SPECIALIST PRIVACY NOTICE

The Specialist Network — Grayde.ai

Effective date: 5 June 2026
Last updated: 5 June 2026

This notice explains how we collect and use the personal data of specialists who register for, are assessed for, or provide services through The Specialist Network. It sits alongside our Specialist Terms of Service; capitalised terms not defined here have the meaning given there.

1. Who we are

Milestone Localization (UK) Limited (registered in England and Wales, company number 13815521), registered office Corner Oak, 1 Homer Road, Solihull, United Kingdom, B91 3QG, trading as Grayde.ai ("we", "us", "our"), is the controller of your personal data.

Questions about this notice, or to exercise your rights, contact us at legal@grayde.ai.

2. The personal data we collect

You give us:

Registration and account data — name, email, phone, country of residence, account credentials, languages, and the profile information you enter.
Verification and credentialing data — identity documents, professional registration numbers (for example medical or pharmacy registers), qualifications, academic identifiers and publications (for example ORCID, Google Scholar), work history, references, and right-to-work evidence.
Skills-assessment data — your responses to tests, sample tasks and interviews, and the scores and evaluations resulting from them.
Performance data — records of the Tasks you accept and complete, quality and audit results, and feedback.
Payment and tax data — payment-account details (in your own name), tax identifiers, invoices and payment records.
Communications — messages, support requests and survey responses.

We collect automatically:

Technical and usage data — IP address, device and browser details, approximate location, log and activity data, and cookies and similar technologies on our websites.
Integrity signals — VPN, proxy, location and duplicate-account detection signals used to protect platform security and quality.

We receive from third parties:

identity-verification and background-screening providers;
public professional registers, academic and publication sources, and references you nominate;
our payment provider (for example tax and transaction data); and
sanctions and watch-list screening sources.

Special-category and criminal-offence data. We try to avoid special-category data about you. Some may arise incidentally (for example your nationality from right-to-work checks). Where the Terms require you to notify us of an arrest, charge or conviction, or where a background check returns such information, we process criminal-offence data. We process these categories only where a condition under the UK GDPR (Articles 9 and 10) and the Data Protection Act 2018 applies — typically employment and contract obligations, substantial public interest (including fraud prevention and safeguarding), the establishment or defence of legal claims, or your explicit consent.

3. How and why we use your data, and our legal basis

Where the law requires us to identify a legal basis (for example in the UK and EU/EEA), the bases are set out below.

Purpose	Data used	Legal basis
Create and operate your account; make the Platform available; allocate and manage Tasks; pay you	Registration, performance, payment data	Performance of our contract with you; our legitimate interests in running the Platform
Verify your identity, qualifications and right to work	Verification and credentialing data; third-party data	Legitimate interests (platform integrity and client assurance); legal obligation (right-to-work, sanctions)
Protect security, prevent fraud, and maintain quality (including VPN/location and duplicate-account checks)	Integrity signals, technical, account, performance data	Legitimate interests in security, fraud prevention and quality; legal obligation where applicable
Process payments and meet tax and accounting duties	Payment and tax data	Performance of our contract; legal obligation
Communicate with you about your account, Tasks and these notices	Registration and communications data	Performance of our contract; legitimate interests
Send optional updates, opportunities or marketing	Registration and communications data	Consent (you can withdraw at any time); legitimate interests for service updates
Improve and develop our services and systems	Usage, performance and technical data (aggregated or anonymised where possible)	Legitimate interests in improving our services
Comply with law, respond to authorities, and establish or defend legal claims	Any relevant data	Legal obligation; legitimate interests in protecting our rights

Where we rely on legitimate interests, we have balanced those interests against your rights; you can ask us for more detail or object (see section 8).

Using your data to train AI. We do not use your personal data to train AI models in a form that identifies you, except with your consent. Aggregated or anonymised data may be used to improve our services and systems. Separately, the Deliverables you produce (which are generally not your personal data) may be used as described in the Terms.

Our affiliates, including our parent company Milestone Localization Private Limited (India), to operate and support the Platform.
Clients, on a need-to-know basis, to match you to projects and to evidence that we have verified you (for example relevant profile, credentials and skills information, and, where a project requires it, Deliverables and quality records).
Service providers acting on our instructions, such as cloud hosting, identity and background verification, payment processing, fraud and proxy detection, CV/credential parsing, communications and analytics.
Authorities, regulators, courts and advisers, where required by law or to establish or defend legal claims.
A buyer or successor, in connection with a corporate transaction.

We do not sell your personal data.

5. International transfers

We operate globally, and your data may be transferred to and accessed from countries outside the UK and EEA, including India (our parent company) and the locations of our Clients and service providers. Where we transfer personal data to a country without an adequacy decision, we put appropriate safeguards in place, such as the UK International Data Transfer Agreement and the EU Standard Contractual Clauses.

6. How long we keep your data

We keep personal data only as long as necessary for the purposes above and to meet legal, tax and limitation requirements. As a guide:

Account and profile: stored as long as you have an account with us.
Identity and background-check results: stored as long as you have an account with us and 1 year after.
Payment, tax and contract records: may be stored indefinitely.
Criminal-offence data: may be stored indefinitely.
Communications and support records: may be stored indefinitely.
Aggregated or anonymised data: may be kept indefinitely, as it no longer identifies you.

7. Your rights

Subject to applicable law, you may: access your data; have inaccurate data corrected; have data erased; restrict or object to processing (including profiling and direct marketing); receive your data in a portable format and withdraw consent at any time (without affecting prior processing).

To exercise any right, email legal@grayde.ai. We may need to verify your identity, and we will respond within the time the law allows.

Complaints. If you are in the UK, you can complain to the Information Commissioner's Office (ico.org.uk). If you are in the EU/EEA or another region, you can complain to your local supervisory authority. We would welcome the chance to address your concerns first.

8. Cookies

Our websites use cookies and similar technologies for essential functionality, security and analytics. Where required, we ask for your consent and let you manage non-essential cookies.

9. Security

We use appropriate technical and organisational measures to protect your data, including access controls, encryption in transit, and processing within approved environments. No system is completely secure, but we work to protect your data and to detect and respond to incidents.

10. Children

The Platform is for people aged 18 or over (or the age of majority where you live, if higher). We do not knowingly collect data from anyone under that age.

11. Changes to this notice

We may update this notice from time to time and the latest version will be posted on this page. The "Last updated" date shows the latest revision.

12. Contact us

Milestone Localization (UK) Limited, trading as Grayde.ai
Registered office: Corner Oak, 1 Homer Road, Solihull, United Kingdom, B91 3QG
Privacy contact: legal@grayde.ai