Trust and compliance
Careful by design.
This page sets out, factually, how we check rights, protect personal data and work within the law. If you have a question it doesn't answer, write to us.
How we verify rights
We only license material that a business created itself or commissioned with the rights to license it. Material obtained from third parties — supplier catalogues, stock images, licensed content — is excluded unless the business can show it holds rights that permit this use.
For each source we record how the material was created, who created it, and the basis on which the business holds the rights. The business confirms these facts in a written agreement before any data is transferred.
Where the position is unclear, we leave the material out.
How we anonymise data
Before data is combined into a dataset, we identify personal data it contains: names, contact details, identification numbers, addresses, faces and voices of identifiable people, and free-text references to individuals.
Depending on the data, we remove these elements, replace them with neutral placeholders, or exclude the record entirely. Anonymisation is aimed at ensuring individuals cannot be identified, directly or indirectly, from the delivered data.
The method used for each dataset is documented and delivered with it, so buyers know what was done and can assess it themselves.
Data protection law
We work within applicable data protection law, including the EU General Data Protection Regulation (GDPR) and Türkiye's Personal Data Protection Law No. 6698 (KVKK), as well as other laws that apply where our suppliers and buyers operate.
Our approach is to avoid processing personal data wherever possible. Where personal data must be handled during cleaning, it is processed only for the purpose of removing or anonymising it, and only for as long as that takes.
Customer personal data collected without consent for this kind of use is not licensed.
Handling and access
Data received from businesses is stored in access-controlled systems and is only available to the staff working on that engagement. Raw data is kept separate from processed datasets.
Every record in a delivered dataset keeps a link to its source, so we can answer questions about origin, and act on them, after delivery.
Contracts on both sides
Suppliers sign an agreement setting out what they are licensing, the rights they confirm, and how they are paid. Buyers sign a license setting out permitted uses and restrictions.
We do not license data for uses a supplier has excluded, and we do not resell data outside the terms of the license.