Privacy Policy

1. Who we are

HYPEBOX LTD ("we", "us", "our") is the data controller for personal data processed through the Hyyryn platform. We are registered in England and Wales under company number 16355767 and trade as Hyyryn.

If you have any questions about how we handle your data, contact our data protection team at support@hyyryn.com.

2. What data we collect

We collect different categories of personal data depending on how you use the platform:

3. How we use your data

We use your personal data to: operate and maintain the marketplace platform; match Customers with Pros; process payments via Stripe Connect and manage payment protection; have Stripe verify the identity of Pros before they are paid, and check their credentials once those checks run; send transactional communications (job updates, payment confirmations, security alerts); improve the platform through usage analysis; comply with legal and regulatory obligations; and resolve disputes between users.

We will never sell your personal data to third parties for marketing purposes.

4. Legal basis for processing

Under UK GDPR, we process your data on the following legal bases:

• Contract: Processing necessary to provide you with the Hyyryn service (account management, job matching, payment protection).
• Legitimate interests: Platform security, fraud prevention, service improvements, and internal analytics, where these interests do not override your rights.
• Legal obligation: Anti-money laundering checks, tax reporting, and regulatory compliance.
• Consent: Marketing communications (you can withdraw consent at any time).

5. Who we share data with

We share personal data only where necessary to operate the platform:

• Between users: When a Customer hires a Pro, relevant contact and job details are shared between the parties.
• Payment processors: Stripe processes card payments and holds funds in their regulated safeguarded accounts via Stripe Connect, releasing them on instruction from Hyyryn in accordance with our Terms of Service. They process data under their own privacy policies.
• Stripe, for identity: Stripe verifies the identity of a Pro who sets up payouts, on its own pages and under its own privacy notice. Hyyryn’s checks of professional credentials are not running yet.
• Hosting and infrastructure: Cloudflare (hosting, CDN, security). Data is processed in accordance with their data processing agreements.
• Legal and regulatory: We may disclose data to law enforcement, regulators, or courts where required by law.

All third-party processors are bound by data processing agreements and are required to handle your data in compliance with UK GDPR.

6. Data retention

We retain your personal data for as long as your account is active or as needed to provide services. After account closure:

• Account and profile data: deleted within 30 days, unless retained for legal reasons.
• Transaction records: retained for 7 years to comply with HMRC requirements.
• Messages and job history: retained for 2 years after the last activity, then anonymised.
• Usage and analytics data: anonymised after 26 months.

7. Your rights under UK GDPR

You have the following rights in relation to your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Ask us to correct inaccurate or incomplete data.
• Erasure: Ask us to delete your data (subject to legal retention requirements).
• Restriction: Ask us to restrict processing in certain circumstances.
• Portability: Receive your data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interests.
• Withdraw consent: Where processing is based on consent, you can withdraw at any time.

To exercise any of these rights, email support@hyyryn.com. We will respond within 30 days.

8. Cookies and tracking

We use cookies and similar technologies for: essential platform functionality (authentication, security); remembering your preferences; and understanding how the platform is used (analytics).

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect platform functionality.

We do not use advertising cookies or share browsing data with advertising networks.

9. International transfers

Your data is primarily processed and stored within the United Kingdom and the European Economic Area. Where data is transferred outside the UK/EEA (for example, to Cloudflare's global network), we ensure adequate safeguards are in place, including Standard Contractual Clauses approved by the ICO.

10. Children's data

Hyyryn is not intended for use by anyone under the age of 18. We do not knowingly collect personal data from children. If we become aware that a child has provided us with personal data, we will take steps to delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or through a notice on the platform. The "Last updated" date at the top of this page reflects the most recent revision.

12. Contact and complaints

For any privacy-related questions or to exercise your rights, contact us at:

HYPEBOX LTD (trading as Hyyryn)
Email: support@hyyryn.com
General enquiries: Contact page

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

See also: Terms of Service · Help centre