Privacy Policy

Last updated: 19/06/2026

Data Controller: Northstead Limited, a company registered in New Zealand, trading as Human Clarity Institute ("Human Clarity Institute", "HCI", "we", "us")
Contact: info@humanclarityinstitute.com
Location: New Zealand

This Privacy Policy explains how we collect, use, share, and protect your personal information when you visit our website, take our assessments, purchase a report, or otherwise interact with us. It applies to everyone who uses our services, wherever you are located.

Because our participants and customers are located around the world, this Policy is written to meet the expectations of major data-protection regimes, including the New Zealand Privacy Act and the UK and EU GDPR. Depending on where you live, you may have specific rights described in Section 9.

1. The two kinds of activity this Policy covers

We do two distinct things, and it matters which one applies to you:

(a) Research participation and published datasets. We run surveys and research about how people relate to AI. When we publish research, we publish only anonymised, aggregated data from which individuals cannot reasonably be identified. Our handling of published datasets is described further in our Dataset Licence & Use Terms.

(b) Individual assessments and reports. When you take one of our assessments and receive a report, that report is personal to you and based on your individual responses. This activity is not anonymous — your responses are linked to you so that we can generate and deliver your report. This is an important distinction: research publication is anonymous; your personal report is not.

Your individual report is private. We will never publish it, sell it, or give anyone else access to your individual results. Beyond generating and delivering your report to you, we only ever use responses in anonymised, aggregated form (see Section 3).

2. Information we collect

  • Assessment responses: the answers you give in our assessments, together with the demographic information you provide (such as age band, country, and how often you use AI).
  • Contact data: your email address, and any name or details you provide when contacting us or receiving a report.
  • Purchase data: when you buy a report, our payment processor handles your payment. We receive confirmation of payment and limited transaction details, but we do not receive or store your full card details (see Section 4).
  • Communications: emails, messages, and feedback you send us.
  • Usage data: standard technical information such as access times, page views, and device/browser information, used to operate and improve our website.

3. How we use your information, and our legal bases

We use your information for the purposes below. Where the UK/EU GDPR applies to you, the relevant legal basis is noted:

  • To generate and deliver your personal report — necessary to provide the service you requested (performance of a contract, and/or your consent).
  • To process your payment — necessary to complete your purchase (performance of a contract).
  • To conduct and publish anonymised, aggregated research — on the basis of the consent you provide when participating, and our legitimate interest in producing research. Published outputs contain no information that identifies you, and never include your individual report.
  • To improve our services and assessments — our legitimate interest in maintaining and improving what we offer. Any such use beyond delivering your report uses your data in anonymised, aggregated form, not your identifiable individual report.
  • To respond to your enquiries and provide support — our legitimate interest in communicating with you.
  • To send you marketing about new reports, findings, or offerings — only where you have given separate, optional consent (see Section 5). You can withdraw this at any time.
  • To meet legal obligations — where we are required to retain or disclose information by law.

4. Service providers we share information with

We do not sell your personal information, and we do not give anyone access to your individual report. We share information only with service providers who process it on our behalf, under contract, to operate our service. Our current service providers are listed below; we may change them from time to time and will keep this list up to date. They currently include:

  • Payment processing (Stripe) — to take payment securely. Your card details are handled by the processor, not by us.
  • Email delivery (Resend) — to send you your report and any communications.
  • Hosting and database (Railway; Supabase) — to operate our website and securely store assessment data and reports.
  • AI report generation (Anthropic) — your assessment responses are sent to an AI service to generate the written content of your personal report. This is integral to how the report is produced. Your responses are processed to create your report; they are not used to identify you publicly, and your report is not shared beyond delivering it to you.
  • Document / PDF generation (PDFShift) — to produce the downloadable PDF version of your report.

These providers may process data in countries other than your own. Where required, we put appropriate safeguards in place for international transfers (see Section 7).

5. Marketing — separate and optional

We will only send you marketing communications if you have specifically opted in — separately from taking an assessment or buying a report. Consenting to marketing is never a condition of using our services. You can withdraw your consent and unsubscribe at any time, using the link in any marketing email or by contacting us. Withdrawing marketing consent does not affect delivery of a report you have purchased.

6. How long we keep your information

Assessment responses and reports are retained so that you can re-access a report you purchased and so we can provide support, and thereafter for a reasonable period for operational integrity.

Anonymised, aggregated research data may be retained and published indefinitely, as it no longer identifies you.

Contact and marketing data is retained until you unsubscribe or ask us to delete it, subject to any legal retention requirements.

You can ask us to delete your personal information at any time (see Section 9).

7. International transfers

We operate from New Zealand and use service providers located in various countries. Your information may therefore be transferred to and processed outside your country of residence. Where the law requires it, we rely on appropriate safeguards (such as recognised adequacy decisions or standard contractual clauses) to protect your information when it is transferred.

8. Security

We use reasonable administrative, technical, and physical safeguards designed to protect your information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your rights and choices

Depending on where you live, you may have the right to:

  • access the personal information we hold about you;
  • correct inaccurate information;
  • delete your information ("right to erasure");
  • object to or restrict certain processing;
  • withdraw consent at any time (including for marketing);
  • request a copy of your information in a portable format; and
  • lodge a complaint with your local data-protection authority.

Nothing in this Policy limits any rights you have under the data-protection laws of your country of residence. To exercise any of these rights, contact us at info@humanclarityinstitute.com. We will respond within the timeframes required by applicable law.

10. Children

Our services are intended for adults. You must be at least 18 years old to take an assessment, purchase a report, or provide personal information. We do not knowingly collect personal information from anyone under 18.

11. Cookies and similar technologies

We and our service providers may use cookies and similar technologies for essential site functions, analytics, and performance. You can control cookies through your browser settings, though some features may not work properly without them.

12. Changes to this Policy

We may update this Policy from time to time. Changes take effect from the "Last updated" date above. Where changes are significant, we will take reasonable steps to make you aware.

Back to Terms & Conditions