Customers When we refer to a Customer in this policy, we mean any organisation, or individual acting on behalf of that organisation, that uses the Attest Service to create and distribute surveys to survey respondents. The information below will be collected from Customers. What information does Attest collect? The categories of information that we collect, store and/or process are set out below with some examples of what’s included: Contact → your name, email address, phone number, job title, etc. Financial → your bank details or billing information. If you make a credit card payment to Attest, these payments will be processed via a third party payment provider. They will host your personal data , and your details will be processed in accordance with their own privacy policy (see Stripe). Although this does not constitute personal data, the only information that they share with Attest will be the final four digits of your credit card number which we use for reporting purposes. Account → username, password, feedback etc. Usage → information about how you use our website, products and the Attest Service. Survey → your survey questions and responses received from survey respondents. Technical → IP address, login data, browser type and other technology on the devices you use to access the platform. We use cookies and other tracking technologies in order to collect this information, you can find out more about this here. How does Attest collect my information? Direct interactions → We’ll collect your contact and financial information when you sign up for the Attest Service or submit your information to us via an online form or request to contact you. Automated technology or analytics → As you use our website or the Attest Service, we’ll automatically collect technical and usage information by using cookies and similar technologies. Third parties or publicly available sources → We use third parties who provide us with information from Companies House or other publicly available sources to enable us to contact you. We may also collect information from third parties who provide a service to us. Find out more about our service providers below. How does Attest use my information and why? Why do we need your data?Type of informationLegal basisTo create and manage your account with us.ContactFinancialAccountUsageWe need to process your personal data in this way to put in place an agreement with you, provide you with access to the Attest Service and provide ongoing account services and benefits to you such as access to our Customer Team. We’ll also use this information to provide you with important service or legal updates.To enable additional account users on company accounts.ContactAccountWe need to process your personal data in this way to provide you with access to the Attest Service and provide ongoing account services and benefits to you such as access to our Customer Team.To determine which communications to send you and send you those communications, including information about products or services we think may be of interest to you.ContactUsageTechnicalAccountWe’ll send you certain transactional emails, for example, confirmation of your account being set up and legal updates, such as when we make updates to this privacy policy.We’ll also send you communications to promote our services and provide product updates. We’ll always give you the right to opt-out of these communications if you’d prefer not to receive them. To gather information about how you and other users are interacting with the Attest Service.UsageTechnicalWe process your data for this reason because we have a legitimate interest to continuously assess and improve the Attest Service for all customers. We also use this information to provide you with relevant and interactive guidance when you use the Attest Service.To help us manage and promote our business, e.g. in relation to our financial performance, customer base, product range or other efficiency measures.UsageTechnicalFor our legitimate interests, i.e. to promote our business and be as operationally efficient as we can so we can deliver the best service to our customers. Where such data is collected by cookies, you will be able to opt in or out of non-essential cookies. Survey Respondents What information does Attest collect? We collect very limited information about you, which is set out below. Customers are prevented from requesting that you disclose any personal data in your survey responses under the terms they agree to in order to use the Attest Service (for example, you should never be asked to input your name or date of birth into a survey response). If you are ever asked for this type of information, please contact us immediately at [email protected]. As you have not signed up to Attest or provided us with any information directly, you might be wondering how you receive surveys via the Attest Service.In order to provide the Attest Service: we partner with a number of trusted panels (see Service Providers) who connect you to the surveys that Customers have created on the platform (“Attest Audience Surveys”). Those partners will hold your personal details and you should contact them if you’d like to understand more about the information they hold; and we provide Customers with the functionality to directly invite individuals to take part in surveys, which are accessed through a URL link “Own Audience Surveys”. The Customer sending the Own Audience Survey to you will hold your personal details and you should contact them if you’d like to understand more about the information they hold, and why they’ve asked you to take part in a survey. If you take part in text-based surveys, we will receive the following categories of information