Privacy Policy

Effective Date: April 2025

1. Introduction and Purpose

This Privacy Policy outlines how we collect, use, store, and protect personal data and informs users of their rights. We are committed to compliance with the General Data Protection Regulation (GDPR), ensuring transparency, lawfulness, purpose limitation, and data minimization.

2. Definitions and Terminology

“Personal Data” refers to any information relating to an identified or identifiable natural person. “Processing” means any operation performed on data. “Consent” is the user’s voluntary agreement to data processing. “Controller” refers to the entity determining purposes of processing. “Processor” acts on behalf of the controller.

3. Contact Information and Data Controller

Company: GROUND SHATTER LTD
Company number: 09055065
Address: 31 College Green, 2nd Floor, Bristol, England, BS1 5TB
Legal Contact: [email protected]

GROUND SHATTER LTD is the data controller responsible for processing and safeguarding your data.

4. Collected and Processed Data

We collect personal data including name, email, IP address, device identifiers, and payment details during registration and use. Non-personal aggregated information such as session statistics and visit data may also be collected.

We use the following analytics services:

• Google Analytics: Traffic and engagement insights.
• Simple Analytics: Privacy-focused visit tracking without cookies.
• Heap Analytics: Automatic user interaction tracking.
• Hotjar: Heatmaps, click tracking, session replays.

Data is anonymized or aggregated where feasible to reduce privacy risks.

5. Legal Basis for Data Processing

- Consent: Given upon registration or explicit agreement.
- Contract performance: For subscription access and service delivery.
- Legitimate interests: For analytics, security, and service improvements.
- Legal obligations: For tax, financial, and legal compliance.

6. Purpose and Protection of Data

We process personal data for:

• Providing access to content and subscriptions
• Conducting platform analytics
• Secure payment processing (e.g., Stripe)
• Marketing (with separate consent)

Security measures include encryption, anonymization, access restrictions, and data backups.

7. Data Retention and Deletion

We retain data for the duration required to meet processing goals or legal obligations. Users can request deletion or anonymization of their data, in accordance with GDPR rights.

8. Data Sharing with Third Parties

We may share data with payment processors, analytics providers, and technical partners. For data transfers outside the EEA, we use appropriate legal safeguards including Standard Contractual Clauses (SCCs). Each analytics provider is bound by their own privacy terms.

9. Cookies and Tracking Technologies

We use:

• Functional cookies – for login and session handling
• Analytical cookies – for usage insights (e.g., Google Analytics)
• Marketing cookies – only with explicit consent

Simple Analytics uses non-cookie-based tracking. Users can control cookie preferences in-browser or via our cookie banner.

10. User Rights under GDPR

- Right to access and be informed
- Right to rectification
- Right to erasure (“right to be forgotten”)
- Right to restrict or object to processing
- Right to data portability
- Right to file complaints with supervisory authorities

11. Data Security Measures

We implement encryption, authentication, backup, and monitoring protocols. Regular audits and updates ensure compliance with evolving security standards.

12. Changes to This Privacy Policy

We may revise this Privacy Policy at any time. Users will be notified of major changes via email or on the site. The current version always indicates the date of the latest update.

Effective date of this version: April 2025