Privacy policy

the short version

• this website does not use cookies, analytics or advertising trackers. the booking calendar is provided by cal.com and only loads when you choose to open it.
• we only receive personal data when you choose to send it to us (an enquiry, a creator application, an email or a booked call).
• our hosting provider processes standard server logs, including ip addresses, to serve and secure the site.
• you can ask us to see, correct or delete your data at any time.

what we collect and why

when you contact us or send a brief. if you use the message form, email us or book a call, we receive what you give us: typically your name, email address, brand or company, website, the platforms and budget band you select, and anything you write in the message or booking form. we use this to reply to you, scope and deliver work you ask for, and keep a record of our correspondence. our lawful basis is taking steps at your request before entering into a contract, and where we already work together, performance of that contract.

when you apply to the creator roster. we receive your name, social handle, city, niches, links to your work, rate expectations and email address. we use this to assess whether you fit briefs we are casting and to contact you about paid work. our lawful basis is taking steps at your request before entering into a contract, and our legitimate interest in running a creator roster. applying does not guarantee work.

when you book a call. the "book a call" calendar on this site is provided by cal.com, embedded from cal.com. it loads only when you click to open it or choose the "book a call" tab. when you book, cal.com collects the details you enter (name, email address, brand or company and what you want to make), writes the meeting into our google calendar with a google meet link, and sends you the confirmation email. cal.com processes those details on our behalf under its privacy policy, and google receives the meeting details because the call runs on google calendar and google meet, under the google privacy policy. we use the booking details only to hold and run the call. you can cancel or reschedule from the links in the confirmation email.

technical data. like almost every website, our hosting provider records server logs when pages are requested. these can include your ip address, browser type, the pages you request and the time of the request. they are used to deliver the site, keep it secure and diagnose faults. our lawful basis is our legitimate interest in running a reliable, secure website.

we do not buy data about you, and we do not use your data for automated decision-making or profiling.

cookies and similar technologies

this website itself does not set cookies, does not use local storage to track you, and does not load analytics, advertising or social-media tracking scripts. the embedded cal.com booking page is a third-party service and may set cookies within that embedded page once you open it; it is not loaded until you ask for it. if that changes, we will update this policy and, where the law requires it, ask for your consent before any non-essential cookies are set.

third parties we rely on

we use a small number of service providers to run this site and our business. they process data on our behalf or as independent controllers under their own policies:

some of these providers are based in, or store data in, the united states. where personal data leaves the united kingdom we rely on the uk's adequacy regulations or the international data transfer agreement / addendum so that your data stays protected.

how long we keep data

we keep enquiries and correspondence for as long as we are talking to you and for up to two years afterwards, so we can pick up where we left off. if we work together, records connected to the engagement are kept for six years after it ends to meet accounting and legal obligations. creator applications are kept for up to two years unless you ask us to delete them sooner. server logs are retained by our hosting provider for a short rolling period.

your rights

under the uk gdpr and the data protection act 2018 you can ask us to:

• tell you what personal data we hold about you and give you a copy;
• correct anything that is wrong or incomplete;
• delete your data, where there is no good reason for us to keep it;
• restrict or object to how we use it, including for our legitimate interests;
• give you your data in a portable format where we process it by automated means on the basis of contract or consent;
• withdraw consent at any time, where consent is the basis we rely on.

to exercise any of these, email hello@hypjam.com. we will respond within one month. you also have the right to complain to the information commissioner's office at ico.org.uk, although we would appreciate the chance to sort things out first.

children

this website and our services are aimed at businesses and adult creators. we do not knowingly collect personal data from anyone under 18. if you believe a child has sent us data, contact us and we will delete it.

security

we take reasonable technical and organisational steps to protect the data we hold, including https everywhere on this site, access limited to the people who need it, and reputable providers. no method of transmission over the internet is completely secure, so we cannot guarantee absolute security.

changes to this policy

when we change this policy we will update the date at the top. material changes will be flagged on this page.

contact

hypjam, london, united kingdom · hello@hypjam.com