Privacy Policy
Location: Philippines - English
PRIVACY POLICY
Last updated: March 11, 2025
Thank you for visiting Arkipelago Analytics (“we”, “us”, or “our”). We are a Philippine-based data science company that specializes in surveys and research. We take your privacy and data security very seriously and believe that everyone’s personal data should be handled responsibly and ethically. We know that without your trust, we could not produce the research insights that help our clients make better decisions.
If you have any questions about this Privacy Policy, or about how we collect, store, and use personal data, please email us at dataprotection@arkipelago.asia.
Introduction
This Privacy Policy explains how Arkipelago Analytics, along with our Data Controller, NightOwl AI Ltd, based in London, collects, uses, shares, and protects the personal data of individuals who participate in our surveys or otherwise interact with our services (collectively, our “Services”).
We’ve tried to make this notice as clear and accessible as possible. If anything is unclear, please contact us, and we will be happy to clarify.
Who We Are and Our Role as Data Controller
Arkipelago Analytics is a data science company registered in the Philippines.
NightOwl AI Ltd (the “Data Controller”) is a company based in London, United Kingdom.
For purposes of Philippine data protection laws and, where applicable, other global data protection regulations (such as the UK General Data Protection Regulation (“UK GDPR”)),
NightOwl AI Ltd determines how and why your personal data is processed. Arkipelago Analytics processes personal data on behalf of NightOwl AI Ltd and in accordance with this Privacy Policy.
If you have any questions, concerns, or requests regarding your personal data, you may contact us at:
What This Notice Covers
We rely on the use of personal data to conduct surveys and provide research insights. This notice sets out:
The personal data we may collect from you;
How and why we use your personal data;
Why we may share personal data within our organization and with other organizations; and
The rights and choices you have when it comes to your personal data.
Personal Data We Collect
We collect various categories of personal data in the course of providing our Services. The type and amount of data we collect depend on how you interact with us.
4.1 Data You Provide Directly
When You Register | Contact details: such as your name, email, and address or postal/ZIP code Demographic data: such as your age, gender, economic, and household information Account login details: your email address (or other login credential) and a password or PIN code Referral partner IDs: if you arrived on our website via an advertisement or through one of our recruitment partners |
When You Participate in Surveys or Other Research Opportunities | Information you share: about your opinions, preferences, habits, and activities (e.g., shops you frequent, TV shows you watch, or products you own) Device and browser metadata: IP address, make/model/operating system of your device, browser type, and other technical information that is collected automatically |
When You Participate in Qualitative Research (Online or In-Person) | Your opinions on the research topics Recordings: we may record these interviews or focus groups, but only if you are notified in advance and given the option to decline participation |
When You Use Our Website or Mobile Apps | Cookies and similar technologies: as further explained in the Cookies section below |
When You Contact Us or Interact with Our Social Media Pages | Any personal data you provide (e.g., name, contact details, and conversation history) Comments you make on our website or social media pages |
When You Redeem Your Points or Rewards | Payment details: bank account or payment platform details (e.g., PayPal email) so we can process reward payments |
4.2 Sensitive Personal Data
Some data you provide may be considered “sensitive” under applicable data protection laws (e.g., information about your race, ethnic origin, religious or philosophical beliefs, health, or sexual orientation). Where required by law, we will obtain your explicit consent before collecting or processing these data.
If you are under the age of majority and require parental permission to participate, by participating, you confirm you have that permission and can provide evidence of it if needed.
4.3 Personal Data Collected from Other Sources
We may also obtain personal data about you from:
Public sources: such as public registers or public websites (e.g., social media platforms, subject to their terms and conditions).
Acquisition partners: if you sign up with an organization that offers opportunities from companies like us, that organization may share your name and contact details with us so we can invite you to participate.
Our clients: who may ask us to combine survey data with information they already hold. We will only agree to do this in a way that does not re-identify you, or if you explicitly consent to be identified.
Segmentation partners / Other companies that sell data: we may purchase data to derive additional insights (e.g., consumer classifications) and match them to your personal data under strict contractual safeguards.
Email invitations from third-party lists: we may obtain your email address from a reputable third-party list provider. We will only use these addresses where the law permits, and you will always have the right to opt out of further emails at no cost.
