Privacy Policy

Overview

At HobbyTub Ltd, we are committed to protecting your privacy and complying with all relevant data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our web-based services.

Information We Collect

• Account Information: When you sign up, we collect basic information such as your name, email address, and payment details.
• Usage Data: We may collect information about your interactions with our platform, including pages visited, features used, device information, browser type, and access times.
• Cookies & Tracking Technologies: We use strictly necessary cookies to keep you signed in and to secure the platform, plus a preference cookie if you change a display setting. We do not use analytics or advertising cookies.
• Communications: When you contact us, we may collect information you provide in support or feedback communications.

How We Use Your Information

• To provide, operate, and maintain our platform and services.
• To manage your account, subscription, authentication, and security.
• To communicate with you, including notifications, updates, and support.
• To analyze usage and improve our services and user experience.
• To comply with legal obligations and protect our rights.

Legal Bases for Processing

If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data based on the following legal bases:

• Your consent
• Performance of a contract
• Compliance with legal obligations
• Our legitimate interests, provided your rights do not override these interests

Sharing Your Information

• Service Providers: We may share information with trusted third parties who assist in providing our services (e.g., payment processors, hosting, analytics). These providers are required to protect your information.
• Legal Compliance: We may disclose information if required by law or to protect the rights and safety of our users and platform.
• Business Transfers: In the event of a merger, acquisition, or asset sale, your information may be transferred as part of that transaction.
• International Transfers: Your information may be transferred and processed outside your country of residence. We take steps to ensure your data is protected in accordance with applicable laws.

Cookies & Analytics

We use cookies only to:

• Remember your login
• Support security and authentication
• Remember a display preference you have chosen, such as light or dark mode

We do not use analytics or advertising cookies. To understand how the platform is used we rely on PostHog, hosted in the European Union, running in a cookieless mode that stores nothing on your device. We do not use session replay, cross-site tracking or advertising profiling.

If your browser sends a Global Privacy Control or Do Not Track signal we honour it automatically. If you have an account, you can also turn analytics off completely under Settings → Privacy, which applies across all your devices. Full detail is in our Cookies & Analytics Policy.

You may also block or delete cookies in your browser settings, but disabling strictly necessary cookies will prevent you from signing in.

Service Providers We Use

We rely on a small number of processors to run the platform. Each is bound by contract to protect your information and to process it only on our instructions:

• Google Cloud Platform: hosting, databases and file storage (Europe).
• Cloudflare: content delivery, caching and security.
• Stripe: payment processing. Card details are handled by Stripe and never stored on our servers.
• PostHog: product analytics, hosted in the European Union.

Data Security

We implement reasonable security measures to protect your information from unauthorized access, alteration, or loss. However, no method of transmission or storage is 100% secure.

Your Rights

Depending on your location, you may have rights regarding your personal data, including:

• Access to your personal data
• Correction of inaccurate or incomplete data
• Deletion of your personal data
• Restriction or objection to processing
• Data portability
• Withdrawal of consent (where applicable)

To exercise your rights, please contact us at [email protected]

California Privacy Rights (CCPA)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including the right to know, delete, and opt-out of the sale of your personal information. We do not sell your personal information. To exercise your rights, contact us at the email above.

Children's Privacy

Our platform is not intended for children under 16, and we do not knowingly collect personal information from minors.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on our website and will become effective immediately upon posting.

Contact Us

For questions or concerns about this Privacy Policy, please contact us:

• By email: [email protected]