Privacy Notice
Scope and Applicability
This Privacy Notice applies to personal information processed by Kari Inc., 30 N Gould St #68484, Sheridan, WY 82801, USA, in connection with kariresearch.com, business enquiries, client relationships, directly managed panel communities, survey routing, research operations and related support services.
Where applicable, this Notice is intended to address the requirements of the EU General Data Protection Regulation (GDPR), the UK General Data Protection Regulation (UK GDPR), and applicable U.S. state privacy laws, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA). The precise rights and obligations that apply depend on the individual’s location, the processing activity, and Kari’s role in that activity.
Controller and Processor Roles
Kari Inc. generally acts as a controller when it determines the purposes and means of processing website visitor data, business-contact data, enquiry data, directly managed panelist data and related operational records. Kari Inc. may act as a processor or service provider when it processes pseudonymized research or respondent information solely under a client’s documented instructions. The applicable agreement governs the parties’ roles for each project.
Information and Purposes
Depending on the service, we may process contact information, professional information, internet or device information, anti-fraud and behavioral data, panel-profile data, and survey or project-related data. We use this information to operate services, manage panels, deliver research, prevent fraud, support quality control and security, and meet legal obligations.
U.S. Storage and International Transfers
Personal information is primarily stored and processed in the United States. Where personal information is transferred internationally, Kari Inc. uses safeguards appropriate to the originating jurisdiction, which may include data processing agreements, Standard Contractual Clauses, adequacy mechanisms, or other legally recognized transfer tools.
Retention
Ordinary feasibility enquiries, project data and anti-fraud logs are retained for no longer than six months, unless a shorter period is appropriate. Payment, tax, contractual, dispute, audit and other records subject to legal or contractual retention obligations may be retained for the period required by those obligations. Information is deleted, anonymized or restricted from ordinary use when it is no longer required.
GDPR and UK GDPR Rights
Where applicable, individuals may request access, correction, deletion, restriction of processing, objection, portability, withdrawal of consent, or human review of qualifying automated decisions. Contact privacy@kariresearch.com. Individuals may also complain to the competent supervisory authority in their location.
Notice for California Residents
California residents may have rights to know, access, delete, correct, limit the use of sensitive personal information where applicable, and not be discriminated against for exercising privacy rights. Kari processes categories that may include contact information, professional information, internet or device information, anti-fraud and behavioral data, panel-profile data, and survey or project-related data for service operation, panel management, research delivery, fraud prevention, quality control, security, and legal obligations.
If an activity constitutes a sale or share under CCPA/CPRA, a California resident may submit a Do Not Sell or Share request using the link in the site footer or by emailing privacy@kariresearch.com.
Children and Sensitive Research
Kari Inc. does not knowingly direct its general business or research services to children. Where a study involves children or other vulnerable participants, Kari applies study-specific safeguards, including legally required parental or guardian consent and market-appropriate protections.
For privacy questions or requests, contact privacy@kariresearch.com.
These website terms provide general information and do not replace an executed Master Services Agreement, Statement of Work, Data Processing Agreement, or other project-specific contract. Where documents conflict, the executed agreement controls.