How Long We Keep Your Data
We retain your personal data only for as long as necessary to fulfill the purposes described in this policy or as required by law. This typically means we keep most of your data for as long as you maintain an active account with us so we can continue to offer you survey opportunities.
However, certain data may be deleted sooner. For example, we delete video recordings from qualitative research once they are no longer needed. If you withdraw your consent or request erasure (see Section 9, “Your Rights”), we will delete or anonymize your personal data, subject to any legal obligations to retain certain records.
How and Why We Use Your Personal Data
We use your personal data in a variety of ways to provide and improve our Services. Our legal basis for processing your personal data generally relies on legitimate interests (to conduct our surveys and operate as a business) and, where applicable, consent (particularly for sensitive data or sharing data in specific ways).
6.1 Basic Survey and Research Purposes
Register, Authenticate, and Administer Your Account | We use your email and password/PIN to verify your identity and manage your participation. |
Select and Invite You to Participate: | We use demographic data and past survey responses to offer you relevant research opportunities. |
Reward You | We collect and use payment details to process rewards and inform you about points, prizes, or incentives. |
Produce Aggregated and Anonymized Research | We combine your responses with others’ in reports and insights shared with our clients or published publicly. No personally identifiable information (PII) will be revealed in these reports. |
Create Public Content | We may use data to write articles or create public-facing results. These will not reveal your identity. |
Improve Our Services | We use data for internal analytics, to refine our questions, and enhance user experience. |
Respond to Your Queries | When you exercise data subject rights or otherwise contact us, we use your data to respond effectively. |
Detect and Prevent Fraud | We may analyze IP addresses or repeated questions to detect unusual or fraudulent activity. |
Perform Sanctions Checks | Under certain circumstances, we may share personal data with third-party providers to help ensure compliance with anti-money laundering and similar laws. |
Important: If you do not wish us to use your personal data in these ways, you may decline to provide data or choose to unsubscribe from our services.
6.2 Advanced Research, Modeling, and Targeted Advertising
Sharing Data with Trusted Partners
With your consent, we may share certain personal details (e.g., name, email, postal code) or online identifiers (e.g., cookie IDs) with selected partners.
These partners use your data to improve or create products and services (e.g., consumer segmentations) and to create “lookalike” modeling for advertisers.
You can opt out or withdraw consent at any time by contacting us or updating your preferences in your Arkipelago Analytics account settings (if applicable). Withdrawing consent will not affect the lawfulness of processing before withdrawal.
Showing You Targeted Ads Within Our Services
In some cases, we may ask for your consent to show you ads in our surveys, website, or apps that are relevant to your interests.
Because this occurs within our own systems, we do not share your personal data with advertisers unless you provide additional consent.
Who We May Share Your Personal Data With
7.1 Within Our Organization
Because Arkipelago Analytics is part of a global operation involving NightOwl AI Ltd, your personal data may be transferred to and processed by other entities within our group if necessary for the purposes outlined in this policy. This includes data storage, support, and analytics functions.
7.2 Our Clients
Our business primarily delivers aggregated or anonymized data to clients. However, occasionally a client may request to combine your survey data with their own data for deeper analysis. We will only facilitate this if:
You explicitly consent to share identifiable information; or
The combined dataset is sufficiently anonymized so that you cannot be identified.
7.3 Our Service Providers (Processors)
We work with trusted third parties who provide important functions on our behalf, such as:
Payment processors (to handle cash incentives, gift cards, etc.)
Data hosting and cloud storage (where your data is securely stored)
Research technology providers (survey platforms, analytics tools)
Communications platforms (email distribution, customer support systems)
Sanctions check providers (to comply with anti-money laundering or similar regulations)
Each third party only has access to data needed to perform their specific services. They are contractually obligated to protect your data and only process it according to our instructions and applicable laws.
7.4 Segmentation Partners / Data Enrichment Companies
We may share certain personal data (e.g., name, email, postal code) with partners to match it against their datasets. This allows us to classify you into segments (e.g., demographic, lifestyle groupings). As with any service provider, we have strict contractual safeguards to ensure that personal data is not misused.
7.5 Acquisition Partners
If you registered through an organization that promotes our Services, that organization may provide us with your name and contact information. We may send referral IDs back to the partner for tracking and payment purposes.
