Privacy Policy

1. Introduction

HazelJS ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services, in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access or use our services.

2. Data Controller

The data controller responsible for your personal data is:

3. Information We Collect

3.1 Information You Provide to Us

We collect information that you provide directly to us, including:

• Account Information: Name, email address, password, and any other information you provide when creating an account
• Profile Information: University affiliation, profile picture, and other optional profile information
• Content: Posts, comments, messages, and other content you create or share on our platform
• Communication: Information you provide when contacting us, including contact form submissions
• Waitlist Information: Email address and any other information provided when joining our waitlist
• Ambassador Applications: Information provided when applying to become an ambassador

3.2 Automatically Collected Information

We automatically collect certain information when you use our services:

• Usage Data: Information about how you interact with our services, including pages visited, time spent, and actions taken
• Device Information: IP address, browser type, operating system, device identifiers, and mobile network information
• Log Data: Server logs, including access times, pages viewed, and referring website addresses
• Cookies and Tracking Technologies: See our Cookie Policy section below

3.3 Information from Third Parties

We may receive information about you from third-party services, such as authentication providers (if you choose to sign in using third-party services) or analytics providers.

4. Legal Basis for Processing (GDPR)

Under GDPR, we process your personal data based on the following legal bases:

• Consent: When you have given clear consent for us to process your personal data for specific purposes
• Contract Performance: When processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract
• Legal Obligation: When processing is necessary for compliance with a legal obligation
• Legitimate Interests: When processing is necessary for our legitimate interests or those of a third party, provided your interests and fundamental rights do not override those interests

5. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, maintain, and improve our services
• To create and manage your account
• To process transactions and send related information
• To send you technical notices, updates, security alerts, and support messages
• To respond to your comments, questions, and requests
• To communicate with you about products, services, offers, and events
• To monitor and analyze trends, usage, and activities
• To detect, prevent, and address technical issues and fraudulent or illegal activity
• To personalize and improve your experience
• To comply with legal obligations

6. How We Share Your Information

We may share your information in the following circumstances:

6.1 Service Providers

We may share your information with third-party service providers who perform services on our behalf, such as:

• Cloud hosting and infrastructure providers
• Email service providers (e.g., AWS SES)
• Analytics providers (e.g., Google Analytics)
• Payment processors (if applicable)

These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

6.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

6.4 With Your Consent

We may share your information with your consent or at your direction.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When we no longer need your personal data, we will securely delete or anonymize it.

Specific retention periods:

• Account Data: Retained until account deletion or 3 years of inactivity
• Content: Retained until you delete it or your account is deleted
• Log Data: Retained for up to 12 months
• Marketing Communications: Retained until you unsubscribe or object

8. Your Rights Under GDPR

If you are located in the European Economic Area (EEA) or United Kingdom, you have the following rights regarding your personal data:

• Right of Access: You have the right to request copies of your personal data
• Right to Rectification: You have the right to request correction of inaccurate or incomplete data
• Right to Erasure ("Right to be Forgotten"): You have the right to request deletion of your personal data under certain circumstances
• Right to Restrict Processing: You have the right to request restriction of processing of your personal data
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format
• Right to Object: You have the right to object to processing of your personal data for direct marketing or legitimate interests
• Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw consent at any time

To exercise any of these rights, please contact us at info@hazeljs.com. We will respond to your request within one month.

You also have the right to lodge a complaint with a supervisory authority if you believe we have violated your data protection rights.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country.

When we transfer personal data from the EEA to countries outside the EEA, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions by the European Commission
• Other legally recognized transfer mechanisms

10. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our website and store certain information. Cookies are files with a small amount of data which may include an anonymous unique identifier.

Types of cookies we use:

• Essential Cookies: Required for the website to function properly
• Analytics Cookies: Help us understand how visitors interact with our website (e.g., Google Analytics)
• Functional Cookies: Remember your preferences and settings
• Marketing Cookies: Used to deliver relevant advertisements

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our service.

11. Children's Privacy

Our services are not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

12. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit (HTTPS/TLS)
• Encryption of sensitive data at rest
• Regular security assessments and updates
• Access controls and authentication
• Secure password storage (hashing)

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee absolute security.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

14. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us: