Privacy Notice
DMX Analytics Inc.
Version 1.0 · Effective [EFFECTIVE DATE]
1. Who we are and what this covers
DMX Analytics Inc. ("DMX", "we", "us") is a Delaware corporation. We publish $BIRTH, an index of realized United States births, and related data products.
This notice explains what personal information we collect, why, what we do with it, and what rights you have. It covers dmxanalytics.info, registration for $BIRTH Public, and our communications with you.
For the purposes of the UK and EU General Data Protection Regulation, DMX is the controller of the personal information described here.
Our use of the $BIRTH data itself is governed by the Terms of Use. This notice is about you, not about the index.
One thing worth saying plainly at the top: the Index is built entirely from aggregate birth statistics published by state authorities. It contains no information about any identifiable individual, and no data about you or anyone else ever enters it. Everything in this notice concerns your registration and your use of the site — nothing more.
2. The short version
| What we collect | Your name, work email, organization, organization type, and role at registration; your answers to optional questions; how you use $BIRTH Public; standard technical data from your browser |
| Why | To give you the Index, to understand who uses it and for what, to improve our products, and — only if you opt in — to send you news about DMX |
| Do we sell it? | No. We do not sell personal information and we do not share it for cross-context behavioral advertising |
| Do we track you across other sites? | No. We use no advertising or cross-site tracking technology |
| How long | While you're registered, plus a limited period afterwards — Section 8 |
| Your rights | Access, correct, delete, object, port, withdraw consent — Section 9 |
| Contact | [privacy@dmxanalytics.info] |
3. What we collect
3.1 Information you give us
At registration: your full name, work email address, organization name, organization type, and role.
If you register without an organizational email address: the short description of your work that you provide on that path, which we use to decide whether to approve the registration.
Optional questions after registration: what you would use $BIRTH for, and which states or jurisdictions matter to you. These are optional; leaving them blank does not affect your access.
If you contact us: the content of your message and our correspondence with you, including any methodological feedback you send us.
If you book a meeting: scheduling is handled by a third-party provider and is subject to its own privacy notice as well as this one.
3.2 Information we collect automatically
Usage information. Which prints you download and when, whether you download the Methodology Paper, which pages you visit on the site, and when you last visited.
We want to be direct about this rather than bury it: we use this information to decide who to contact about our paid products. If you download three consecutive prints and read the pricing page, we may take that as a signal that a conversation would be useful and get in touch. You can object to this at any time (Section 9), and doing so does not affect your access to $BIRTH Public.
Technical information. IP address, browser type and version, device type, operating system, referring page, and timestamps, recorded in standard server logs.
Cookies. See Section 10.
3.3 What we do not collect
We do not collect special-category data (health, biometric, political, religious, or similar), we do not knowingly collect information from children, and we do not buy personal information from data brokers or list vendors.
4. Why we use it, and our legal basis
Where the UK or EU GDPR applies, we must have a lawful basis for each use. The table sets out both.
| What we do | Why | Lawful basis (UK/EU GDPR) |
|---|---|---|
| Create and administer your registration; send the confirmation email | To provide $BIRTH Public to you | Performance of a contract, and steps taken at your request before entering it (Art. 6(1)(b)) |
| Verify that you control the email address you gave us | To keep the register accurate and prevent misuse | Legitimate interests — accuracy and security (Art. 6(1)(f)) |
| Send you each monthly print and service messages about $BIRTH Public | To deliver what you registered for | Performance of a contract (Art. 6(1)(b)) |
| Review registrations made without an organizational email | To decide whether to approve access | Legitimate interests — deciding who to contract with (Art. 6(1)(f)) |
| Understand who uses the Index and for what purposes, in aggregate | To improve the Index and prioritize which jurisdictions we onboard next | Legitimate interests — developing our products (Art. 6(1)(f)) |
| Use your engagement with $BIRTH Public to identify who may be interested in our paid products, and contact you about them | To sell our products | Legitimate interests — direct marketing to business contacts (Art. 6(1)(f)); you may object at any time |
| Send you product updates and news you asked for | Because you opted in | Consent (Art. 6(1)(a)); you may withdraw at any time |
| Keep the site secure, prevent abuse, enforce the Terms of Use | To protect the service and our rights | Legitimate interests — security and enforcement (Art. 6(1)(f)) |
| Keep records, comply with law, establish or defend legal claims | Because we have to | Legal obligation (Art. 6(1)(c)); legitimate interests (Art. 6(1)(f)) |
5. Marketing
We will only send you marketing about DMX products if you asked us to, by ticking the separate, optional box at registration.
You can unsubscribe at any time using the link in any marketing email, or by writing to us. Unsubscribing takes effect promptly and does not affect your access to $BIRTH Public or the service messages you receive as a registrant.
