Plain-language summary
We collect only the information necessary to review access requests, evaluate dataset submissions and operate the platform. We don't profile visitors, we don't sell personal data, and we don't process synthetic dataset contents as personal data unless they actually contain it.
This page is the plain-language version. The full policy will be published before public launch; specific clauses below marked [to confirm] are pending final legal review.
Scope
This policy applies to the waiser data website, the dataset catalog, and the forms and email exchanges that flow from them. It does not govern data inside a dataset you receive — that is covered by the dataset's licence and the verification dossier.
What we collect
Contact details you submit through access requests, custom dataset briefs, submission forms or the contact form — typically name, work email, organisation, role and the intended-use description you write yourself. Server logs covering basic technical metadata necessary to operate the site. No tracking pixels or third-party advertising trackers.
Why we collect it
To review your request, decide whether the dataset fits the intended use, prepare the licence, deliver the dataset securely, and reply to questions. Specific legal bases under applicable data protection law are listed in the full policy [to confirm].
Retention
Access-request and submission records are retained for as long as the related licence or business relationship is active, plus a period for audit and dispute resolution [to confirm — retention window]. Server logs follow a shorter rolling window.
Your rights
You may request access to, correction of, or deletion of personal data we hold about you, and you may object to or restrict certain processing, in line with applicable law. Requests are handled within the time frame the relevant regime requires [to confirm — jurisdiction].
How to reach us
Privacy questions go via the contact form on the Contact page with subject Legal. We aim to acknowledge within one working day and substantively reply within the timeframe the relevant regime requires.