Kanaka - Privacy Policy

KANAKA PRIVACY POLICY v3.0

Effective Date: June 02 2025
Last Reviewed: June 02 2025
Supersedes: January 07 2025
Jurisdiction: Delaware, USA
Operated By: iMAD Research Inc., 1209 N Orange Street, Wilmington DE 19801, USA
Website: www.kanaka.com

PRIVACY AT A GLANCE

Kanaka (“we,” “our,” “us”) is an online survey community and rewards program operated by iMAD Research Inc.
Your privacy matters. This Policy explains how we collect, use, protect, and disclose information through kanaka.com and related services.

Area	Summary
What We Collect	Name, email, IP address, demographic profile, survey responses, device data, reward records.
How We Collect It	From you (during registration, surveys, redemption); automatically (via cookies, logs); or from trusted research partners.
Why We Collect It	To operate the panel, deliver surveys and rewards, maintain security, and comply with law.
Legal Grounds	Consent (GDPR Art. 6 (1)(a)), contract (Art. 6 (1)(b)), legitimate interest (Art. 6 (1)(f)), and legal obligation (Art. 6 (1)(c)).
Sharing	With sub-processors and clients under Data Processing Agreements only; never sold.
Retention	2 – 3 years or as legally required; then securely deleted or anonymized.
Your Rights	Access, rectification, erasure, restriction, portability, objection, withdrawal of consent.
International Transfers	Protected by EU Standard Contractual Clauses (SCCs) and UK Addendum.
Security Measures	AES-256 encryption, TLS 1.3, MFA, Zero-Trust access, annual ISO 27001 audit.
Children	Services not for under 16 years.

1 – INTRODUCTION

This Privacy Policy (“Policy”) governs how Kanaka collects, uses, and protects the personal data of individuals who visit our site or participate in our panel.
By accessing or using the Kanaka website or services, you agree to this Policy and our Terms of Use. If you do not agree, please stop using the site and close your account.

This Policy is part of our overall compliance framework and is incorporated by reference into our panel membership agreement.

2 – INFORMATION WE COLLECT

2.1 Personal Identifiers

Name, email address, account ID, login credentials, IP address, and device information.
Optional profile data such as gender, age, region, language, and employment status.

2.2 Survey Data

Responses you submit in research surveys, including opinions, preferences, and ratings. Sensitive data (e.g., health, ethnicity) is collected only with explicit opt-in consent under GDPR Art. 9 (2)(a).

2.3 Reward and Transaction Data

Points earned, voucher IDs, and payment confirmations handled through secure third-party processors (e.g., PayPal or gift-card issuers). No credit-card numbers are stored by Kanaka.

2.4 Device and Analytics Data

Browser type, OS, screen resolution, time zone, referral URL, cookies, and analytics identifiers used to ensure data quality and detect fraud.

2.5 Communications

Emails, support tickets, and chat logs recorded for service quality and legal compliance.

3 – HOW WE COLLECT DATA

Source	Description
Direct	Registration forms, profile updates, survey responses, reward requests.
Automated	Cookies, pixels, and logs capturing session and fraud-prevention data.
Third Parties	Authorized sample partners and payment vendors acting as sub-processors.

We do not purchase consumer lists or use data from unverified sources.

4 – HOW WE USE YOUR INFORMATION

Kanaka processes your information for the following purposes:

Membership Management – create and maintain your account, authenticate logins.
Survey Operations – invite you to studies and analyze responses in aggregate.
Rewards Fulfillment – calculate points and deliver gift vouchers or payments.
Fraud Prevention – detect duplicate accounts and unauthorized access.
Communication – send policy updates, incentive notifications, and service messages.
Compliance – meet tax, audit, and record-keeping obligations.
Improvement – evaluate survey usability and enhance user experience.

We do not use survey answers to market products or determine eligibility for credit, employment, or insurance.

5 – LEGAL BASES FOR PROCESSING

Basis (GDPR Art.)	Application to Kanaka
Art. 6 (1)(a) – Consent	Joining the panel, participating in surveys, accepting cookies.
Art. 6 (1)(b) – Contract	Administering membership and reward delivery.
Art. 6 (1)(c) – Legal Obligation	Retaining financial records for tax or audit purposes.
Art. 6 (1)(f) – Legitimate Interest	Maintaining security, preventing fraud, improving services.

Where required by law, Kanaka obtains explicit consent and records it electronically.

6 – SHARING AND DISCLOSURE OF DATA

6.1 Within iMAD Group

Data may be shared with iMAD Research LLP (India) and iMAD Research Ltd (UK) for operational support under intra-group transfer agreements with SCCs.

6.2 With Sub-Processors

Category	Examples	Purpose	Safeguards
Hosting & Cloud	AWS, Azure	Secure data storage & backup	SOC 2 / ISO 27001 certified
Analytics	Google Analytics, Mixpanel	Website performance analysis	IP anonymization enabled
Email & CRM	SendGrid, HubSpot	Account notifications	Encryption in transit
Payments & Rewards	Tremendous, Tango Card, PayPal	Gift card delivery	PCI-DSS compliant

6.3 With Market Research Clients

Clients receive only aggregated or pseudonymized results. Personally identifiable information is never shared without your explicit consent.

6.4 Legal Requirements

We may disclose information if required by law, subpoena, or court order.

