top of page

Privacy Policy

Last Updated: April 2026

This Privacy Statement explains what information Human(s)e collects, why we collect it, how we use it, who we share it with, and what rights you have. It is written to meet Canadian privacy law (PIPEDA and Quebec Law 25), Canada's anti-spam law (CASL), the EU General Data Protection Regulation (GDPR Article 13), the UK GDPR, and the US CAN-SPAM Act.
If anything here is unclear, please contact the Privacy Officer using the details below.

1. Who we are (controller identity)
Human(s)e is a brand operated by Dr Alon Aviram as a sole operator based in Ontario, Canada.

  • Operator (data controller): Dr Alon Aviram

  • Brand: Human(s)e

  • Website: humanse.co

  • Mailing address: Human(s)e, Dr Alon Aviram, 2967 Dundas St. W. #1120, Toronto, ON M6P 1Z2, Canada

For privacy questions, please use the Privacy Officer contact below rather than the general mailing address.

2. Privacy Officer
Under PIPEDA and Quebec Law 25, we designate a person responsible for the protection of personal information.

  • Privacy Officer: Dr Alon Aviram

  • Email: hi@humanse.co

  • Mailing address: Human(s)e, Dr Alon Aviram, 2967 Dundas St. W. #1120, Toronto, ON M6P 1Z2, Canada

You can contact the Privacy Officer to ask questions, exercise your rights, or file a complaint.

3. What we collect and why
We try to collect as little personal information as possible. Here is what we do collect.
3.1 Newsletter signup (via Substack)

  • What: Your email address, and your name if you choose to provide it.

  • Why: To send you the Human(s)e newsletter and related updates you asked for.

  • Legal basis: Your consent (PIPEDA, Quebec Law 25, CASL, GDPR Article 6(1)(a)).

3.2 Newsletter engagement data (via Substack)

  • What: Whether emails were opened, which links were clicked, delivery status, device, and email client type.

  • Why: To understand which pieces of writing land, to fix deliverability issues, and to improve the newsletter.

  • Legal basis: Your consent at signup, and our legitimate interest in measuring and improving our content (GDPR Article 6(1)(f)).

3.3 Website analytics

  • What: IP address, approximate location (city or region), browser type, device type, operating system, pages viewed, referring site, and time on page.

  • Why: To understand which pages are read, to fix broken links and bugs, and to improve the site.

  • Analytics provider: Google Analytics (Note: We configure Google Analytics to anonymize your IP address where possible).

  • Legal basis: Our legitimate interest in running and improving the site (GDPR Article 6(1)(f)). For visitors from the EU, UK, and Quebec, where the analytics provider sets non-essential tracking cookies, we rely on your explicit prior consent (opt-in) through our cookie notice.

3.4 Messages you send us

  • What: If you email us or reply to a newsletter, we receive your message, your email address, and anything else you include.

  • Why: To answer your questions and provide support.

  • Important Note: The Human(s)e framework is a tool for orientation and self-location; it is not a clinical, diagnostic, or therapeutic service. Please do not share sensitive medical, psychiatric, or personal health information via email or contact forms.

  • Legal basis: Your consent and our legitimate interest in responding to you.

We do not collect payment information, we do not run user accounts, and we do not collect assessment responses or health information on this site.

4. Who we share your data with (processors)
We work with a small number of service providers (processors) who handle data strictly on our instructions. They are contractually required to protect it.

  • Substack Inc. (United States): Newsletter hosting, delivery, and engagement analytics.

  • Google Analytics (United States): Website analytics.

  • Wix Studio (Canada/Global): Website hosting and infrastructure. Wix processes basic connection data (like IP addresses) and places essential cookies necessary to keep the website secure and functional.

We do not sell your personal information. We do not share it for advertising purposes. We only disclose it to processors who help us run the newsletter and the site, or where we are legally required to do so.

5. Cross-border transfers
Human(s)e is operated from Canada. Our main processors, including Substack and Google, are based in the United States. This means that when you subscribe or visit the site, your personal information may be stored and processed in the United States or in other countries where our processors operate.
Because your data may reside outside of Canada, it is subject to the laws of those foreign jurisdictions, meaning it could be accessible to foreign courts, governments, or law enforcement agencies.
Before using these processors, we conducted a cross-border transfer assessment as required by Quebec Law 25, and we rely on the following safeguards:

  • Contractual data processing terms with each processor.

  • Security and confidentiality commitments from each processor.

  • Limiting the data sent to the minimum needed for the service.

If you are in the EU or UK, we rely on appropriate transfer mechanisms offered by our processors (for example, Standard Contractual Clauses) where applicable. You can ask the Privacy Officer for more detail.
6. How long we keep your data

  • Newsletter subscribers: We keep your email and engagement history for as long as you remain subscribed. If you unsubscribe, we retain a minimum record (email address and unsubscribe date) for up to 24 months to honour your unsubscribe request and to meet CASL record-keeping expectations.

