Code of Conduct

For All Buyers and Suppliers

1. Zamplia Marketplace Standards.

Zamplia Ltd. (“Zamplia”) operates the Zamplia Marketplace (“Marketplace”). Zamplia grants access to the Marketplace for the selling and buying of Sample (i.e., access to Respondents) between Suppliers and Buyers, respectively. For clarity, Zamplia may also act as a Buyer or Supplier. Suppliers and Buyers are responsible to each other for quality and compliance regarding Sample. Zamplia disclaims any and all responsibility for quality and compliance with applicable laws and industry standards regarding Sample as operator of the Marketplace.

These standards are incorporated by reference into all contracts between Zamplia and Buyers or Suppliers and between Buyers and Suppliers, except in circumstances where Zamplia indicates otherwise in writing. These standards do not create any rights or obligations for Zamplia, any Buyer or any Supplier, except when incorporated into a particular contract by reference. When incorporated into a particular contract, these standards create rights and duties only for the contracting parties and no beneficiary rights for any third parties. If there are inconsistencies with this Code of Conduct and the provisions within another written agreement between and duly executed by the parties, the other provisions will prevail.

The defined terms in Zamplia’s terms and conditions with Buyers and Suppliers have the same meanings as defined therein and are used throughout this Code of Conduct.

2. Ethical Standards.

Buyers and Suppliers in Zamplia Marketplace must respect the customs, rules, and practices that apply to our industry, some of which are described in this Code of Conduct. As a Buyer or Supplier on Zamplia Marketplace, Zamplia adheres to these ethical standards as well.  These ethical standards include:

  • Protection of Human Rights. Buyers and Suppliers shall protect the human rights of its employees and comply with all applicable laws, as well as all ethical standards applicable in the countries in which they operate.
  • Corruption and Bribery. Our Buyers and Suppliers shall not engage in corruption, extortion, embezzlement, money laundering, or bribery.
  • Child Labor and Forced Labor. Buyers and Suppliers shall prohibit and refrain from child labor within their organizations.

3. Children and Minors.

Suppliers and Buyers must obtain verifiable parental consent for the collection of any data collected from minors and children, as required by Applicable Laws. If Suppliers or Buyers exclude minors from Buyer Opportunities, they must ask about birth dates in neutral ways (e.g., “when is your birthday?”) and not in ways that could induce minors to overstate their age (e.g., “are you 18 or older?”). If a Supplier or Buyer knows a minor completed a survey, the Supplier and Buyer must confirm and verify parental consent in accordance with the Applicable Laws protecting such minor.

Minors cannot act as Buyers or Suppliers on Zamplia Marketplace. With respect to Sample, Zamplia contractually obligates Buyers and Suppliers to comply with parental consent requirements under Applicable Law, and Zamplia does not allow minors under the age of 13 to complete Buyer Opportunities.

4. Data Privacy Law Compliance.

Suppliers and Buyers are responsible for compliance with data privacy laws that apply to their collection and use of data via the Zamplia Marketplace. Suppliers must ensure Respondents receive sufficient notice and information about how Suppliers and Buyers collect and use their data. Suppliers and Buyers must use best efforts to determine whether they need to obtain consent under Applicable Laws (often, a conspicuous and easy-to-understand opt-in notice is sufficient and more appropriate where Respondents actively volunteer data). Suppliers must inform and obligate Buyers in writing regarding any restrictions on their use of data (based on Applicable Laws or promises Supplier made in privacy policies or invitations to take surveys).

Zamplia processes data on behalf of Buyers and Suppliers for purposes of performing Zamplia’s contractual obligations. Buyers’ and Suppliers’ instructions to Zamplia for the processing of Personal Data shall comply with Data Protection Laws and Regulations

Personally Identifiable Information (PII), as generally defined under data privacy laws in the United States, is prohibited within the Zamplia Marketplace.

5. General Data Protection Regulation Roles.

For the control and processing of Personal Data of European Union Data Subjects in accordance with the General Data Protection Regulation: (i) Suppliers acknowledge and agree that they are Controllers regarding the control and processing of Sample sold on the Zamplia Marketplace, (ii) Buyers acknowledge and agree that they are Controllers regarding the control and processing of Personal Data during the survey when off the Zamplia Marketplace, and (iii) Zamplia acts as Processor for any processing activity conducted at the direction of Buyers and Suppliers on the Zamplia Marketplace. Regarding the control and processing of Personal Data collected by Zamplia on the Marketplace, Zamplia acts as the Controller of such data and is responsible for ensuring proper opt-in consents.

When Buyers and Suppliers control and process Respondent Screening Data containing Personal Data, Buyers or Suppliers shall either (1) become a separate and independent Controller of such data and be responsible for having a lawful basis to control and process such data, or (2) delete such data upon termination of its Agreement with Zamplia.

