Privacy Policy

1. Introduction

Welcome to HeyYo ("we", "our", or "us"). HeyYo is operated by Unlimit Lab Limited, a company registered in England and Wales, with its principal place of business in Gloucester, United Kingdom.

We are committed to protecting your personal information and your right to privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit heyyo.to and use our services.

If you have any questions or concerns about this policy, please contact our Data Protection Officer at privacy@heyyo.to.

2. Data Controller & ICO Registration

Unlimit Lab Limited is registered with the Information Commissioner's Office (ICO) as a data controller under the UK Data Protection Act 2018 and UK GDPR. Our registration confirms that we process personal data in accordance with the requirements of data protection legislation.

Unlimit Lab Limited (ICO Ref: ZC097708), trading as HeyYo, is the data controller for personal data collected through this platform. For data protection enquiries, contact our Data Protection Officer at privacy@heyyo.to.

3. Information We Collect

3.1 Personal Information You Provide

We collect personal information that you voluntarily provide to us when you:

• Register for an account (name, email address, username, password)
• Create or edit your creator profile (bio, social media links, profile photo)
• Contact us via email or support channels
• Subscribe to our newsletter or marketing communications

3.2 Information Automatically Collected

When you visit our website, we automatically collect certain information, including:

• Device information (browser type, operating system, device type)
• Usage data (pages visited, time spent, click patterns)
• IP address and approximate location
• Cookies and similar tracking technologies (see our Cookie Policy)

4. Legal Basis for Processing

Under the UK GDPR, we process your personal data on the following legal bases:

• Consent: Where you have given clear consent for us to process your personal data for a specific purpose (e.g., marketing emails).
• Contract: Where processing is necessary for the performance of a contract with you (e.g., providing your creator profile).
• Legitimate Interests: Where processing is necessary for our legitimate interests, such as improving our services and fraud prevention.
• Legal Obligation: Where we need to process your data to comply with a legal obligation.

5. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our platform
• Create and manage your creator profile
• Process your registration and manage your account
• Send you administrative information, updates, and security alerts
• Respond to your comments, questions, and provide customer support
• Analyse usage trends to improve our services
• Detect, prevent, and address technical issues and fraud
• Send promotional communications (with your consent)

6. Sharing Your Information

We do not sell your personal information. We may share your information in the following situations:

• Public Profile Data: Your creator profile (name, username, bio, social links) is publicly visible as part of the platform's purpose.
• Service Providers: We may share information with third-party vendors who perform services on our behalf (hosting, analytics, email delivery).
• Legal Obligations: We may disclose information where required by law or to respond to legal processes.
• Business Transfers: In connection with a merger, acquisition, or sale of assets.

7. International Data Transfers

Where we transfer personal data outside the UK, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by the Information Commissioner's Office (ICO)
• Transfers to countries with adequate data protection laws
• Other lawful transfer mechanisms under the UK GDPR

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our services. When retention is no longer necessary, we will securely delete or anonymise your data. You can request deletion of your account and associated data at any time by contacting us.

9. Your Rights Under UK GDPR

Under the UK GDPR and Data Protection Act 2018, you have the following rights regarding your personal data:

• Right of Access: Obtain a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise these rights, contact us at privacy@heyyo.to. We will respond within one month.

If you are unsatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or call their helpline on 0303 123 1113.

10. Security

We implement appropriate technical and organisational measures to protect your personal information, including encryption of data in transit and at rest, regular security assessments, access controls, and staff training on data protection.

11. Children's Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal data, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. Material changes will be communicated via email or a prominent notice on our website.

13. Contact Us

If you have questions about this Privacy Policy, please contact us: