Privacy & legal

Last updated 18 August 2026

Privacy notice

This notice explains what personal data we collect through this website, why, and what you can do about it. It covers this website only. GivenGain and PayProp are separate services with their own privacy notices.

What this website collects

This site has no contact forms, no accounts, and no analytics. It sets no cookies, stores nothing in your browser, and loads no third-party scripts, fonts, or trackers. Because of that, there is no cookie banner: there is nothing to consent to.

Three things still involve personal data.

If you email us. Writing to info@humanstate.com sends us your email address, your name if you give it, and whatever you put in the message. We use it only to reply and to deal with what you raised.
If you apply for a job. Writing to careers@humanstate.com sends us whatever you choose to include, typically your CV, work history and contact details. We use it only to consider you for a role and to talk to you about it.
Server logs. The site is hosted on Cloudflare Pages. Like any web host, Cloudflare records technical information about requests, including IP addresses, for security and to keep the service running. An IP address counts as personal data.

Our lawful basis

For replying to your email, our basis is legitimate interests: you contacted us and expect an answer. For job applications, our basis is taking steps at your request before entering into a contract of employment. For server logs, our basis is also legitimate interests, specifically keeping the site secure and available.

Who else sees your data

Cloudflare, Inc. hosts this website and processes request logs on our behalf.
Google (Google Workspace) hosts our email and therefore handles messages you send us.
Stripe processes payments if you become a paying customer of one of our services. Stripe handles card details directly; we never see or store them.

We do not sell your personal data, and we do not share it for advertising.

How long we keep it

We keep email correspondence for as long as we need it for the matter you raised and for our own business records, then delete it. If you apply for a role and we do not hire you, we keep your application only as long as we have a reason to, and you can ask us to delete it sooner. Hosting logs are kept for a short period by our host as part of their normal operation.

Where your data goes

Our suppliers may process data outside the UK. Where that happens, the transfer relies on the safeguards those suppliers have in place, such as the UK International Data Transfer Agreement or an adequacy decision.

Your rights

Under UK data protection law you can ask us to give you a copy of the personal data we hold about you, correct it if it is wrong, delete it, restrict how we use it, or object to us using it. You can also ask for it in a portable format where that applies.

To exercise any of these, email info@humanstate.com.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk. We would rather you raised it with us first so we can put it right.

Changes

If we change this notice we will update the date at the top of this page.

← Back to Humanstate