Privacy Policy

Last updated: 12 August 2024

Introduction

At Headsoup, we care about the safety and privacy of your data. We comply with the UK Data Protection Act 2018; the UK’s implementation of the General Data Protection Regulation (GDPR).

Following the Data Protection Principles, we will always make sure the data we hold about you is:

  • used fairly, lawfully and transparently
  • used for specified, explicit purposes
  • used in a way that is adequate, relevant and limited to only what is necessary
  • accurate and, where necessary, kept up to date
  • kept for no longer than is necessary
  • handled in a way that ensures appropriate security, including protection against unlawful or unauthorised processing, access, loss, destruction or damage

We do not collect or hold any sensitive data about you (i.e. data pertaining to your race, political affiliations, beliefs, genetics, etc).

What data do we collect?

We collect and process data from you when you use our website, mobile and web app, and any other services we provide.

Personal Data – This data can include personal data such as name, email, birthdate, and other personal information, as required for us to provide our services to you. You may provide this information to us for example when you interact with our website or one of our platforms, when you register for one of our platforms, or when you subscribe to or interact with one of our channels.

Usage Data – When you use our platforms, website and services, we automatically record information on our server logs from your browser or mobile platform, including the location, IP address, browser, mobile device, cookie information and details about the page you requested, as well as information regarding your use of our services.Communications Data – This includes your communication preferences around receiving marketing and other information from us.

Usage of Cookies

We use the following cookies on our website:

Strictly necessary cookies – These cookies are necessary for the operation of our website.

‍Analytics cookies – These cookies allow us to see how, and how-many, visitors use our website. This helps us to improve the functionality of our website, and track website performance.

How we use your data

We collect and use the personal data in a manner that is consistent with this Privacy Policy. We may use the personal data as follows:

  • To provide you with access to our Platform and services.
  • To contact you when it is necessary to discuss anything relating to the services.
  • To provide customer service, including responding to your queries.
  • To share with another business in the context of a corporate transaction such as a sale or an investment.
  • In order to tailor our services appropriately, we may undertake profiling of you on the basis of our legitimate interests. For example, showing you content that we think will be of interest to you.
  • To monitor your use of the Platform and investigate any complaints or potential breaches of use of contract.
  • To notify you of any changes to our Platform, or respond to any communications you send us by using the contact details you have provided.
  • For other purposes to which you may consent from time to time.
  • To comply with applicable law, for example, in response to a request from a court or regulatory body, where such request is made in accordance with the law.

Notifications and marketing

We may send you notifications including email, text and push notifications.  We will always give you the option to opt-out of receiving notifications by following the unsubscribe instructions on communications sent to you in each communication. If necessary, we may send you service messages regardless of your preference settings.

Embedded content from other websites

Content on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

How long we retain your data

When you register on one of our platforms or services, we store the personal information you provide in your user profile. You can see, edit, or delete this personal information at any time.

We may retain your data for as long as we require for the purposes for which it is processed or as is otherwise required by applicable law. If you terminate your account or our agreement with you under the Terms of Use is terminated, your personal data will be deleted as required under applicable law.

When calculating the appropriate retention period for your data, we consider the nature and sensitivity of the data, the purposes for which we are processing the data, and any applicable statutory retention periods. Using these criteria, we regularly review the personal data which we hold and the purposes for which it is held and processed. Once processing has been completed, we may securely delete your personal data.

We may delete accounts or specific information before account deactivation where we believe it may no longer be relevant or where an account has been inactive for a period of a year or more.

What rights you have over your data

You can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. You can do this by contacting us at [email protected] This does not include any data we are obliged to keep for administrative, legal, or security purposes.

We will not sell your data to anyone without your explicit consent. We may share your data to third parties, always in accordance with applicable data protection laws. We do not share your data with any third party, except as is necessary in order to enable them to provide us with a service. Possible third-parties include:

Service providers: We may employ other companies and individuals to perform functions on our behalf, including payment processing suppliers, development partners and data analytics services providers.
‍
We may share your data with:

  • Payment processing providers
  • Analytics and search engine providers
  • Cloud storage providers
  • Support tool providers
  • Marketing & Communication tool providers
  • CRM providers

Other users – Some of your personal data may be visible to other users of our Platform, Applications and services, for example your username, and any data you make publicly available on the Platform and Applications.

Keeping Your Data Safe

No credit or debit card information is stored on our servers.

When moving your data, your data is always encrypted.