Privacy Policy

Last Updated: 11 March 2026

1. INTRODUCTION

1.1 Hycalibre ("we," "us," or "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website at hycalibre.com (the "Site") and purchase our products.

1.2 This Privacy Policy should be read together with our Terms of Use and any other documents referred to in it.

1.3 We process your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. INFORMATION WE COLLECT

2.1 INFORMATION YOU PROVIDE TO US:

We collect the following information when you create an account, make a purchase, or contact us:

(a) Personal Identification Information:
- Full name
- Email address
- Billing address
- Country of residence

(b) Payment Information:
- Payment card details (processed securely by our payment processor)
- Billing address
- Transaction history

(d) Communications:
- Messages you send us via email or contact forms
- Customer support inquiries
- Feedback and testimonials

2.2 INFORMATION WE COLLECT AUTOMATICALLY:

When you visit our Site, we automatically collect:

(a) Technical Information:
- IP address
- Browser type and version
- Operating system
- Device type (desktop, mobile, tablet)
- Screen resolution

(b) Usage Information:
- Pages visited
- Time spent on pages
- Referring website
- Date and time of visits
- Click patterns and navigation paths

(c) Cookies and Similar Technologies:
- Session cookies (essential for site functionality)
- Analytics cookies (website performance and usage)
- Preference cookies (remember your settings)

2.3 INFORMATION FROM THIRD PARTIES:

We may receive information about you from:

(a) Payment processors (transaction confirmations, fraud prevention)
(b) Analytics providers (aggregated usage data)
(c) Email service providers (delivery and engagement metrics)

3. HOW WE USE YOUR INFORMATION

3.1 We use your personal data for the following purposes:

(a) ORDER PROCESSING AND DELIVERY:
- Process your purchases
- Deliver digital products via email and download links
- Send order confirmations and receipts
- Provide customer support

(b) ACCOUNT MANAGEMENT:
- Create and maintain your account
- Enable you to access purchased products
- Verify your identity
- Manage your preferences

(c) COMMUNICATION:
- Respond to your inquiries
- Send important updates about your orders
- Provide technical support
- Send service announcements

(d) MARKETING (with your consent):
- Send promotional emails about new products
- Share educational content and updates
- Offer special discounts or promotions
- You may opt out at any time

(e) SITE IMPROVEMENT AND ANALYTICS:
- Analyze how the Site is used
- Improve user experience and functionality
- Test new features
- Troubleshoot technical issues

(f) LEGAL AND SECURITY:
- Comply with legal obligations
- Prevent fraud and abuse
- Enforce our Terms of Use
- Protect our rights and property
- Detect and prevent security threats

3.2 LEGAL BASIS FOR PROCESSING:

We process your personal data based on:

(a) Contract Performance: Processing necessary to fulfill our contract with you (delivering products, processing payments)
(b) Legitimate Interests: Improving our services, preventing fraud, analyzing usage
(c) Legal Obligation: Complying with tax, accounting, and legal requirements
(d) Consent: Marketing communications (you may withdraw consent at any time)

4. HOW WE SHARE YOUR INFORMATION

4.1 We do NOT sell, rent, or trade your personal data to third parties for their marketing purposes.

4.2 We share your information with the following third parties only as necessary:

(a) PAYMENT PROCESSORS:
- Stripe (payment processing and fraud prevention)
- Your payment information is processed securely and we do not store full card details
- Stripe's privacy policy: stripe.com/privacy

(b) EMAIL SERVICE PROVIDERS:
- To send order confirmations, product delivery emails, and (with your consent) marketing communications
- Email providers process data in accordance with GDPR

(c) ANALYTICS PROVIDERS:
- Google Analytics (website usage and performance)
- Data is anonymized and aggregated
- Google's privacy policy: policies.google.com/privacy

(d) HOSTING AND INFRASTRUCTURE:
- Cloud hosting providers (to store and deliver website content)
- All providers are GDPR-compliant

(e) LEGAL AND REGULATORY AUTHORITIES:
- When required by law, court order, or regulatory authority
- To protect our rights or the rights of others
- To prevent fraud or illegal activity