Note that we will keep a record of your unsubscribe. We have to retain your email address on a suppression list in order to remember not to email you — deleting it entirely would risk contacting you again if you later appeared in another list.
Separately from opted-in marketing, we may occasionally contact you about our paid products where your use of $BIRTH Public suggests they may be relevant, as described in Section 3.2. You may object to this at any time and we will stop.
6. Who we share it with
We do not sell your personal information, and we do not share it for advertising.
We share it with:
Service providers who process it on our behalf, under contract, and only on our instructions:
- website and application hosting
- transactional and marketing email delivery
- database and infrastructure hosting
- meeting scheduling
- privacy-respecting website analytics
Professional advisers — lawyers, accountants, auditors — where they need it to advise us.
Authorities or other parties where we are required to by law, or where we need to establish, exercise, or defend legal claims.
A buyer or successor, if DMX is involved in a merger, acquisition, financing, or sale of assets. We would tell you if your information became subject to a different privacy notice as a result.
7. International transfers
DMX operates from the United States, and your information is stored and processed there.
If you are in the United Kingdom, the European Economic Area, or Switzerland, this means your information is transferred outside your home jurisdiction. Where we make such transfers we rely on appropriate safeguards, including the UK and EU Standard Contractual Clauses and the UK International Data Transfer Addendum, or another lawful transfer mechanism. You may request a copy of the relevant safeguards by writing to us.
8. How long we keep it
| Information | Retention |
|---|---|
| Registrations that were never email-confirmed | Deleted 30 days after signup |
| Active registrations | While your registration is open, and for [24] months after it closes or after your last activity, whichever is later |
| Record of Terms acceptance (version, timestamp, email) | [7] years from the end of the registration, so that we can show what was agreed and when |
| Marketing suppression list | Indefinitely, so that we can honor your unsubscribe |
| Correspondence with us | [3] years from the last message |
| Server logs | [90] days |
We delete or anonymize information at the end of these periods, except where we are required to keep it longer by law or need it for a legal claim that is underway.
9. Your rights
Everyone, wherever you are. You can ask us to give you a copy of your information, correct it if it's wrong, or delete it. You can close your registration at any time. Write to [privacy@dmxanalytics.info] and we will respond within 30 days.
If you are in the UK, the EEA, or Switzerland, you additionally have the right to:
- access your personal information and information about how we process it;
- rectify inaccurate or incomplete information;
- erase your information in certain circumstances;
- restrict processing in certain circumstances;
- object to processing based on legitimate interests, including profiling — and to object to direct marketing at any time, which is an absolute right we will always honor;
- portability — receive the information you gave us in a structured, commonly used, machine-readable format;
- withdraw consent at any time, where we rely on consent, without affecting processing already carried out.
You also have the right to complain to your data protection authority. In the UK that is the Information Commissioner's Office (ico.org.uk); in the EEA it is the authority in your country of residence. We would appreciate the chance to address your concern first.
If you are a California resident, you have the right to know what personal information we collect and how we use and disclose it, to request deletion or correction, to opt out of sale or sharing, and not to be discriminated against for exercising these rights. We do not sell personal information and we do not share it for cross-context behavioral advertising, so there is no opt-out to exercise — but the right exists and we will honor it if that ever changes.
Verification. We may need to verify your identity before acting on a request — usually by confirming you control the registered email address. We will not charge you, unless a request is manifestly unfounded or excessive.
10. Cookies
We use a small number of cookies and similar technologies:
Strictly necessary — to keep you signed in, to remember your registration state, and to protect against abuse. The site does not work without these and they are not optional.
Analytics — to understand which pages are read and how people move through the site.
We do not use advertising cookies, retargeting pixels, or cross-site trackers, and we do not permit third parties to track you across other websites from ours.
11. Security
We protect your information with measures appropriate to its sensitivity, including encryption in transit, access controls, and limiting access to those who need it.
Registration information is held separately from the index pipeline. Confirmation tokens are stored as hashes, never in plaintext.
No system is perfectly secure, and we cannot guarantee absolute security. If a breach occurs that is likely to result in a risk to your rights, we will notify you and the relevant authority as required by law.
12. Children
$BIRTH Public is intended for professional use and is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us information, write to us and we will delete it.
13. Changes to this notice
We may update this notice. The current version and its effective date appear at the top, and superseded versions are archived and remain available.
Where a change is material — particularly a new purpose for information we already hold — we will tell you by email before it takes effect.
14. Contact
Questions, requests, or complaints:
DMX Analytics Inc. [REGISTERED ADDRESS] [privacy@dmxanalytics.info]