from you. The categories of information that we collect, store and/or process are: Usage → information about how you use our website and the Attest Service. Survey → your survey responses. Technical → browser type and other technology on the devices you use to access the platform. We use cookies and other tracking technologies in order to collect this information, you can find out more about this here. Unique ID → Customers who use Own Audience Surveys may choose to upload a unique identifier to the platform. This identifier allows Customers to identify you and link your responses to you. Attest cannot use this identifier to identify you, only our Customers can. Demographic data: → Customers who use Own Audience Surveys may choose to upload demographic data about you to the platform. This allows Customers to analyse Own Audience responses based on factors like age, gender, or location. This information is collected by Customers outside of the platform, and whilst our Customers may be able to attribute this data to an individual (for example where they combine it with a unique identifier), Attest cannot use this data to identify you. → For Attest Audience Surveys, we may share demographic data with customers. This information is collected from you by our partners and shared with us in a way that does not allow us or our Customers to identify you. If you take part in Video Surveys we will receive the following categories of information from you. The categories of information that we receive, store and/or process are: Usage → information about how you use our website and the Attest Service. Video Survey → your video survey responses (including audio) which you provide to us on a no-name basis. Video Respondent ID → You are identified to us solely by a unique Respondent ID which is provided to us by our video panel provider. The video panel provider may also collect personal data about you, which they do not share with us. Technical → browser type and other technology on the devices you use to access the platform. We use cookies and other tracking technologies in order to collect this information, you can find out more about this here. How does Attest collect my information? For text-based surveys, we use automated technology or analytics → As you respond to text-based surveys (hosted on the Attest Service), we’ll automatically collect technical and usage information by using cookies and similar technologies. We’ve set out some more information about this below. For video-based surveys → As you respond to video-based surveys (hosted on the Attest Service), we’ll collect video data (including audio) and we’ll also automatically collect technical and usage information by using cookies and similar technologies. We’ve set out some more information about this below. How does Attest use my information and why? Why do we need your data?Type of informationLegal basisTo provide the Attest Service. UsageSurvey TechnicalUnique IDVideo Respondent IDDemographic dataWe process this information for the legitimate interest of Attest for the running of our business. We collect the above information (Usage, Survey and Technical) in order to provide the Attest Service. We collect your survey responses and associated data (for example, demographic data) so these can be shared with Customers to allow them to complete and analyse their surveys. We’ll also store certain information regarding how you use the Attest Service for our legitimate interests; so we can continuously improve our services and deliver the best service to our customers. We’ll use your technical information in order to provide the Attest Service, for example, we might use information relating to your device so Customers can send surveys out to users of certain devices. In order to identify which responses belong to the same person.UsageSurvey TechnicalVideo Respondent IDWe have a legitimate interest to provide the Attest Service. This information is necessary so that we can monitor surveys to ensure that the same respondent is not completing the same survey more than once and in order to provide useful survey insights to our Customers. We do not link Usage or Technical data in any way that would allow Attest to identify individual Survey Respondents.In order for our Customers to identify which responses belong to the same person.Unique IDWe rely on your consent to take part in Own Audience Surveys which may allow Customers to identify and attribute responses to you through a Unique ID that the Customer has assigned to you.To understand how the Attest Service is used and what we could do to improve them, for example, using A/B testing to analyse the most effective improvements we can make to the website.UsageTechnicalWe have a legitimate interest to continuously assess and improve the Attest Service for all customers. Where such data is collected by cookies, you will be able to opt in or out of non-essential cookies (please see our Cookie Policy).To make our site more secure, to administer our site and for internal operations, including troubleshooting.UsageTechnicalWe have a legitimate interest to ensure that our site is kept secure.To provide your survey responses to our customers, including the transcription of any video responses.SurveyWe collect your survey responses for the legitimate interest of Attest in providing the Attest Service and in the legitimate interest of our Customers, so that we can share the responses requested by our Customers with them. To provide your Video Survey responses to our customers.Video Survey We rely on your consent to take part in Video Surveys, through which we and our Customers will receive your video and audio data.To help us manage and promote our business, e.g. in