Privacy Policy

Version 2026-10-08 · Effective 8 October 2026

This policy explains how Dataset By Humans ("we", "us") handles personal data when you visit datasetbyhumans.com or contact us. We apply the same high standard to every visitor, wherever you are.

Who is responsible

Dataset By Humans is the controller of the personal data described here. Contact: privacy@datasetbyhumans.com. This mailbox is monitored by the person responsible for privacy at Dataset By Humans.

What we collect and why

Activity	Data	Purpose	Legal basis (GDPR)
Request a dataset form	Description of your needs, optional details (quantity, deadline, budget), name, company, work email	To reply with samples and a quote	Steps taken at your request before entering a contract
Free sample request	Work email, company, optional use case, dataset topic	To send you sample photos	Steps taken at your request
Checkout	Name, email, organisation the license is issued to, item and license purchased, order and payment status (card details are handled only by Paddle)	To deliver the image or dataset, issue the license certificate and send order emails	Performance of a contract
Optional newsletter tick box	Email address, date of consent	To email you about new datasets and tutorials	Your consent, which you can withdraw at any time
Security and abuse prevention	Truncated IP address (network prefix only), request metadata	To protect the site and forms from spam and abuse	Legitimate interests
Website analytics	Aggregated, cookieless page-view statistics	To understand which pages are useful	Legitimate interests
Email correspondence	Content of emails you send us	To answer you	Legitimate interests / pre-contract steps

We do not sell or share personal data for cross-context behavioural advertising, and we do not use your data to train AI models.

Cookies

We do not use advertising or analytics cookies. Our hosting provider may set strictly necessary security cookies to protect the site. See the cookie policy.

Who we share data with

We use a small number of service providers (processors) who handle data on our behalf under data processing agreements. They are listed on the subprocessors page. We may disclose data if required by law.

International transfers

Our providers may process data outside your country, including in the United States. Where data from the EU, EEA or UK is transferred, we rely on the provider's Standard Contractual Clauses or an adequacy decision such as the EU–US Data Privacy Framework.

How long we keep data

Data	Retention
Dataset and sample requests that do not lead to an order	24 months after our last contact
Newsletter consent	Until you unsubscribe, plus proof of consent for 3 years
Security logs	Up to 90 days
Correspondence	Up to 24 months, longer if related to a contract

Your rights

Depending on where you live, you have the right to:

• access your data and receive a copy in a portable format;
• correct inaccurate data;
• delete your data;
• object to or restrict processing based on legitimate interests;
• withdraw consent at any time, without affecting earlier processing;
• opt out of the sale or sharing of personal data (California and other US states). We do not sell or share personal data, and we honour Global Privacy Control signals;
• not be discriminated against for exercising your rights;
• complain to your data protection authority.

Email privacy@datasetbyhumans.com to exercise any right. We respond within one month (GDPR / UK GDPR) or 45 days (US state laws), and may ask you to confirm your identity first.

People who appear in our datasets

Our datasets are processed so that people cannot be identified: faces and license plates are blurred, GPS is removed and every image is reviewed by a person. If you believe you can be identified in one of our images, use our takedown process.

Children

This website is intended for businesses and adults. We do not knowingly collect data from children under 16.

Security

We use HTTPS everywhere, access controls with two-factor authentication on administrative accounts, and data minimisation such as truncating IP addresses. No system is perfectly secure; if a breach affecting you occurs, we will notify you and the authorities as required by law.

Changes

We will post any changes on this page with a new version date and, for material changes, notify people we are in contact with.