Privacy Policy

This Privacy Policy is issued by Hudson Research Partners Inc., on behalf of itself and its affiliates. For the purposes of applicable data protection laws, Hudson is the Data Controller of the personal information described in this Policy.

This Policy applies to personal information processed when you:

• Visit our website at hudsonresearchpartners.com
• Engage Hudson as a client to commission expert research, surveys, or advisory services
• Participate in our network as an expert, advisor, or speaker
• Apply for a position at Hudson
• Contact us through any communication channel

This Policy does not apply to third-party websites or services that may be linked from our site. We encourage you to review the privacy policies of any third-party services you use.

The categories of personal information we collect depend on your relationship with Hudson.

Sensitive Data: Hudson does not knowingly collect sensitive personal information (e.g., racial or ethnic origin, political opinions, religious beliefs, biometric data, health information) unless required for a specific engagement and only with explicit consent.

We use personal information for the following purposes:

Where applicable data protection laws require a legal basis for processing personal information (such as the EU/UK GDPR or Korea's PIPA), Hudson relies on one or more of the following:

• Contract Performance: processing is necessary to perform a contract with you (e.g., expert engagement agreement, client services agreement)
• Legal Obligation: processing is required to comply with applicable law (e.g., tax records, anti-money laundering checks)
• Legitimate Interests: processing serves Hudson's legitimate business interests (e.g., conflict screening, fraud prevention, network operations) and does not override your rights and freedoms
• Consent: you have given specific, informed consent (e.g., session recording, marketing communications)

Hudson does not sell personal information. We share personal information only in the following circumstances:

Hudson operates globally. Personal information may be transferred to and processed in countries outside your country of residence, including jurisdictions that may not provide equivalent levels of data protection. When transferring personal information internationally, we implement appropriate safeguards, including:

• Standard Contractual Clauses approved by relevant authorities (e.g., the European Commission)
• Adequacy decisions by competent regulatory bodies
• Binding Corporate Rules where applicable
• Explicit consent for specific transfers, where appropriate

We retain personal information only for as long as necessary to fulfill the purposes outlined in this Policy, comply with legal obligations, or resolve disputes. Specific retention periods include:

• Engagement records and audit trails: 7 years from engagement completion (per regulatory requirements)
• Client and expert account data: duration of relationship plus 5 years
• Job applicant data: 12 months after application decision (longer with consent)
• Website analytics data: up to 24 months
• Marketing data: until you opt out

Upon expiration of the retention period, personal information is securely deleted or anonymized.

Hudson implements technical and organizational security measures designed to protect personal information against unauthorized access, alteration, disclosure, or destruction. These include:

• Encryption of data in transit (TLS) and at rest (AES-256)
• Access controls based on role and need-to-know principles
• Regular security audits and penetration testing
• Employee training on data protection and confidentiality
• Incident response procedures for security breaches

While we strive to protect your information, no security system is impenetrable. If we become aware of a breach affecting your personal information, we will notify you and relevant authorities as required by applicable law.

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Right to Access: request a copy of personal information we hold about you
• Right to Rectification: request correction of inaccurate or incomplete information
• Right to Erasure: request deletion of personal information ("right to be forgotten")
• Right to Restriction: request limitation of how we process your information
• Right to Portability: receive your personal information in a structured, machine-readable format
• Right to Object: object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent: where processing is based on consent, withdraw it at any time
• Right to Lodge a Complaint: contact your local data protection authority

To exercise any of these rights, please contact us at hudson@hudsonexperts.com. We will respond within 30 days, or earlier as required by applicable law.

Our website uses cookies and similar technologies to enhance functionality, analyze usage, and improve user experience. The categories of cookies we use include:

• Essential Cookies: required for the website to function (cannot be disabled)
• Analytics Cookies: measure traffic and engagement (e.g., Google Analytics)
• Functional Cookies: remember preferences and settings
• Marketing Cookies: deliver relevant advertising (with consent)

You can manage cookie preferences through your browser settings or our cookie consent banner. Disabling certain cookies may affect website functionality.

Hudson's services are intended for business and professional use. We do not knowingly collect personal information from individuals under the age of 18. If we become aware that we have collected information from a minor without verified parental consent, we will delete it promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. The "Last Updated" date at the top of this Policy indicates when changes were last made. Material changes will be communicated through our website or direct notification to active clients and experts.

For questions about this Privacy Policy or to exercise your rights, please contact our Data Protection Officer:

If you are located in the European Economic Area, United Kingdom, or another jurisdiction with a data protection authority, you have the right to lodge a complaint with that authority. In Korea, you may contact the Personal Information Protection Commission (PIPC) at www.pipc.go.kr.