Privacy Policy

HumanWox Limited (“HumanWox”, “we”, “us”) is the data controller for personal data collected through humanwox.com and the data processor for personal data you submit to the HumanWox platform under a customer agreement.

We collect three categories of data:

• Account data, name, work email, organisation, role.
• Operational data. AI system records, risks, evidence, and review actions you enter into the platform.
• Telemetry, product usage events, IP, device, and approximate location used to operate and secure the service.

We obtain limited business contact details, including name, job title, employer and work email address, from third-party business contact databases and from publicly accessible professional sources. We use these details to contact individuals about HumanWox where their role indicates our service is relevant to their work.

We rely on legitimate interests as our lawful basis for this processing, and we have carried out and documented an assessment concluding that this processing does not override the rights and freedoms of the people concerned. Where a recipient is a sole trader or an unincorporated partnership, we obtain consent before sending marketing communications.

We identify the source of the data in our first communication. You may object to this processing at any time, and we will stop contacting you and retain only the minimum record required to honour that objection. Contact privacy@humanwox.com.

We use personal data to deliver the service, enforce security, satisfy legal and regulatory obligations, communicate operational notices, and improve the platform. We do not sell personal data and we do not use customer operational data to train third-party AI models.

We rely on contract performance for service delivery, legitimate interests for security, product improvement and business-to-business prospecting, legal obligation for record-keeping and audit, and consent for optional marketing communications where consent is required.

We share data with vetted sub-processors that provide infrastructure, identity, email, observability, and analytics. A current list and a notification mechanism for changes is available on request from privacy@humanwox.com.

Where data leaves the UK or EEA, we rely on UK IDTA / EU Standard Contractual Clauses and apply supplementary measures including encryption in transit and at rest.

We retain account data for the duration of the contract plus the period required for legal, tax, and audit purposes. Operational data is retained according to your workspace retention policy.

You may request access, rectification, erasure, restriction, portability, or objection in respect of your personal data. Contact privacy@humanwox.com. You may also lodge a complaint with your local supervisory authority.

Data protection contact: privacy@humanwox.com

HumanWox Limited is registered in England and Wales, company number 16296630.

Company number

16296630

Registered office

124 City Road
London
EC1V 2NX

ICO reference

ZB897770

You may request access, rectification, erasure, restriction, portability or objection in respect of your personal data by contacting privacy@humanwox.com. You may also lodge a complaint with the Information Commissioner's Office at ico.org.uk or with your local supervisory authority.