(f) BUSINESS TRANSFERS:
- In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity

4.3 All third-party processors are contractually obligated to:
- Process data only as instructed by us
- Implement appropriate security measures
- Comply with UK GDPR requirements
- Not use data for their own purposes

5. INTERNATIONAL DATA TRANSFERS

5.1 Some of our service providers are located outside the United Kingdom and European Economic Area (EEA).

5.2 When we transfer your data internationally, we ensure adequate protection through:
- Standard Contractual Clauses approved by the UK Information Commissioner's Office
- Adequacy decisions recognizing equivalent data protection standards
- Other legally recognized transfer mechanisms

5.3 You have the right to request information about the safeguards we use for international transfers.

6. DATA RETENTION

6.1 We retain your personal data only for as long as necessary for the purposes outlined in this Privacy Policy:

(a) ACCOUNT DATA: Retained while your account is active, plus 12 months after account closure
(b) TRANSACTION RECORDS: Retained for 7 years to comply with tax and accounting obligations
(c) MARKETING COMMUNICATIONS: Retained until you unsubscribe or withdraw consent
(d) CUSTOMER SUPPORT: Retained for 3 years after last interaction
(e) ANALYTICS DATA: Anonymized and retained for 26 months (Google Analytics standard)

6.2 After the retention period expires, we securely delete or anonymize your personal data.

6.3 We may retain anonymized or aggregated data indefinitely for statistical and analytical purposes.

7. YOUR RIGHTS UNDER UK GDPR

7.1 You have the following rights regarding your personal data:

(a) RIGHT TO ACCESS:
- Request a copy of the personal data we hold about you
- Receive information about how we use your data

(b) RIGHT TO RECTIFICATION:
- Correct inaccurate or incomplete personal data
- Update your account information at any time

(c) RIGHT TO ERASURE ("Right to be Forgotten"):
- Request deletion of your personal data in certain circumstances
- Note: We may need to retain some data for legal or accounting purposes

(d) RIGHT TO RESTRICT PROCESSING:
- Request that we limit how we use your data in certain circumstances

(e) RIGHT TO DATA PORTABILITY:
- Receive your data in a structured, commonly used format
- Transfer your data to another service provider

(f) RIGHT TO OBJECT:
- Object to processing based on legitimate interests
- Object to direct marketing at any time (we will immediately stop)

(g) RIGHT TO WITHDRAW CONSENT:
- Withdraw consent for marketing communications or other consent-based processing
- Does not affect the lawfulness of processing before withdrawal

(h) RIGHT NOT TO BE SUBJECT TO AUTOMATED DECISION-MAKING:
- We do not use automated decision-making or profiling that produces legal or similarly significant effects

7.2 TO EXERCISE YOUR RIGHTS:

Email us at: buyside@hycalibre.com

Include:
- Your full name
- Email address associated with your account
- Specific right you wish to exercise
- Any relevant details

We will respond within 30 days. There is no fee unless your request is manifestly unfounded or excessive.

8. COOKIES AND TRACKING TECHNOLOGIES

8.1 WHAT ARE COOKIES:

Cookies are small text files stored on your device when you visit our Site. They help us recognize you, remember your preferences, and improve your experience.

8.2 TYPES OF COOKIES WE USE:

(a) STRICTLY NECESSARY COOKIES:
- Essential for site functionality (login, shopping cart, checkout)
- Cannot be disabled without affecting site performance
- No consent required

(b) ANALYTICS COOKIES:
- Google Analytics (website usage and performance)
- Help us understand how visitors use the Site
- Data is anonymized and aggregated
- You can opt out via browser settings

(c) PREFERENCE COOKIES:
- Remember your settings and preferences
- Improve your user experience
- Non-essential but recommended

8.3 MANAGING COOKIES:

You can control cookies through:

(a) Browser Settings: Most browsers allow you to refuse or delete cookies
(b) Google Analytics Opt-Out: tools.google.com/dlpage/gaoptout
(c) Our Cookie Preferences: Adjust settings when you first visit the Site

Note: Disabling cookies may affect site functionality.