relation to our financial performance, customer base, product range or other efficiency measures.SurveyUsageTechnicalFor our legitimate interests or those of a third party, i.e. to promote our business (for example, by delivering product demonstrations to our customers) and be as efficient as we can so we can deliver the best service to our customers. Where such data is collected by cookies, you will be able to opt in or out of non-essential cookies (please see our Cookie Policy). Website visitors and potential Attest customers What information does Attest collect? We may collect the following information about you: Contact → your name, email address, phone number, job title, etc. Usage → information about how you use our website, products and services Technical → IP address, login data, browser type and other technology on the devices you use to access the platform. We use cookies and other tracking technologies in order to collect this information, you can find out more about this here. How does Attest collect my information? We’ll collect your information in a number of ways, directly or indirectly. For example: Direct interactions → for example, when you sign up for an Attest event, ask for a follow up on web chat, book an intro or request content from us. Automated technology or analytics → as you use our website or the Attest Service, we’ll automatically collect technical and usage information by using cookies and similar technologies. Third party sources → we work closely with third party advertising networks, analytics providers, hosting providers and search information providers from whom we may receive general aggregated information about you. We also use demand generation tools to find email addresses, for example, of people we believe to be decision makers and who we can contact in companies that may benefit from the Attest Service. How does Attest use my information? Why do we need your data?Type of informationLegal basis?To understand how the Attest Service is used and what we could do to improve them, for example, using A/B testing to analyse the most effective improvements we can make to the website.UsageTechnicalWe have a legitimate interest to continuously assess and improve the Attest Service for all customers. Where such data is collected by cookies, you will be able to opt in or out of non-essential cookies.To make our site more secure, to administer our site and for internal operations, including troubleshooting.UsageTechnicalWe have a legitimate interest to ensure that our site is kept secure.To provide you with support tools, including online chat functions.ContactUsageTechnicalWe process your data in order to determine whether you are an existing customer and therefore to ensure we are providing the contracted services to you, or whether you are a prospective customer so we can follow up with you about specific questions you have asked or rely on our legitimate interest to follow up with you if we think you may be interested in the Attest Service.To share content with you, such as reports, guides, information about events.ContactUsageTechnicalWe’ll use the information we collect in order to provide the relevant services to you. For example, if you’ve signed up to receive a newsletter, we’ll use your information to send you that newsletter and other materials we think may be of interest to you. You will always have the option to opt out of these communications and you can do so by clicking the unsubscribe link at the bottom of an email or by contacting us at [email protected]. We send you communications like this because of our legitimate interest to promote the success of Attest.To identify and contact potential future Customers who we believe may benefit from the Attest Service.ContactWe have a legitimate interest to promote the success of Attest by engaging in methods to increase our customer base.To analyse the effectiveness of marketing campaigns.ContactUsageTechnicalWe may use your information to understand whether marketing campaigns, for example, have been successful. For example, we may use Technical information to determine how many leads came to our website from a particular marketing asset, which helps us to determine what has been successful and what we can do to improve. Additional Information for Attest Events If you’re attending an event, we’ll use your information to build up our guest lists so we can tailor the event to the specific audience. We may share your company name, name and/or role with organisations hosting the event and/or other individuals who attend our events. We’ll process your personal data in this way either because we have a legal obligation to provide the delegate list for health and safety reasons or because we have a legitimate interest in promoting the success of the event and the Attest Service. We’ll never share your email address for the purpose of event promotion without your consent or informing you in advance. During events, we may take photographs or film the events. Where this is the case, we will display notices or advise event attendees in advance that photography or filming may take place, with information as to how you can let us know if you’d rather not be photographed or filmed. Who does Attest share my information with? Like most tech businesses, we do share your information with third parties where it is required in order to provide the Attest Service (for example, to host our platform, to share video survey responses with our customers, communicate with you and provide in platform advice) but only where we have appropriate safeguards in place. Survey Questions and Responses We do not allow the collection of any personal data within survey responses. We will share survey