Privacy Policy
Humankind Technologies Ltd. | Last updated: February 2026 | Any Questions? privacy@humankindtech.co.uk
Who We Are
Humankind Technologies Ltd is a private limited company incorporated in England and Wales (Company Number: 11457770), with its registered office at 20-22 Wenlock Road, London, N1 7GU (referred to as "Humankind Technologies", "us" or "we").
We collect, use and share the personal and non-personal information you and our other users (“you” or “Users”) provide to us across our Services, including the website at https://www.humankindtech.co.uk (the "Site"), and any Humankind Technologies Service. Collectively these are referred to as the “Services”.
- The UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018
- The EU General Data Protection Regulation (EU GDPR) 2016/679
- The EU Artificial Intelligence Act 2024 (Regulation (EU) 2024/1689)
- The UK Online Safety Act 2023 (where applicable to our services)
We collect, use and share the personal and non-personal information you and our other users (“you” or “Users”) provide to us across our Services, including the website at https://www.humankindtech.co.uk (the "Site"), and any Humankind Technologies Service. Collectively these are referred to as the “Services”.
- The UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018
- The EU General Data Protection Regulation (EU GDPR) 2016/679
- The EU Artificial Intelligence Act 2024 (Regulation (EU) 2024/1689)
- The UK Online Safety Act 2023 (where applicable to our services)
Younger Visitors (GDPR-K)
Younger visitors should check with a parent or guardian before using the Services and read the simplified versions of each section below. If you are a parent or legal guardian, by allowing your child to use the Services, you are confirming that you have read and understood this Privacy Policy on their behalf.
The age threshold for children providing their own consent is:
- 16 years in the EU (under GDPR-K/ Article 8)
- 13 years in the UK (under the UK GDPR and Age Appropriate Design Code)
If your child is below the applicable threshold, please provide your own consent and email address in place of theirs. Children under 18 are unable to use the Calendly booking service directly.
Younger visitors should check with a parent or guardian before using the Services and read the simplified versions of each section below. If you are a parent or legal guardian, by allowing your child to use the Services, you are confirming that you have read and understood this Privacy Policy on their behalf.
The age threshold for children providing their own consent is:
- 16 years in the EU (under GDPR-K/ Article 8)
- 13 years in the UK (under the UK GDPR and Age Appropriate Design Code)
If your child is below the applicable threshold, please provide your own consent and email address in place of theirs. Children under 18 are unable to use the Calendly booking service directly.
SIMPLIFIED VERSION
|
How We Use AI - Our Commitments
Humankind Technologies use AI tools in a human-centred way that is respectful of confidentiality, privacy and third party rights; People - our employees and our customers - are always at the heart of what we do. Our AI use supports rather than replaces human work.
Our AI Principles:
We maintain a “human-in-the-loop” process for all AI tool use, with overall human oversight at all times. This includes
We do not share confidential or commercially sensitive information with AI tools without careful assessment and/or approval from an authorised person or our legal team.
We do not use AI tools in ways that could inadvertently perpetuate or reinforce bias, discrimination, or prejudice.
We do not share valuable or proprietary intellectual property (such as proprietary source code that is not open-source) with AI tools
We carefully assess and edit any AI-generated content against reliable sources before sharing or publishing it.
We do not share third party intellectual property content (such as images or copyrighted text) with AI tools unless we have the right to do so. If in doubt, we seek guidance.
We only using AI tools in compliance with our data security policies (no sharing of login credentials or passwords)
How we evaluate AI tools before using them
We apply a consistent evaluation framework before introducing any AI tool into our business. This covers intended use, type of AI tool, data security, intellectual property, GDPR compliance, human-centric safeguards, legal and regulatory compliance, vendor evaluation, contract terms, and risk-benefit analysis.
We operate primarily as a deployer and, in some contexts, a provider of AI systems. We assess all AI use cases against the EU AI Act risk classification framework and apply the appropriate level of governance. Where our work involves high-risk AI systems (as defined in Annex III of the EU AI Act), we conduct and document the required conformity assessments, maintain records of our systems, and ensure human oversight is embedded throughout.
Intended use – this drives the level of risk and depth of our evaluation criteria (e.g. if the sales team uses the AI tool to create content for a pitch document versus a software engineer using an AI tool for code generation and optimisation)
Type of AI tool (e.g. generative, predictive, extractive; is it trained to perform a limited task on a limited body of data and knowledge; or a more open, tool with a wider level of access; does it have any autonomy or agency?)
