Terms of use | Privacy policy | Data and systems security notice | Cookie declaration

Privacy policy

We collect personal information about your use of 1000minds software and our website in order to provide 1000minds services and to interact with and respond to you. If you contact us, we may keep a record of that correspondence.

In addition, for the purpose of analyzing user trends and internet traffic, we may collect details of your visit to our website, information about your computer, Internet Protocol address, operating system and browser, etc.

In the case of services provided to you on an organizational basis, we may report the information you provide us to the organization’s administrators – for their own legitimate purposes and also for our own.

We reserve the right to collect other information at our discretion, e.g. as required to respond to a security threat, and to notify you of news and other important information via email for as long as you have an account with 1000minds. You may unsubscribe from certain types of email such as newsletters.

Data storage and confidentiality

We store your information on servers located at approved locations under contract to 1000minds. Data may be stored indefinitely unless less deletion is requested (see your right to be forgotten below). Data will be used for the purposes described in this policy.

You may create an account in our European region or our International (US) region. These regions operate independently and without the ability to automatically transfer your data between them. You may create an account in both regions if you wish.

Except as explicitly detailed below under “Data processors”, we will not disclose your personal information to third parties unless you authorize us to do so, or we are required to by law.

Notification of breach

1000minds will notify customers as soon as is practicable and without undue delay after becoming aware of a breach of customer data or personally identifiable information. Such notification will include details of the nature of the breach, the categories of information potentially breached, and where appropriate, potential measures to mitigate possible adverse effects.

Sale of data

1000minds will not sell your data or personal information about you.

Your rights

Without limiting your rights under the legislation and regulations of relevant jurisdictions, you have the following rights:

Right of access

You have the right to know what personal information is stored about you.

Right of correction

You have the right to have corrections made to personal information stored about you.

Right to be forgotten

You have the right to have personal information we hold about you deleted. This right is limited only by legislation requiring us to maintain such information, e.g. we must retain information relating to financial transactions for tax purposes.

How to exercise your rights

If you are answering a 1000minds survey, it has most likely been set up and administered by a customer of 1000minds. In the first instance, please endeavour to contact the person or organization that sent the survey to you. If you have difficulty doing so, or if you are unhappy with the response, please contact privacy@1000minds.com so that we may assist you.

1000minds customers should contact privacy@1000minds.com for all privacy-related requests.

Categories of information

1000minds stores a limited set of personal information, most of which you will have chosen to share with 1000minds:

  • Name, address, email, phone number
  • Organization affiliation, industry, number of employees
  • Areas of interest for the use of 1000minds
  • Technical information such as IP address, browser type and time zone.

Data sub-processors

1000minds uses:

  • Google Analytics to help understand how our website and applications are being used.
  • Microsoft Clarity to help understand how our website is being used.
  • Google and Microsoft for advertising.
  • Google services to allow users, at their discretion, to “Login in with Google”.
  • Microsoft services to allow users, at their discretion, to “Log in with Microsoft”.
  • Secure web and database services running on Microsoft Azure in the US.

Analytics & log files

We use Google Analytics and Microsoft Clarity as analytics providers to analyze how 1000minds is used. Basic information is transmitted to our analytics and used to evaluate and to produce statistics/insights about website activity. We will not use (nor allow third parties to use) such tools to track or collect any personally identifiable information of visitors to our website.

Your activity on the web site is recorded in log files in order to help us understand how our software is being used, to enable you to see the history of your models, and to assist us with troubleshooting problems and improving the software. Your activity may be combined with others’ to produce aggregate datasets that may be analyzed for research purposes.

Advertising

We use Google and Microsoft advertising services. Any data collected will be used in accordance with this privacy policy and the third parties’ privacy policies. These third parties allow you to set preferences for how they advertise to you, and if you want to you can opt out of interest-based advertising entirely by using cookie settings or permanently by using a browser plugin. We use remarketing and ad conversion tracking on these platforms, which are matched using a hash of your email address. If you choose to allow 1000minds statistics & marketing cookies Google and Microsoft may associate visitation information with your account for the purpose of ads personalization.

Artificial intelligence

You may optionally use artificial intelligence while using 1000minds to help build models. Your inputs and data are not used to train or improve the artificial intelligence system. Data generated using artificial intelligence without being subsequently edited is tagged as such so that it can be readily identified on the management page for that data.

GDPR, CCPA, and similar privacy legislation and regulations

The EC issued a formal decision recognizing New Zealand’s legal standards as being sufficient for Article 25(2) of European Union (EU) Directive 95/46/EC: that is that New Zealand’s law provides an “adequate level of data protection”. The shorthand often used is that New Zealand has “EU adequacy” or is “an adequate third country”. While 1000minds’ compliance with New Zealand’s privacy legislation is therefore sufficient, it is expected that New Zealand’s privacy legislation will continue to be developed and align more and more closely with the GDPR. 1000minds is continuing to improve its alignment with the principles of both New Zealand legislation and the GDPR.

Processor and controller roles and responsibilities

You are the controller of any data, including personal data, that you collect using 1000minds. 1000minds is the processor of such data, except when you act as a processor or sub-processor of the data, in which case 1000minds is a sub-processor. If you are not the controller of the data, you warrant that your appointment, and that of 1000minds, has been authorized by the relevant controller.

You indemnify 1000minds in full for any and all claims or liability arising from your use of 1000minds, and from the use of 1000minds by your survey participants. You are responsible for complying with all relevant privacy and data processing legislation, in all jursidictions from which you operate and collect data.

As required by relevant jurisicitions’ legislation and regulations, you will notify survey participants of their rights in relation to their use of 1000minds, and seek their approval to proceed.

You must respond to requests from survey participants in a timely manner, e.g. for access to personal information, corrections to personal information, and deletion of personal information.

Changes to this policy

We reserve the right to amend this privacy policy at our discretion at any time by displaying an amended version.