In short
- We collect what you type into our forms, plus the basic technical data every website receives.
- We use it to reply, to send what you asked for and to run our business. We never sell it.
- You can ask to see, correct or delete your data at any time: write to [privacy@domain.com].
Who we are
Hypential is a growth marketing team for online stores, run by [Legal entity name], a company registered in Bangladesh ([registration number]) at [Street address], [City, postcode], Bangladesh. We’re a sister company of DeveloperLook. In this policy “we” and “us” mean Hypential.
This policy covers our website, its forms, the free library, job applications and the emails we send you. When we work on a client’s store, that store’s customer data is covered by our contract with the client (see “When we work for you” below).
What we collect
We collect only what we need, and most of it you give us yourself.
- Messages and call bookings
- Your name, email, store address, revenue range, what you need help with and your message.
- Library downloads
- Your email address, the file you downloaded, and whether you asked for the monthly memo.
- The monthly memo
- Your email address, and when you signed up or unsubscribed.
- Job applications
- Your name, email, phone, city, links to your CV and work, your answers, the salary you hope for and when you could start.
- Technical data
- Your IP address, browser, device type, the pages you open and when. Our hosting provider records this to deliver and protect the site.
- Settings in your browser
- Whether sound is on, and the email you last used for a download. See the cookie policy.
How we use it, and why we’re allowed to
Data protection laws, such as the GDPR in the EU and the UK, ask us to name a legal reason for each use. These are ours:
- Replying to you and holding calls you book. You asked us to, and it’s a step before any contract.
- Sending the files and memo you asked for. Your consent. Every memo has a one-click unsubscribe link.
- Considering your job application. Steps before a possible job contract; keeping it for future roles only with your consent.
- Keeping the site working and secure. Our legitimate interest in a safe website that works.
- Keeping accounts and meeting legal duties. The law, for example tax records for clients who pay us.
We don’t make automated decisions about you, and we never sell your data.
Who sees it
We share data only with the services that help us run the business, and only what each one needs.
- Hosting and security
- Cloudflare delivers this website and protects it from attacks, which means it processes your IP address.
- Forms and email
- [The form service] receives what you type into our forms. [The email service] sends the memo and our replies.
- Scheduling
- [Cal.com], once online booking opens, receives your name, email and the time you pick.
- Our CRM
- [CRM name] stores contacts, messages and applications. Our sister company DeveloperLook helps run some of our tools.
- When the law requires it
- We share data if the law requires it, for example a court order, or to protect our rights or someone’s safety.
These providers may use your data only to provide their service to us. We don’t sell, rent or trade it, and we don’t share it for anyone else’s advertising.
Where your data goes
We’re based in Bangladesh and work with clients around the world. Some of our providers store data in other countries, such as the United States or the EU. Where the law requires it, we use providers that protect transfers with recognised safeguards, such as the European Commission’s standard contractual clauses.
How long we keep it
- Messages and call bookings
- [24 months] after we last spoke, unless you become a client.
- Library downloads and the memo
- Until you unsubscribe or ask us to delete it.
- Job applications
- [6 months] after the role closes, or [12 months] if you asked us to keep it for future roles.
- Client records
- As long as the law requires, for example [6 years] for accounting records.
- Server logs
- [As long as our hosting provider keeps them, usually days or weeks.]
Your rights
Wherever you live, you can ask us to:
- Show you the data we hold about you, and give you a copy
- Correct anything that’s wrong
- Delete it
- Stop using it for a purpose, or withdraw a consent you gave
- Send it to you or another service in a common format
Write to [privacy@domain.com]. It’s free, and we reply within [30] days. We may ask you to confirm who you are first.
If you’re in the EU or the UK and unhappy with our answer, you can complain to your local data protection authority. If you’re in California, you can ask to know, correct and delete your data; we don’t sell or share personal information.
Keeping it safe
We limit who on our team can see your data, use services with strong security, and turn on two-step sign-in for the tools that hold it. No system is perfect: if a breach puts your data at risk, we’ll tell you, and the authorities where the law requires.
Children
This site and our services are for businesses and adults. We don’t knowingly collect data from anyone under 16. If you think a child has sent us their data, tell us and we’ll delete it.
When we work for you
When we run marketing for a store, we may handle that store’s customer data, for example in its email tool or ad accounts. The store decides how that data is used, and we follow its instructions under a [data processing agreement] in our contract. This policy doesn’t cover that data; the store’s own privacy policy does.
Changes to this policy
When we change this policy, we update the date at the top. If a change matters, we’ll say so on the site and, if you get the memo, by email.
Contact
[Legal entity name], [Street address], [City, postcode], Bangladesh. Email: [privacy@domain.com].
