long we keep it
Enquiries that don't lead to a business relationship are deleted within 24 months of our last contact. Records of agreements and transactions are kept for as long as the law requires, typically six years.
Your rights
Under UK and EU GDPR you have the right to access, correct or delete your personal information, to restrict or object to how we use it, to data portability, and to withdraw consent at any time. To exercise any of these rights, email privacy@databounties.com. We'll reply within one month.
If you're unhappy with how we handle your information, you can complain to the UK Information Commissioner's Office (ico.org.uk) or to your local data protection authority.
Security
Form submissions are stored in access-controlled cloud systems and can't be read from the public website. Only authorised team members can access them.
Changes
We'll post any changes to this policy here and update the date at the top.
Contact
Privacy questions: privacy@databounties.com