Privacy Policy

Effective date: 9 June 2026

This Privacy Policy explains how Harbor ML ("Harbor", "we", "us") collects, uses, shares, and protects personal information when you visit our websites, use our mobile applications, participate in contributor or expert programs, or otherwise interact with our services (collectively, the "Services").

1. Who we are

Harbor is operated by COLOR HOUSE LTD, registered in United Kingdom. We are the data controller for personal information processed through the Services unless we state otherwise in a separate agreement.

Registered address: 20-22 WENLOCK ROAD, LONDON, N1 7GU.
Privacy enquiries: privacy@harborml.com

2. Information we collect

We may collect the following categories of information:

• Account and profile data — name, email address, phone number, location, skills, work history, education, identity verification materials, and program preferences.
• Contributor and expert program data — task submissions, annotations, interview recordings, transcripts, quality scores, payout details, and communications with our team.
• Client and enterprise data — business contact details, project requirements, billing information, and usage of Harbor dashboards or APIs.
• Technical and usage data — IP address, device type, browser, app version, log files, cookies, and analytics about how you use the Services.
• Support and marketing data — messages you send us, demo requests, newsletter sign-ups, and event registrations.

3. How we use information

We use personal information to:

• Provide, operate, and improve the Services
• Create and manage accounts, authenticate users, and prevent fraud
• Match contributors and experts to programs and process payments
• Deliver datasets, annotations, QA workflows, and recruitment interviews
• Communicate with you about your account, programs, security, and service updates
• Comply with legal obligations and enforce our agreements
• Analyse usage to improve product quality, safety, and performance

We do not sell your personal data to third parties.

4. Legal bases for processing

Where UK GDPR or EU GDPR applies, we rely on one or more of the following legal bases:

• Contract — processing necessary to provide the Services you request or participate in a program
• Legitimate interests — securing our platform, improving Services, and operating our business, balanced against your rights
• Consent — where required for optional marketing, certain cookies, or sensitive processing
• Legal obligation — where we must retain or disclose information to comply with law

5. How we share information

We may share personal information with:

• Service providers that help us host infrastructure, process payments, send email, or run interviews
• Enterprise clients, where you participate in a program that requires vetting or delivery to that client
• Professional advisers, auditors, or authorities when required by law
• Successors in the event of a merger, acquisition, or restructuring

All service providers are required to protect personal information and use it only for the purposes we specify.

6. International transfers

Harbor may process or store information in the United Kingdom, European Economic Area, United States, or other countries where we or our providers operate. Where required, we use appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms.

7. Data retention

We retain personal information for as long as needed to provide the Services, meet legal and accounting requirements, resolve disputes, and enforce our agreements. Retention periods vary by data type and program.

8. Your rights

Depending on your location, you may have the right to:

• Access, correct, or delete your personal information
• Object to or restrict certain processing
• Withdraw consent where processing is consent-based
• Request portability of information you provided
• Lodge a complaint with the UK Information Commissioner's Office (ICO) or your local supervisory authority

To exercise these rights, contact privacy@harborml.com. We may need to verify your identity before responding.

9. Cookies and similar technologies

We use cookies and similar technologies to keep you signed in, remember preferences, measure site performance, and improve the Services. You can control cookies through your browser settings. Some features may not work correctly if cookies are disabled.

10. Security

We implement administrative, technical, and organisational measures designed to protect personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Children

The Services are not directed to children under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will take appropriate steps.

12. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated effective date. Continued use of the Services after changes take effect constitutes acceptance of the updated policy.

13. Related documents

Use of the Services is also governed by our Terms of Service.

14. Contact us

COLOR HOUSE LTD
20-22 WENLOCK ROAD
LONDON
N1 7GU
Email: privacy@harborml.com

Last updated: 9 June 2026