Privacy notice

The controller

Skysoclear Ltd, trading as Humantest, is the controller of the personal information described in this notice. It is a private limited company registered in England and Wales, number 12697667, with its registered office at 20 Wenlock Road, London, England, N1 7GU.

We do not have a statutory data protection officer. Questions about this notice go to ross@skysoclear.com.

If you visit this website

We set no cookies. If you choose a light or dark display, that one setting is kept in your own browser and never sent to us.

We use PostHog, hosted in the European Union, to count visits and see which parts of a page people read. It is set up without cookies and without identifying you: it records the page, the time, your browser type and a rough location from your IP address, which is not kept. We rely on our legitimate interest in knowing whether the site works. If we ever turn on cookies or session recording, we will ask you first.

The typeface is loaded from Google Fonts. When the font files load, Google receives your IP address and browser details, as it does for any site using the service. Google’s own privacy policy covers that.

Our hosting provider, Vercel, keeps standard server logs (IP address, time and page requested) for a short period for security. We do not use them for anything else.

If you ask for a free teardown

What we collect

What you type into the form: a description of the communication, who it is for, your work email address and whether you ticked the box for updates. Anything you then send us by email, such as the letter, PDF or screenshots.

What we use it for

To write the teardown and send it to you, and to reply to you about it. Our lawful basis is our legitimate interest in responding to an enquiry you made. If you ticked the box for updates, we send them on the basis of your consent, and every email has a link to stop them.

Who sees it

Named Humantest staff. Email is sent through Resend and stored in Google Workspace, our mailbox provider. The communication you send us is treated as confidential and is not shown to anyone outside Humantest.

How long we keep it

Twelve months after our last contact with you, unless you become a client, in which case the client section below applies. If you asked for updates, we keep your email address until you stop them.

If you are a client

We hold the business contact details of the people we work with at your firm: name, role, work email and phone. We use them to deliver the contract, send invoices and reports, and give notices under the agreement. Our lawful basis is the contract between us, and our legitimate interest in running our business.

We keep contract records, including these contact details, for six years after the agreement ends, because that is how long claims can be brought and tax records must be kept.

We never process your customers’ data. If a communication you send us contains real customer information, we delete it and ask for a version with example data.

If you take part in our research

How we recruit

You join our panel on this website, and we invite you to studies that match your circumstances. Screening questions are neutral and factual: your age band, employment status, the financial products you hold, how you manage money, and whether anything about your health or circumstances affects how you deal with money. Some of those answers are special category data. We ask for your explicit consent before you answer them, and you can skip any question.

Sessions

A session is a one-to-one Google Meet call with a Humantest researcher, recorded with your consent: audio, video and what is on the screen. You can stop at any time and you are paid the incentive whether or not you finish. The researcher will never give you financial advice or comment on your own circumstances.

What we share with clients

The client whose communication you read receives the recording and transcript of your session, your participant code, age band, the product you hold, where you are in your decision and, if you agreed, the vulnerability characteristics we recorded. They never receive your name or contact details. Their contract with us forbids them from trying to identify or contact you, from using anything you said to make a decision about any individual, and from publishing the recording.

Lawful basis and your choices

Everything above rests on your consent, and on your explicit consent for anything about your health. You can withdraw consent for your recording to be used at any time up to the day the client receives it; we then delete it and leave you out of the findings. You can leave the panel at any time.

How long we keep it

• Recordings and transcripts: 90 days after the client receives them, then deleted. The client must delete its copy when it is no longer needed and within six years.
• Your consent record: six years from the session, so that consent can be evidenced.
• Your panel profile and contact details: while you are on the panel, and twelve months after you leave.

Who else sees your information

We use a small number of suppliers who process information on our instructions and under contract. We never sell personal information.

Where it is kept

Our suppliers process information in the European Union and the United States. The EU is covered by the UK’s adequacy regulations. For the United States we rely on the UK Extension to the EU-US Data Privacy Framework or the UK Addendum to the standard contractual clauses, as shown above.

How we keep it safe

Recordings are encrypted in storage and in transit. Access is limited to named Humantest staff with multi-factor authentication. Participants are identified by code in transcripts and reports. We have a written procedure for incidents, and we tell affected people and the ICO where the law requires it.

What you can ask us to do

• Tell you what we hold about you, and give you a copy.
• Correct anything that is wrong.
• Delete it, unless the law requires us to keep it.
• Stop using it, or limit how we use it.
• Give it to you, or to someone else, in a usable format.
• Withdraw your consent, where consent is what we rely on.

Email ross@skysoclear.com. We reply within one month, and we may ask you to confirm who you are first. There is no charge.

Complaints

If you are unhappy with how we have handled your information, tell us first and we will try to put it right. You can also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113.

Changes to this notice

When we change this notice we update the date at the top. If a change affects research participants, we email them.