Intellectual property – both inputs and outputs and is the AI tool/vendor asserting it owns IP rights;
Data protection and privacy – is it legally compliant with the conduct of a DPIA (Data Protection Impact Assessment) if any personal data/PII is (or could be) processed in the AI tool;
Human-centric safeguards – does it have built-in human safety factors and ethical guidelines aligned with major AI codes of practice
Legal & regulatory compliance factors – AI-specific regulatory rules and guidance, including the EU AI Act and UK AI Framework
Contract terms – relevant T&Cs/terms of service and privacy policy;
Data security and confidentiality – is it capable of re-using/re-generating commercially sensitive information in a recognisable form;
Vendor evaluation – how reputable is the vendor/tool and the original developer (if the vendor is a deployer or managed service provider)
Risk-Benefit analysis – weighing potential benefits and opportunities against potential risks and impacts of misuse, including malicious use, malfunctions, harmful bias and underrepresentation, loss of control, misinformation or deep fakes, security and privacy breaches;
SIMPLIFIED VERSION
|
The Information we collect and when
Your Email Address
We ask for your email address to verify who you are and to send you information you have indicated is of interest to you. We always give you a clear opt out. Your email address is never made public. We will not share it with third parties for their marketing purposes.
Feedback, Surveys or Reporting a problem
Product surveys may be used to improve our services. We only collect your contact information if you have asked us to follow up. If you have reported a problem, we will delete your contact information once you confirm the issue is resolved, unless you ask us to retain it.
Information from Research and Workshops
User research and workshops are used to inform the design of products and services. Should you register to join one of these all our projects begin with a Data Protection Impact Assessment (DPIA), to ensure we are only collecting what is necessary and have considered consent carefully.
This consent explains what data is collected, how it is stored and how it will be used. In general terms we keep the amount of personally identifiable information in our research to a minimum.
Non-Personal Information
We collect non-personal information about users that interact with the Services. This includes the number and frequency of visitors, page visit length, browser type, device type and operating system. We also collect IP addresses solely for internal purposes (system administration and lawful requests from authorities). IP addresses are encrypted and handled with appropriate security measures.
Why We collect your Information
To provide the Services
We use the information you give us to provide use with the Services, including tailoring your experience based on how you use them. This is in our legitimate interest as a service provider.
To improve our services and product offerings
We use non personal, aggregated data to understand how customers interact with the Services, improve them and develop new offerings. This is in our legitimate interest to ensure the best possible experience.
For legal compliance and to defend our rights
We may use your information to prevent illegal activities, protect user safety, enforce our terms of service and comply with legal and regulatory obligations - including responding to government requests, subpoenas or litigation. We do this where required by law or regulation.
Aggregated and combined data
We may combine information we collect from different sources for the purposes above. We may also aggregate your information with that of others users for statistical analysis, research and reporting. Such aggregated data cannot be used to identify you individually. Where we share aggregated data with business partners or research institutions, it is always anonymised.
How Long We Keep Your Information
We keep your information only for as long as necessary for the purposes described in this policy. The exact period depends on your interactions with the Services. As a general guide:
Account data is retained for a reasonable period after your last activity, to allow you to return to services easily.
We retain correspondence (including complaint records) for as long as necessary to protect us from a legal claim
Research data is retained for the period specified in then consent given by participants. In all other cases, we delete your information when we no longer have a need to retain it.
As a general rule, we do not retain personal data for more than 3 years from our last contact with you, unless the law requires otherwise.
Humankind Technologies takes reasonable and appropriate steps to protect your information against loss, misuse, unauthorised access, disclosure, alteration, or destruction.
Our security measures include:
- Encryption of personal data in transit and at rest
- Limited employee access to personal data on a need-to-know basis
- Confidentiality agreements with employees and contractors
- Regular review of our data security practices
Despite our best efforts, no security measure is entirely impenetrable. In the event of a data breach involving unencrypted personal information, we will notify affected users and, where required, the relevant supervisory authority (the ICO in the UK; the relevant Lead Supervisory Authority in the EU) within the timeframes required by applicable law (72 hours under GDPR).
SIMPLIFIED VERSION |
- We may collect your email address to send you updates - only if you ask us to. We sometimes collect information about how people use our website (not who they are) to help us improve it. We keep everything secure and only keep it as long as we need to.
- We use your information to give you the service you signed up for, to make it better over time and to follow the law. We will only ever use your information in the ways we describe here.
- We work hard to keep your data safe using encryption and other security measures. If something were to go wrong, we would tell you and all relevant authorities as quickly as the law requires.
- We normally delete your information 3 years after the last time we were in touch - unless the law says we have to keep it longer
Sharing your Personal Information
We do not sell, trade, or rent your personal information. We do not share it with third parties for their direct marketing purposes.