information between Customers and Survey Respondents so that surveys can be completed. For Survey Respondents, we’ll only ever share the responses you give to surveys with Customers. Customers determine how to use the content from the responses you provide so anything you put as a response will be shared with Customers or other entities that they have authorised us to share responses with. Please don’t ever provide personal data and remember, you can skip a question if you don’t feel comfortable answering it. For Customers, we’ll only ever share the surveys you put together with Survey Respondents to allow them to provide survey responses. Other than as set out in the section “Service Providers” (see directly below), we do not share your Survey Questions or the responses received to them with anyone else (unless you explicitly request us to do so or consent to us doing so). Service Providers We use a number of third party service providers to help us provide the Attest Service. In order to do this, we may have to provide some of your information to them and we will only ever do this to the extent necessary to provide services to you and only when we have contractual provisions in place to ensure your information is securely held and not used for any other purpose. We’ve set out a list of the main service providers we may share data with in order to provide the Attest Service under the ‘Service providers’ section at the bottom of this privacy policy. Attest account users Where you are using the Attest Service as part of a company account, we may share any information regarding your usage of the account with other authorised members. Aggregated and non-identifiable information to third parties We might share aggregated information with third parties to improve or promote the Attest Service. This information will always be anonymous, ensuring that no individual could be reasonably identifiable or linked to any part of the information we share. Attest companies We may share your information with Attest companies in order to provide the Attest Service. For example, we share information with our local entities generating sales and building Attest Service within other countries, such as Attest Technologies, Inc in the USA. All Attest companies are subject to this privacy notice. Future Attest purchaser If we were to sell all or part of any of our business or assets, we will provide or transfer your personal data to the buyer (provided this is done in accordance with relevant data protection laws). We’ll do this because we have a legitimate interest to ensure our business can be continued by the buyer. If you object to our use of your personal data in this way, the buyer of our business may not be able to provide services to you. Other circumstances There are some circumstances where we have to share your information because we either have a legal obligation to do so or it’s necessary in order to protect ourselves and other users of the Attest Service. We will only do so where we reasonably believe it is necessary to comply with laws and regulations, requests from a governmental or law enforcement agency, to protect the security of the Attest Service or, where necessary, to enforce our legal agreements. Cookies You can find out all about the use of cookies within the Attest Service in our Cookies Policy. Other websites Our site may connect you to different websites with their own privacy policies. We do not accept any responsibility or liability for these policies or websites and you should check their policies before submitting any personal data. Where do we store and transfer your data? All information you provide to us is stored on our secure servers or those of our third party data storage providers. We currently use Amazon Web Services and data is stored on servers located in Dublin. The information we gather from you may be transferred to, and stored at, a destination outside the European Economic Area (“EEA”). For example, we may transfer data to one of our offices located outside the EEA or to service providers located in the United States. Where we transfer your personal data to countries and territories outside of the EEA and the UK, which have been formally recognised as providing an adequate level of protection for personal data, we rely on the relevant “adequacy decisions” from the European Commission and “adequacy regulations” (sometimes referred to as “data bridges”) from the Secretary of State in the UK. Where the transfer is not subject to an adequacy decision or regulations, we have taken appropriate safeguards to require that your personal data will remain protected in accordance with this privacy notice and applicable laws. These safeguards include putting in place at least one of the following safeguards: using specific contracts approved by the European Commission which give your personal data the same protection it has in the EEA; and where we use providers based in the US, relying on Standard Contractual Clauses or other lawful measures in order to protect personal data shared between Europe and the US. European Representative We have appointed IT Governance Europe Limited to act as our EU representative (“Representative”). If you wish to exercise your rights under the EU General Data Protection Regulation (“EU GDPR”), or have any queries in relation to your rights or general privacy matters, please email our Representative at [email protected]. Please ensure to include our company name (Attest or Attest Technologies Limited) in any correspondence you send to our Representative. How long do we keep your data for? We’ll keep your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any accounting or legal requirements. To determine the