6. Data Residency or Localization.

Buyers and Suppliers are responsible for compliance with data residency and localization laws, including but not limited to, laws in Russia, Kazakhstan, the People’s Republic of China and Indonesia that require certain categories of data collected from individuals in such jurisdictions must be processed on primary systems in such countries. This may require additional technical steps in the context of the data collection, but does not typically preclude use of the Zamplia Marketplace, because data residency or localization laws do not entirely prohibit a transfer of redacted survey responses, aggregated data (statistics) or a copy of an individual record so long as the original data processing occurs locally within the jurisdiction. Zamplia operates the Zamplia Marketplace on servers in Canada and does not maintain local presences outside Canada to satisfy data residency or localization requirements.

7. Data Security.

Suppliers and Buyers are responsible for compliance with applicable data security laws and must meet or exceed the following technical and organizational data protection measures that Zamplia applies to its operation of the Zamplia Marketplace:

  • Security Access Control: Implement suitable measures in order to prevent unauthorized persons from gaining access to data processing equipment and premises; limit access to employees and service providers with a legitimate need to know and subject to adequate written confidentiality and data security agreements.
  • Transmission Control: Implement SSL for Internet transmissions and other measures to reduce the risk that data is read, copied, altered or deleted by unauthorized parties during the transmission thereof or during the transport of the data media.
  • Data Handling: Have adequate security protection, procedures and protocols in place to ensure data is used, stored, maintained, protected, transferred, deleted or archived, as necessary and required by Applicable Laws.
  • Data Access, Correction, and Deletion: Disclose, correct, delete, or redact data on request from data subjects, where required by Applicable Laws.

8. Audio and Video.

If surveys are conducted with audio or video, then Suppliers and Buyers must ensure Respondents are adequately informed about the implications of being identifiable and comply with all other industry guidelines, including legal and compliance requirements relating to processing of data with audio and video. Buyer is responsible for ensuring appropriate consents.

9. Restrictions Applicable to Buyers and Suppliers.

Processing of PII is prohibited on the Zamplia Marketplace. If the Buyer intends to conduct a survey collecting any PII when off the Zamplia Marketplace, then the PII Checkbox on the Zamplia Marketplace must be selected to ensure PII is never hosted on the Zamplia Marketplace. Buyers shall not create custom questions on the Zamplia Marketplace intended to derive answers containing PII or other sensitive data.

On the Zamplia Marketplace, Buyers and Suppliers shall not:

  • Share User IDs, passwords, and/or API keys with any unauthorized third party.
  • Use survey farms, bots, or scrapers for any purpose.
  • Ask or answer questions using vulgar, abusive, or inappropriate language or content.
  • Fundraise, advertise, or make solicitations.
  • Ask or answer leading questions that are intended to coach, guide, or bias specific responses.
  • Misrepresent the source of Sample in any way.
  • Use copyrights, trademarks, or any other intellectual property without proper ownership or license.
  • Download, submit, or otherwise save sensitive content on the Zamplia Marketplace
  • Sensitive content includes survey content of an offensive or especially personal nature.
  • Ask or answer questions about sensitive content in ways that do not conform with industry guidelines or Applicable Laws.
  • Ask or answer questions about sensitive financial information, including but not limited to, bank account and credit cards, and government-issued identification numbers.
  • Ask minors to answer questions without obtaining parental consent, as defined under Applicable Laws.
  • Solicit Respondents to take fraudulent or otherwise illegal surveys.

Failure to adhere to these restrictions shall be considered a material breach of the terms and conditions between Zamplia and its Buyers and Suppliers.

10. Buyers.

Buyers are responsible for good faith reconciliations for Completes on the Zamplia Marketplace.  Acceptable reasons for reconciling completes include poor response quality and inattentive, incomplete, or inappropriate responses. Buyers have 30 days from the start of project fielding to report any completes for reconciliation.  Valid reasons must be provided for each complete a request is made.

Buyers are prohibited from assigning a $0 or fraudulent Cost Per Interview for Over The Counter Sample purchases.

11. Suppliers.

Suppliers must participate in Zamplia’s Supplier Quality Program. The Supplier Quality Program is a quarterly assessment of Suppliers quantifying the response quality of survey-takers and the consistency of a panel’s behavioral attributes.

If Suppliers run medical ailment work, then Suppliers must comply with regulations for adverse impact reporting regarding negative side effects. Including, but not limited to, facilitating re-contact with Respondents indicating adverse impacts of medical ailments.

In order for Suppliers to seek Respondents for healthcare studies in countries with adverse event requirements, their staff must be adverse event trained by the BHBIA, and how to respond when a Respondent indicates an adverse event.

Suppliers must implement security protocols including SHA‑1 and Google Invisible Captcha.

Copyright 2021, Zamplia Ltd.

All Rights Reserved.