Please read our Cookie Policy at the bottom of this page for more information, including information about how to delete cookies placed on your device and how to prevent them from being put there in the first place. Be mindful that if you do enable a prevent cookies functionality on your device, some of our services and functionalities on the site will no longer work.
We may share your information in the following limited circumstances:
- With third-party service providers who help us operate the Services (see below) — only to the extent necessary and under appropriate data processing agreements.
- Where required by law, regulation, court order, or government authority.
- In connection with a merger, acquisition, asset sale, or similar corporate transaction — in which case we will notify users and ensure appropriate protections are in place
Our Third Party Service providers
Humankind Technologies, like many other website operators, uses third parties to provide certain services. Below is a list of third party services we use to store and process your data, a description of how we use them and links to the privacy policies of these parties:
| Google Analytics | collects and analyses website data across all of our sites. You can opt out of being tracked by Google here | View Privacy Policy |
| Zoho | hosts our website humankindtech.co.uk , manage our newsletter mailing list and send newsletters to subscribers | View Privacy Policy |
| Calendly | schedules appointments with our team. If you are under 18 you cannot use the Calendly booking service | View Privacy Policy |
| Anthropic (Claude) | LLM used with human oversight to generate content or images. No personal data is shared with this tool | View Privacy Policy |
| OpenAI (ChatGPT) | LLM used with human oversight to generate content or images. No personal data is shared with this tool | View Privacy Policy |
International data transfers
Some of our service providers are based outside the UK or European Economic Area (EEA). Where we transfer personal data internationally, we take appropriate steps to ensure that an equivalent level of data protection applies - including the use of UK International Data Transfer Agreements (IDTAs), EU Standard Contractual Clauses (SCCs), or reliance on adequacy decisions where available.
SIMPLIFIED VERSION
|
Cookies
How we use cookies
Like most websites, we use cookies. Cookies are small files placed on your device that help us understand how you use the site and improve your experience. We classify our cookies using the International Chamber of Commerce (ICC) framework.
You can turn off most cookies in your browser settings, but some parts of the site might not work as well if you do. We don't share your personal information through cookies. For more information about deleting and controlling cookies, please visit www.aboutcookies.org.
Types of cookies we use
| Strictly Necessary Cookies | Essential for the website to function. These cannot be disabled. |
| Analytics Cookies | Google Analytics: these help us count page visits and measure site performance. Two cookies also help us track the effectiveness of email campaigns. |
| Website Hosting Cookies | Zoho cookies: Our website host places cookies to enable the website to function. (Zoho Cookie Policy) |
| Third Party Cookies | Other websites linked from ours may place their own cookies. These are outside our control and covered by their own privacy policies. |
Your Rights
Under UK GDPR and EU GDPR, you have the following rights in relation to your personal data:
If a parent or guardian wishes to exercise rights on behalf of their child, please use the same contact address.
We will respond to all requests within one calendar month (as required by GDPR). In complex cases, we may extend this by a further two months — we will notify you if this applies.
Right of access - you can ask us for a copy of the personal data we hold about you.
Right to rectification - you can ask us to correct inaccurate or incomplete data.
Right to erasure ('right to be forgotten') - you can ask us to delete your data. Note that we may need to retain some data to provide the Services or comply with legal obligations.
Right to restriction of processing - you can ask us to limit how we use your data in certain circumstances.
Right to object - you can object to our use of your data where we rely on legitimate interests as the legal basis.
Right to data portability - you can ask us to provide your data in a machine-readable format so it can be transferred to another provider.
Right to withdraw consent — where we rely on your consent, you can withdraw it at any time without affecting the lawfulness of prior processing.
Rights related to automated decision-making and profiling - we do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.
Right to complain
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the relevant supervisory authority:
- In the UK: the Information Commissioner's Office (ICO) - ico.org.uk
- In the EU: the supervisory authority in your country of residence or the country where the issue arose.
We would always prefer to resolve any concerns directly first - please contact us at privacy@humankindtech.co.uk before escalating to a regulator.
Changes to this Privacy Policy
Humankind Technologies may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this document. The most current version of this Privacy Policy will always be available on the Site and will supersede all previous versions.
SIMPLIFIED VERSION
|
If you have any questions, requests, or concerns about this Privacy Policy or how we handle your data: By email: privacy@humankindtech.co.uk By post: HumanKind Technologies, 20-22 Wenlock Road, London N1 7GU Our Data Protection contact handles all queries relating to personal data. We aim to acknowledge all queries within 5 working days. For further information on data rights in the UK: The Information Commissioner’s Office (ICO) is in charge of data protection and privacy matters in the UK. You can find our more information on their website here. |