appropriate retention period for the personal data we hold, we consider the amount, nature and sensitivity of the personal data, the risk of harm from unauthorised use or disclosure of your personal data, the reasons why we handle your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements. We may anonymise your personal data so that it can no longer be associated with you for research or statistical purposes, in which case we may use this information indefinitely without further notice to you. Security We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality. We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so. Your privacy rights When using the Attest Service, you have the right to: access personal data (also known as a “subject access request”); correct incomplete or inaccurate personal data we hold about you; ask Attest to erase the personal data we hold about you; ask Attest to restrict its handling of your personal data; ask Attest to transfer your personal data to a third party; object to how Attest is using your personal data; and withdraw your consent to Attest handling your personal data. You have an absolute right to ask us to stop processing your personal data for the purposes of direct marketing. If you are resident in California, you have certain rights afforded to you under the CCPA. The categories of personal data we collect, where we collect it from, the business purpose for collecting it and any third parties we may share this information with is already set out in this policy. We do not sell your personal data and we will not sell it without providing you the right to opt out. You will not be discriminated against for exercising any of the above rights. Where you do so, we are required to verify your request using information associated with your Attest account (for example, your email address). What to do if you’re not happy with this information? If you’re not happy with the information we’ve set out here, please let us know so we can try to resolve your query or concern. You may also have the right to complain to a data protection authority. In the UK, you can contact the Information Commissioner’s Office here. Updates to this policy Any changes we make to our privacy policy in the future will be posted on this page and, where significant, notified to you by email. Please check back frequently to see any updates or changes to our privacy policy. This policy was updated on 24 February 2025. As of February 2025, this Privacy Policy has been updated. The previous version of our privacy policy is available here. Service providers This table sets out the key service providers used by Attest and may be updated from time-to-time. Service ProviderPurposeLocationRelevant toAmazon Web ServicesAWS hosts all Attest sites and databases and provides transcription servicesEEACustomersSurvey Respondent (video and text-based)Website visitors and potential Attest customersChameleonThis tool enables us to provide you with guides in the Attest platformUSACustomersSurvey Respondent (video and text-based)UpflowThis tool is used to manage invoice paymentsEEACustomersCint This is an audience panel providerEEASurvey Respondent (text-based only)DocuSignThis tool is used to send out contracts for customers to sign electronicallyEEACustomersWebsite visitors and potential Attest customersFingerprint JS Inc.This tool is used by us to detect where a respondent has entered the same survey more than once. This allows us to de-duplicate respondents, for example for fraud detection purposesEEASurvey Respondent (video and text-based)GotowebinarThis tool is used to host webinars for prospects and existing customersEEACustomersWebsite visitors and potential Attest customersGongThis is a call recording and training tool used by our customer teamsUSACustomersWebsite visitors and potential Attest customersGoogle WorkspaceBusiness platform used by Attest, including for remote meetings/conferencingEEACustomersWebsite visitors and potential Attest customersIntercomThis tool enables website users and customers to message AttestUSACustomersWebsite visitors and potential Attest customersLean DataThis tool is used for call schedulingUSACustomersWebsite visitors and potential Attest customersLooker (owned by Google)This tool is used for business intelligenceUSACustomersSurvey Respondent (video and text-based)Website visitors and potential Attest customersLucidThis is an audience panel providerUSASurvey Respondent (text-based only)Mandrill (owned by Mailchimp)This tool is used for sending transactional and customer emailsUSACustomersWebsite visitors and potential Attest customersPardot (owned by Salesforce)This is our marketing & communications platformUSACustomersWebsite visitors and potential Attest customersPlanhatThis tool is used for customer management and successEEACustomersPure Spectrum LimitedThis is an audience panel providerUSASurvey Respondent (video and text-based)SalesforceThis is our client relationship management toolUSACustomersWebsite visitors and potential Attest customersSalesloftThis is a sales engagement platformUSACustomersWebsite visitors and potential Attest customersSmartlookThis tool is used to analyse user data on the Attest website and in the Attest platformEEACustomersSurvey Respondents (video and text-based)Website visitors and potential Attest customersSaaSy PeopleSaaSy People provides customer supportEEACustomersWebsite visitors and potential Attest customersStripeThis is a payment processor that allows us to take credit card paymentsEEACustomersXeroThis is a business accounting platform, used to send invoicesUSACustomersZoomThis tool is used for remote meetings/conferencingUSACustomersWebsite visitors and potential Attest customers