7.6 Other Organizations
We may share personal data if:
Required by law or regulation (including disclosures in response to lawful requests by government authorities).
Necessary to establish, exercise, or defend our legal rights (e.g., with lawyers or consultants).
Business Transfers: if we restructure, sell, or transfer assets, or merge with another entity, personal data may be disclosed as part of that transaction.
International Transfers
Because NightOwl AI Ltd is located in the United Kingdom and Arkipelago Analytics is based in the Philippines, your personal data may be transferred outside of your home country. We take all reasonable measures to ensure that any international transfers comply with applicable data protection laws, including using:
Standard Contractual Clauses (SCCs) or equivalent where required, ensuring that the recipient is bound to protect your data to standards comparable to those in your home jurisdiction.
Adequacy decisions where available (e.g., if a relevant authority deems a country’s laws provide an adequate level of data protection).
How We Store and Protect Your Personal Data
We employ technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:
Secure data centers with robust physical and digital security.
Encryption of data in transit (TLS) and at rest (AES256).
Regular vulnerability scanning, penetration testing, and system monitoring.
Access limitations: Only authorized staff and contractors who need personal data to perform their job responsibilities have access to it.
Mandatory security and privacy training for our staff and contractors.
10. Emails and Notifications
We may contact you via email, SMS, push notifications, or other channels to:
Invite you to research opportunities (a core function of our service).
Notify you of news or updates related to your account or your participation in our surveys.
Promote referral programs so you can invite friends or family.
We rely on our legitimate interests (to operate our surveys and keep participants informed) as our legal basis for these communications. You can opt out of non-essential communications by following the unsubscribe link or instructions in the message, or by contacting us.
Cookies and Similar Technologies
We use “cookies” and similar technologies to provide and improve our Services.
11.1 Types of Cookies We Use
Strictly Necessary Cookies
Required for our website to function properly (e.g., privacy preference settings, logging in).
Include survey cookies such as pmx-tk to ensure you can resume surveys without repeating questions.
These cookies do not store personally identifiable information.
Performance Cookies
Help us understand how visitors navigate our website, which pages are most popular, etc.
All information is aggregated and anonymous.
Partner Cookies
Used (with your consent) to match your survey data with partners’ data using common online identifiers.
Partners use these data to improve their products or create lookalike models for advertisers.
You can opt out at any time; see Section 6.2 or the Permissions page in your account settings.
11.2 Managing Cookies
When you first visit our site, you can choose to accept or reject non-essential cookies.
You can also adjust your browser settings to block cookies; however, this may limit certain website functionalities.
If you have previously consented to partner cookies through one of our surveys, you can withdraw your consent in your account settings or by contacting us.
Your Rights
Depending on applicable laws (e.g., the Philippines Data Privacy Act, UK GDPR), you may have certain rights regarding the personal data we hold about you. These may include:
Right to Know / Access: request a copy of your personal data and information about how we have processed it.
Right to Correct / Rectify: ask us to correct any inaccurate or incomplete data.
Right to Erasure / Delete: request deletion or anonymization of your personal data.
Right to Data Portability: receive your data in a structured, commonly used, and machine-readable format.
Right to Withdraw Consent: where processing is based on consent, you can withdraw it at any time.
How to Exercise Your Rights
Email us at righttoknow@arkipelago.asia. We may request additional information to verify your identity.
We will respond within a reasonable timeframe (generally within one month). If certain rights do not apply to you, we will explain why.
You also have the right to lodge a complaint with the relevant data protection authority if you believe your rights have been infringed. In the Philippines, this is the National Privacy Commission (NPC). However, we encourage you to contact us first to address any concerns.
13. Updates to This Privacy Policy
This Privacy Policy was last updated on the date indicated at the top. We may update this policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. If we make material changes, we will notify you via email or other appropriate means. If you object to any future changes, you may unsubscribe or request deletion of your data.
14. How to Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at: dataprotection@arkipelago.asia.
Thank you for taking the time to read our Privacy Policy. Your trust is important to us, and we are committed to keeping your personal data secure and using it only for legitimate and transparent purposes. If you have any questions or concerns, do not hesitate to reach out. We appreciate your participation in our surveys and look forward to your continued engagement.