8.4 COOKIE DURATION:

- Session cookies: Deleted when you close your browser
- Persistent cookies: Remain for a specified period (up to 2 years)

9. DATA SECURITY

9.1 We implement appropriate technical and organizational measures to protect your personal data:

(a) TECHNICAL MEASURES:
- SSL/TLS encryption for data transmission
- Secure servers and databases
- Regular security updates and patches
- Firewall protection
- Access controls and authentication

(b) ORGANIZATIONAL MEASURES:
- Staff training on data protection
- Confidentiality agreements
- Regular security audits
- Incident response procedures

9.2 PAYMENT SECURITY:

- Payment card information is processed by PCI-DSS compliant payment processors
- We do not store full payment card details on our servers
- All payment data is encrypted in transit and at rest

9.3 While we take security seriously, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but continually work to protect your data.

10. CHILDREN'S PRIVACY

10.1 Our Site and Services are not intended for individuals under 18 years of age.

10.2 We do not knowingly collect personal data from children under 18.

10.3 If you believe we have collected data from a child under 18, please contact us immediately at buyside@hycalibre.com and we will delete it.

11. MARKETING COMMUNICATIONS

11.1 With your consent, we may send you:
- Promotional emails about new products
- Educational content and resources
- Special offers and discounts
- Company updates and announcements

11.2 You can opt out of marketing communications at any time by:
- Clicking "Unsubscribe" in any marketing email
- Adjusting your account preferences
- Emailing buyside@hycalibre.com

11.3 Even if you opt out of marketing, we will still send:
- Order confirmations and receipts
- Product delivery emails
- Important account or service updates
- Responses to your inquiries

12. THIRD-PARTY WEBSITES

12.1 Our Site may contain links to third-party websites, plugins, or applications.

12.2 We are not responsible for the privacy practices of third-party websites.

12.3 We encourage you to read the privacy policies of any third-party sites you visit.

12.4 This Privacy Policy applies only to information collected through our Site.

13. CHANGES TO THIS PRIVACY POLICY

13.1 We may update this Privacy Policy from time to time to reflect:
- Changes in our practices
- Changes in applicable laws
- New features or services

13.2 We will notify you of material changes by:
- Posting the updated policy on this page
- Updating the "Last Updated" date
- Sending an email notification (for significant changes)

13.3 Continued use of the Site after changes constitutes acceptance of the updated Privacy Policy.

13.4 We encourage you to review this Privacy Policy periodically.

14. COMPLAINTS AND REGULATORY AUTHORITY

14.1 If you have concerns about how we handle your personal data, please contact us first at buyside@hycalibre.com. We will investigate and respond promptly.

14.2 You have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF

Telephone: 0303 123 1113
Website: ico.org.uk

14.3 We would appreciate the opportunity to address your concerns before you contact the ICO, but this is your right.

15. CONTACT US

15.1 If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: buyside@hycalibre.com

15.2 We will respond to all requests within 30 days.

16. SUPPLEMENTAL TERMS FOR SPECIFIC JURISDICTIONS

16.1 CALIFORNIA RESIDENTS (CCPA):

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

(a) Right to know what personal information is collected, used, shared, or sold
(b) Right to delete personal information (subject to exceptions)
(c) Right to opt-out of the sale of personal information (we do not sell your data)
(d) Right to non-discrimination for exercising your rights

To exercise these rights, email buyside@hycalibre.com with "CCPA Request" in the subject line.

16.2 EUROPEAN ECONOMIC AREA (EEA) RESIDENTS:

If you are located in the EEA, you have the rights outlined in Section 7 under the EU GDPR.

17. CONSENT

17.1 By using our Site and providing your personal data, you consent to:
- Collection and processing of your data as described in this Privacy Policy
- Transfer of data to third-party processors as outlined in Section 4
- Use of cookies as described in Section 8 (you may adjust cookie preferences)

17.2 You may withdraw consent at any time by contacting buyside@hycalibre.com.

17.3 Withdrawal of consent does not affect the lawfulness of processing before withdrawal.

BY USING OUR SITE, YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTOOD THIS PRIVACY POLICY.