Privacy policy

the short version

• this website does not set cookies or use advertising trackers. we measure how the site is used with posthog in cookieless mode: nothing is stored on your device, nothing you type is recorded, and visitors are counted with a one-way code that changes every day, so we cannot follow you from one day to the next. the booking calendar is provided by cal.com and loads on the book a call page, so opening that page contacts cal.com. no other page does.
• we only receive personal data when you choose to send it to us (an enquiry, a creator application, an email or a booked call).
• our hosting provider processes standard server logs, including ip addresses, to serve and secure the site.
• you can ask us to see, correct or delete your data at any time.

what we collect and why

when you contact us or send a brief. if you email us or book a call, we receive what you give us: typically your name, email address, brand or company, website, and anything you write in the booking form. we use this to reply to you, scope and deliver work you ask for, and keep a record of our correspondence. our lawful basis is taking steps at your request before entering into a contract, and where we already work together, performance of that contract.

when you apply to the creator roster. we receive your name, email address, where you are based, your social media accounts and any other links you share, your discord username if you give it, the kinds of videos you make and the niches you know, your biggest following, what you film with, when you can film, your rate expectations, anything else you choose to tell us, and your confirmation that you are 18 or over. we use this to assess whether you fit briefs we are casting and to contact you about paid work. our lawful basis is taking steps at your request before entering into a contract, and our legitimate interest in running a creator roster. applying does not guarantee work.

when you book a call. the "book a call" calendar on this site is provided by cal.com, embedded from cal.com. it loads as soon as you open that page, so visiting /book contacts cal.com and may set cookies within the embedded calendar. no other page on this site loads it. when you book, cal.com collects the details you enter (name, email address, brand or company and what you want to make), writes the meeting into our google calendar with a google meet link, and sends you the confirmation email. cal.com processes those details on our behalf under its privacy policy, and google receives the meeting details because the call runs on google calendar and google meet, under the google privacy policy. we use the booking details only to hold and run the call. you can cancel or reschedule from the links in the confirmation email.

technical data. like almost every website, our hosting provider records server logs when pages are requested. these can include your ip address, browser type, the pages you request and the time of the request. they are used to deliver the site, keep it secure and diagnose faults. our lawful basis is our legitimate interest in running a reliable, secure website.

how we measure visits. we use posthog (posthog inc.), on posthog's eu cloud, to understand how people use this website: which pages are viewed and for how long, how visitors arrived (for example the website that linked to us, or a campaign tag in the link), which links and buttons are clicked and where on a page people click or move the pointer, how far pages are scrolled, whether a call booking or creator application is completed, and whether pages load slowly or break. it runs in cookieless mode. it does not set cookies or use your browser's local or session storage, it does not record your screen or what you type into any form, and we never tell it who you are. to count unique visitors, posthog's servers combine your ip address and browser details with a random value that changes every day and is then deleted, and keep only the resulting one-way code, so you are not recognised on another day. your ip address is not stored with these events and is not used to work out your location. when you book a call we record that a booking was made and the meeting time, never your name, email address or what you wrote. when you send a creator application we record that it was sent and your multiple-choice answers (such as where you heard about us and your follower range), never your name, contact details, accounts, links, rate or anything you typed. our lawful basis is our legitimate interest in understanding and improving our website. you can object at any time by emailing us, and any standard content blocker will stop it; the site works the same either way.

we do not buy data about you, and we do not use your data for automated decision-making or profiling.

cookies and similar technologies

this website itself does not set cookies, does not use local or session storage to track you, and does not load advertising or social-media tracking scripts. the posthog analytics described above runs without cookies or any storage on your device. the one exception is the book a call page: the cal.com calendar embedded there is a third-party service and may set its own cookies inside that embedded calendar as soon as the page opens. those cookies are cal.com's and are used to run the booking, not to track you across the web; cal.com's own privacy policy covers them. if you would rather not load it at all, you can book from cal.com directly instead, or simply not visit that page. if we ever add non-essential cookies of our own, we will update this policy and ask for your consent first.

third parties we rely on

we use a small number of service providers to run this site and our business. they process data on our behalf or as independent controllers under their own policies:

some of these providers are based in, or store data in, the united states. where personal data leaves the united kingdom we rely on the uk's adequacy regulations or the international data transfer agreement / addendum so that your data stays protected.

how long we keep data

we keep enquiries and correspondence for as long as we are talking to you and for up to two years afterwards, so we can pick up where we left off. if we work together, records connected to the engagement are kept for six years after it ends to meet accounting and legal obligations. creator applications are kept for up to two years unless you ask us to delete them sooner. server logs are retained by our hosting provider for a short rolling period. analytics events are kept by posthog for up to 12 months and then deleted.

your rights

under the uk gdpr and the data protection act 2018 you can ask us to:

• tell you what personal data we hold about you and give you a copy;
• correct anything that is wrong or incomplete;
• delete your data, where there is no good reason for us to keep it;
• restrict or object to how we use it, including for our legitimate interests;
• give you your data in a portable format where we process it by automated means on the basis of contract or consent;
• withdraw consent at any time, where consent is the basis we rely on.

to exercise any of these, email avi@hypjam.com. we will respond within one month. you also have the right to complain to the information commissioner's office at ico.org.uk, although we would appreciate the chance to sort things out first.

children

this website and our services are aimed at businesses and adult creators. we do not knowingly collect personal data from anyone under 18. if you believe a child has sent us data, contact us and we will delete it.

security

we take reasonable technical and organisational steps to protect the data we hold, including https everywhere on this site, access limited to the people who need it, and reputable providers. no method of transmission over the internet is completely secure, so we cannot guarantee absolute security.

changes to this policy

when we change this policy we will update the date at the top. material changes will be flagged on this page.

contact

hypjam, london, united kingdom · avi@hypjam.com