The short version: we collect what we need to run your account, match you with suitable tasks and pay you. We do not sell personal data. Requesters see your task answers, not your contact details. You can ask to see, correct or delete your data at any time.
1.Who we are
Coldab is an online marketplace for short tasks operated by PENNA PLC Company number 01918150, whose registered address is Folgate Building, 4 Norton Folgate, London, England, E1 6DB. For the purposes of UK and EU data protection law, PENNA PLC Company number 01918150 is the controller of the personal data described in this policy, which means we decide how and why it is processed.
If you have any question about this policy or how your data is handled, you can contact us at info@coldab.com. We read every message and aim to reply within one month, as the law requires, and usually much sooner.
2.Data we collect
We collect personal data in three ways: information you give us, information created when you use the service, and a limited amount from third parties.
- Registration details: your first and last name, email address, phone number and country code.
- Profile information: optional details such as age range, region, languages, devices and interests, used to match you with suitable tasks.
- Payment information: the payout method you choose and the details needed to send money to it. Card or bank details are handled by our payment providers and are not stored in full on our systems.
- Identity verification: where needed before a withdrawal or after unusual activity, a copy of an identity document and related checks.
- Usage data: tasks viewed, accepted, skipped and submitted, review outcomes, sign-in times, IP address, browser type and device information.
- Communications: messages you send to support and any feedback you choose to give.
From third parties, we may receive limited information from identity verification services, payment providers confirming that a payout succeeded, and fraud prevention tools that flag suspicious sign-ins. We do not buy marketing lists or combine your account with data from data brokers.
We do not ask for special category data, such as health, religion or ethnicity, as part of registration. A small number of research surveys may ask optional questions on these topics; they are clearly labelled, you can always choose "prefer not to say", and the answers are passed to the requester without your identity.
3.How we use it
We use personal data to provide and improve Coldab. In practice that means:
- creating and managing your account and confirming your email address;
- showing you tasks that suit your profile, preferred pace and devices;
- recording submissions, arranging reviews and calculating your balance;
- processing withdrawals and keeping accounting records;
- detecting duplicate accounts, fraud and misuse that would harm members or requesters;
- answering questions and resolving complaints;
- sending service messages, such as payment confirmations or changes to our terms;
- sending occasional updates about new task types, only where you have agreed or where the law allows, with an easy way to opt out.
We do not use your data to make decisions that have legal or similarly significant effects on you based solely on automated processing. Automated checks may flag unusual activity, but a person reviews any decision to suspend an account.
4.Lawful bases
Data protection law requires a lawful basis for each use of personal data. We rely on the following:
- Contract: to provide the service you signed up for, including accounts, tasks and payments.
- Legitimate interests: to keep the platform secure, prevent fraud, improve features and understand how the service is used, balanced against your rights.
- Legal obligation: to keep financial records, respond to lawful requests and meet tax or anti-money-laundering requirements.
- Consent: for optional marketing emails, non-essential cookies and certain tasks that collect voice or image data. You can withdraw consent at any time without affecting earlier processing.
5.Task content
When you complete a task, your answers, text, photos, recordings or ratings are passed to the organisation that requested them. Each task listing explains what will be collected before you accept it. We remove your name and contact details from submissions and replace them with a member reference, so requesters can see the work but not who you are.
Some tasks, such as voice recordings, may contain information that could identify you indirectly. These are clearly marked and require your consent. Please avoid including details about other people in photos, recordings or free-text answers unless a brief specifically allows it and you have their permission.
8.International transfers
Some of our service providers operate outside the United Kingdom or the European Economic Area. Where personal data is transferred to a country without an adequacy decision, we use recognised safeguards, such as the UK International Data Transfer Agreement or standard contractual clauses, and assess whether extra protections are needed. You can ask us for more information about the safeguards in place.
9.Retention
We keep personal data only for as long as we need it. Account and profile information is kept while your account is open. After you close your account, we delete or anonymise most data within a reasonable period, typically a few months, so that we can deal with any final payments or queries.
Financial records are kept for the period required by tax and accounting law, which in the UK is generally six years. Anonymised statistics that no longer identify you may be kept for longer to help us improve the service.
10.Security
We protect personal data with technical and organisational measures appropriate to the risk. These include encryption in transit and at rest, access controls based on job role, optional two-step verification for members, regular security testing and staff training. No online service can be completely secure, but we work hard to reduce risks and will notify you and the regulator if a breach is likely to affect your rights.
You can help by choosing a strong, unique password, switching on two-step verification and never sharing your sign-in details.
11.Your rights
Depending on where you live, you have rights over your personal data, including the right to:
- access a copy of the data we hold about you;
- ask us to correct inaccurate or incomplete data;
- ask us to delete your data in certain circumstances;
- restrict or object to certain processing, including direct marketing;
- receive your data in a portable format;
- withdraw consent where we rely on it.
To exercise any of these rights, email info@coldab.com. We may need to confirm your identity first. You also have the right to complain to the Information Commissioner's Office in the UK, or to your local data protection authority, although we would appreciate the chance to resolve your concern first.
12.Children
Coldab is intended only for adults aged 18 and over. We do not knowingly collect personal data from children. If we discover that someone under 18 has registered, we will close the account and delete the associated data. If you believe a child has signed up, please let us know.
13.Changes
We may update this policy as the service develops or the law changes. When we make significant changes, we will tell you by email or through a notice in the member area before they take effect. The current version is always available on this page.
14.Contact
For any privacy question or request, please contact:
PENNA PLC Company number 01918150
Folgate Building, 4 Norton Folgate, London, England, E1 6DB
Email: info@coldab.com