6.5 Mergers or Transfers

If Kanaka or iMAD Research is involved in a merger or acquisition, data will remain subject to this Policy until you are notified otherwise and offered opt-out options.

7 – HOW WE PROTECT YOUR INFORMATION

Kanaka maintains technical, organizational, and administrative safeguards designed to protect your data from loss, misuse, or unauthorized access.

7.1 Encryption and Access

All data transmitted between your browser and our servers is protected by TLS 1.3.
Stored data is encrypted using AES-256 encryption.
Access to production systems is role-based (RBAC) and protected by multi-factor authentication.

7.2 Operational Controls

24 × 7 intrusion detection and log monitoring (SIEM).
Daily incremental and monthly full backups stored in encrypted cloud regions.
Annual ISO 27001 and SOC 2 Type II audits.
Periodic penetration testing by independent assessors.

7.3 Incident Response

If a personal-data breach is detected:

Kanaka’s incident-response team evaluates within 24 hours.
Affected users and regulators (where required) are notified within 72 hours, per GDPR Art. 33.
Corrective and preventive measures are documented and reviewed.

8 – DATA RETENTION AND DELETION

Data Type	Purpose	Retention Period	Deletion Method
Panel Account Data	Authentication, participation history	Active account + 3 years	Secure erasure / anonymization
Survey Responses	Market research analytics	24 months post-project	Aggregation / de-identification
Rewards & Payments	Financial audit and tax records	7 years (minimum)	Encrypted archive → purge
Support Logs	Quality and training records	12 months	Automated deletion cycle

When deletion occurs, backups are overwritten during the next archival rotation (≤ 30 days).

9 – YOUR PRIVACY RIGHTS

Depending on where you live, you may exercise the following rights:

Right	Description	Applicable Regions
Access	Request a copy of personal data we hold about you.	Global
Rectification	Correct inaccurate or incomplete data.	Global
Erasure (“Right to be Forgotten”)	Delete your data when no longer needed.	EU/UK, California, Brazil, India
Restriction	Limit processing under certain conditions.	EU/UK
Portability	Receive your data in structured, machine-readable form.	EU/UK, Brazil
Objection	Object to processing based on legitimate interest.	EU/UK
Withdraw Consent	Revoke any previously given consent.	Global
Non-Discrimination	No differential service for exercising rights.	CCPA/CPRA US

How to exercise: Send a verified request to privacy@kanaka.com with “Privacy Request” in the subject.
We respond within 30 days (extendable by 60 for complex cases).

10 – COOKIES AND TRACKING TECHNOLOGIES

Kanaka uses cookies and similar tools to operate securely and improve your experience.

Category	Purpose	Retention
Strictly Necessary	Authentication, session management, fraud detection.	Session only
Analytics & Performance	Measure traffic and usage patterns (Google Analytics 4 with IP anonymization).	12 months
Functionality	Remember preferences (language, region).	6 – 12 months
Advertising/Targeting	Deliver non-intrusive Kanaka ads and survey invitations (if opted in).	12 months
Security	Detect malicious activity.	Session only

You can manage preferences through our Cookie Banner or your browser settings.
Details are provided in the Kanaka Cookie Policy v2.2.

11 – REGIONAL AND INTERNATIONAL PROVISIONS

11.1 European Union / UK ( GDPR & UK GDPR )

Kanaka acts as Data Controller for panel operations and Processor for client projects.
Cross-border transfers rely on Standard Contractual Clauses (2021/914) and the UK Addendum.
Data subjects may contact their local supervisory authority or our lead authority:
Dutch Data Protection Authority (Autoriteit Persoonsgegevens), The Hague, Netherlands.

11.2 United States (CCPA / CPRA / CalOPPA)

Kanaka does not sell personal information for value.
California residents may request access, deletion, and opt-out of data sharing.
Browser-based Global Privacy Control (GPC) signals are honored.
Privacy notice link is displayed on our homepage as required by CalOPPA.

11.3 India (Digital Personal Data Protection Act 2023)

Indian panelists may withdraw consent and request erasure at any time.
Local storage and processing occur under contract with iMAD Research LLP (Noida).

11.4 Brazil (LGPD) and Canada (PIPEDA)

Rights to confirmation, access, correction, and portability are available.
Data is processed based on consent or legitimate interest only.

11.5 Japan (APPI)

Sensitive data is handled under APPI Article 17-2; Kanaka provides prior notification before third-party disclosure.

12 – DATA CONTROLLER AND PROCESSOR ROLES

Role	Description
Data Controller	For panel membership, rewards, and account data, Kanaka decides the means and purposes of processing.
Data Processor	When conducting surveys on behalf of clients, Kanaka acts under written instructions via the Kanaka Data Processing Addendum v2.0.
Data Subjects	Individuals who join the panel or participate in research activities.

13 – CONTACT AND COMPLAINTS
Email: privacy@kanaka.com
Mailing Address:
iMAD Research Inc.
1209 N Orange Street, Wilmington, DE 19801 USA

If you believe your rights were not respected, you may contact your local Data Protection Authority or the Dutch DPA (listed above).

14 – CHANGES TO THIS POLICY

Kanaka reviews this Policy annually and whenever laws change.
Material updates will be communicated via email or dashboard notification before taking effect.
The “Effective Date” above reflects the latest version.

15 – ACKNOWLEDGMENT

By joining Kanaka or continuing to use our site, you confirm that you have read, understood, and accepted this Privacy Policy.