Privacy Policy: What Hypenza Collects and Why

Automatically Recorded Information

Certain technical details are gathered by our systems the moment you land on our site, without any action required from you. These details cover your IP address in anonymized form, the type and version of the browser you are using, the category of device, your operating system, the URL that referred you to us, which pages you opened, and how long you remained on each of them.

Cookies and comparable tracking technologies are used on our site to improve how it works for you, to measure traffic, and to build a picture of how visitors generally move through the pages. Your preferences regarding these cookies can be managed either from the settings panel of your own browser or through the consent banner we display on the site.

Campaign Tracking and Referrer Details

When you arrive on our site, we record any UTM tags present in the address you landed on, including utm_source, utm_medium and utm_campaign, together with details of the page or site that referred you. Those values are held in cookies on your device for a period not exceeding 30 days, and if you go on to place an order during that window, the stored values are linked to that order record. We rely on this information to work out which of our marketing channels actually bring people to us and which do not.

Purposes of Processing

The data we gather serves the purposes listed below:

To handle your orders and carry out the delivery steps required to complete what you purchased
To confirm purchases, keep you posted on delivery progress, and reply to your support enquiries
To deliver promotional messages where you have given your consent, with the option to withdraw it whenever you choose
To refine our site, our offerings, and the overall experience for the people who use them
To identify and stop fraudulent, abusive, or otherwise damaging behaviour
To meet the requirements placed on us by law and to uphold our Terms of Service
To verify and reconcile cryptocurrency payments associated with your order

Disclosure of Information to Others

Your personal data is never sold to outside parties. Disclosure of your information happens only in the situations described below.

Service Providers

These companies process data on our behalf, each receiving only what it needs to do its job. All of them are bound by contract to protect it and to use it for nothing else.

Vercel hosts the site and sees the technical details of every request, including your IP address.
Supabase stores our database: your orders, your account if you create one, and any message you send us.
Resend sends our email, so it receives your address and the contents of what we send you.
Cryptomus and NOWPayments take payment. You pay them, not us, and we never receive card or bank details.
Sentry records technical errors so we can fix them. Error reports can contain the page you were on and your browser details.
Google Analytics measures how the site is used, and only runs if you accept analytics cookies.

When an order is carried out, what leaves us is the public link you gave us and a quantity. Your name, your email address and your payment details are not part of that step.

Usage Measurement

Analytics software helps us learn how people navigate and use our site. Such software may gather anonymized information regarding the way you browse. Data gathered through analytics is never connected back to who you are personally.

Legal Obligations and Requests

There are circumstances in which we may share your information, including where the law compels disclosure, where we receive a legitimate request through proper legal channels, or where disclosure is necessary to safeguard our rights, privacy, safety, or property.

Cookies and comparable technologies are deployed on our site so that we can deliver and refine what we offer. The categories in use are set out below:

Strictly necessary cookies: These keep the site working at a basic level, covering things such as what sits in your cart, the language you have chosen, and the currency you are viewing prices in. Switching them off is not possible.
Analytics cookies: These let us see the ways visitors move through and use our pages. They are placed only after you have agreed to them.
Advertising cookies: These measure how well our promotional campaigns perform, relying on UTM parameters to do so. They too are placed only after you have agreed to them.

Your cookie choices remain adjustable whenever you wish, either from the consent banner shown on our site or from the controls built into your browser. Bear in mind that turning off strictly necessary cookies can interfere with how the site behaves.

Storage Periods

Your personal information stays with us only for the period required to accomplish the purposes described in this policy. The details break down as follows:

Order records: kept on file for 3 years so that we can meet accounting obligations and legal requirements
Newsletter email addresses: held until the moment you choose to unsubscribe
Analytics information: once stripped of personal identifiers, aggregated data may be kept without a fixed end date, and identifying elements are deleted after 26 months
Cookies: those tied to a session end as soon as your browser closes, while persistent ones run out somewhere between 30 days and 1 year, depending on what each is used for
Support correspondence: preserved for 2 years counting from your most recent contact with us

Your legal entitlements over your personal information vary according to where you live. If you are based in the European Economic Area (EEA) or in a country with comparable data protection laws, the following entitlements apply to you:

Access: you may ask to receive a copy of whatever personal data we keep concerning you
Rectification: you may ask us to fix personal data that is wrong or incomplete
Erasure: you may ask us to delete your personal data, except where the law obliges us to keep it
Restriction of processing: you may ask us to narrow the ways in which your data is handled
Portability: you may ask to receive your data in a structured format that machines can read
Objection: you may object when we process your personal data for particular purposes
Consent withdrawal: where our processing rests on your consent, you may take that consent back at any point

Should you wish to act on any of the above, write to support@hypenza.com and we will answer your request no later than 30 days after receiving it.

Protection Measures

Hypenza applies suitable technical and organizational safeguards designed to shield your personal data from unauthorized access, modification, disclosure, or destruction. Those safeguards consist of the following:

Data moving between you and our systems is encrypted through TLS/SSL protocols
Sensitive records are held in protected storage and encrypted while at rest
Security reviews and system updates are carried out on a recurring basis
Staff access to personal data is restricted by permission controls and granted only where a legitimate work need exists
Only established external infrastructure providers holding recognized security certifications are relied upon

Although we exercise reasonable care, neither transmission across the Internet nor any form of electronic storage can be considered entirely secure. For that reason, we are unable to warrant that your data is absolutely protected.

Cross-Border Transfers of Data

Data relating to you may leave your country of residence and be handled in other jurisdictions. The infrastructure we rely on to operate hypenza, including our hosting and storage systems, sits in the United States and in Europe. Whenever information crosses a border in this way, we put suitable protective measures around it, such as the Standard Contractual Clauses that the European Commission has approved for that purpose.

Protection of Minors' Data

Hypenza's platform is designed for use by people aged 16 and older, and it is not directed at anyone below that age. We make no deliberate effort to gather personal information from children under 16, and we do not knowingly do so. Should it come to our attention that information belonging to a child under 16 has ended up in our records, we will act to erase that information without undue delay. Parents, guardians, or anyone else who suspects that a child has submitted personal data to us are asked to write to support@hypenza.com so the matter can be addressed.

Types of Data We Obtain

Information reaches us directly from you in the course of using our services. That covers what you share when placing an order, reaching out to customer support, signing up for our newsletter, or making use of our free tools.

Details You Submit to Us

Placing an order means we receive your email address, along with the social media links or usernames you supply so that delivery can take place, plus the cryptocurrency payment details required to complete the transaction through our secure checkout. Complete payment credentials are never kept on our servers.

Newsletter sign-ups involve collecting your email address together with your chosen language. Should you write to support, whatever details are contained in your message become information we hold.

Updates to This Notice

This Privacy Policy may be revised at any point so that it continues to match our operating practices, the technologies we rely on, applicable legal obligations, or other relevant developments. Should a revision be significant, we will signal it by changing the "Last updated" date shown at the top of this page, and, when circumstances call for it, we will give further notice as well, for example through an email message or a clearly visible notice posted on the site.

Checking back on this Privacy Policy now and then is something we recommend, so that you remain aware of the ways in which your data is safeguarded.

How to Reach Us

Should you have questions, concerns, or requests relating to this Privacy Policy or the way we handle your information, you are welcome to reach out to us:

Response time: Privacy-related messages receive a reply from us within 24 hours

Additionally, if you feel that we have failed to resolve your concerns to your satisfaction, you retain the right to file a complaint with the data protection supervisory authority in your jurisdiction.

Privacy Policy