  • Consent records (CASL): We keep proof of when and how you consented for at least 24 months after you unsubscribe.

  • Website analytics: Aggregated analytics are kept for up to 24 months. Raw visit logs are retained for up to 14 months, as configured in our Google Analytics data retention settings.

  • Email correspondence: Kept for as long as needed to handle the conversation and any follow-up, then archived or deleted.
     

7. Your rights
Depending on where you live, you have some or all of the following rights:

  • Access: Ask what personal information we hold about you.

  • Correction: Ask us to fix information that is wrong or out of date.

  • Deletion: Ask us to delete your information.

  • Withdraw consent: Unsubscribe from the newsletter, or withdraw consent for any processing based on consent. You can unsubscribe at any time using the link at the bottom of every email.

  • Portability: Ask for a copy of your information in a common electronic format (Quebec Law 25, GDPR, UK GDPR).

  • Object or restrict processing: Ask us to stop or limit certain uses (GDPR, UK GDPR).

  • De-indexing: In Quebec, in specific cases, ask us to stop indexing certain information about you.

  • Complain: Raise a concern with us, and with the regulator if we do not resolve it.

7.1 How to exercise these rights Email the Privacy Officer at hi@humanse.co. We will respond within 30 days. If we need more time, we will tell you and explain why.
7.2 Where to complain If you think we have not handled your information properly, you can complain to:

8. Cookies and analytics
We use a small number of cookies and similar technologies.

  • Essential cookies: Needed for the site to work securely (for example, Wix infrastructure routing, or remembering that you dismissed a notice). These do not track your behaviour and do not require consent.

  • Analytics: Our analytics provider is Google Analytics. Google Analytics sets cookies that track visitor behaviour across pages in order to produce aggregated traffic reports. Data collected by Google Analytics is processed in the United States by Google LLC. For visitors in jurisdictions that require it (including the EU, UK, and Quebec), these cookies will only be placed on your device if you explicitly accept them via our cookie banner.

  • Substack: The embedded newsletter signup and any embedded Substack content may set cookies managed by Substack. See Substack's privacy policy at https://substack.com/privacy for details.

8.1 How to opt out or withdraw consent

  • In the browser: Most browsers let you block or delete cookies through their settings.

  • Analytics opt-out: You can opt out of Google Analytics across all sites by installing the Google Analytics opt-out browser add-on at https://tools.google.com/dlpage/gaoptout.

  • Withdrawing consent: If you previously accepted non-essential cookies via our consent banner, you can withdraw your consent at any time by clearing your browser cookies for this site and revisiting to update your preferences.
     

9. Security
We take reasonable steps to protect your information:

  • Access to subscriber data is limited to the operator.

  • Processors are chosen based on their security posture and contractual commitments.

  • Data is transmitted over HTTPS.

  • Passwords and accounts with our processors use strong authentication.

No system is completely secure. If a breach ever puts your information at real risk of significant harm, we will notify you and the relevant privacy regulator (such as the OPC or CAI) as required by law.
 
10. Children
This site is not directed at children. We do not knowingly collect personal information from children under 13 (US) or under 16 (EU default). If you believe a child has given us personal information, please contact the Privacy Officer and we will delete it.
 
11. Changes to this statement
We may update this Privacy Statement from time to time. The date at the top shows when it was last changed. For material changes, we will post a notice on the site or in the newsletter before the change takes effect.
 
12. Newsletter sender information (CASL)
This block applies to every commercial email we send under Canada's Anti-Spam Legislation (CASL).

  • Sender: Dr Alon Aviram, operating as Human(s)e

  • Mailing address: Human(s)e, Dr Alon Aviram, 2967 Dundas St. W. #1120, Toronto, ON M6P 1Z2, Canada

  • Contact email: hi@humanse.co

  • Website: humanse.co

  • Consent basis: You subscribed to the Human(s)e newsletter through a signup form on our website or on Substack.

  • Unsubscribe: Every email includes a one-click unsubscribe link. Unsubscribe requests are honoured within 10 business days, and usually immediately.

If you received a Human(s)e email by mistake, or you did not subscribe, please reply to the email or contact hi@humanse.co and we will remove you.
 
13. California residents
Human(s)e does not meet the CCPA or CPRA thresholds, so the full California consumer rights framework does not apply to us. We still want to be clear:

  • We do not sell personal information.

  • We do not share personal information for cross-context behavioural advertising.

  • California residents can email the Privacy Officer at hi@humanse.co to ask about the information we hold, or to ask us to delete it.
     

14. Questions
For any privacy question, email the Privacy Officer at hi@humanse.co.

bottom of page