Privacy Policy

Last Updated: January 2025

1. Introduction

HYYPAfocus ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, and protect your information when you use our Chrome extension and related services, in compliance with the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018.

2. Data Controller

3. Information We Collect

3.1 Information You Provide Directly

Email Address for Newsletter: When you voluntarily opt-in to our tips newsletter, we collect your email address.

3.2 Information Collected Automatically

Google Calendar Data: When you choose to connect your Google Calendar, we access your calendar data solely to display your next meeting information. This data is processed and stored locally within your Chrome browser extension and is not transmitted to our servers.

3.3 Information We Do Not Collect

We do not collect, store, or process:

• Your browsing history or website usage data
• Personal productivity data or task information
• Any other personal information beyond what is explicitly stated above

4. Legal Basis for Processing

Under UK GDPR, our legal basis for processing your personal data is:

Consent (Article 6(1)(a)): For newsletter email collection, we rely on your explicit consent, which you can withdraw at any time.

Legitimate Interest (Article 6(1)(f)): For Google Calendar integration, we process data based on our legitimate interest in providing you with meeting reminder functionality, balanced against your privacy rights.

5. How We Use Your Information

5.1 Email Addresses

• Send you productivity tips and updates (only if you opt-in)
• Communicate important service updates
• Respond to your inquiries

5.2 Google Calendar Data

• Display your next upcoming meeting within the extension
• Provide meeting reminders and notifications
• This data is processed locally and never leaves your device

6. Data Storage and Security

6.1 Email Data Storage

• Email addresses are stored securely in Google Firebase database
• Data is encrypted in transit and at rest
• Access is restricted to authorized personnel only
• Regular security audits and monitoring

6.2 Calendar Data Storage

• All Google Calendar data is stored locally in your Chrome browser
• No calendar data is transmitted to or stored on our servers
• Data is protected by Chrome's built-in security measures

7. Data Sharing and Third Parties

7.1 Service Providers

Google Firebase: We use Google Firebase to store newsletter email addresses. Google's privacy practices are governed by their Privacy Policy.

Google Calendar API: We use Google's Calendar API to access your calendar data, which remains local to your device.

7.2 No Data Sales or Marketing Sharing

We never sell, rent, or share your personal data with third parties for marketing purposes.

8. International Data Transfers

Email data stored in Google Firebase may be transferred to and processed in countries outside the UK/EEA. Google provides appropriate safeguards through:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions where applicable
• Google's commitment to data protection standards

9. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

9.1 Right of Access

Request a copy of the personal data we hold about you.

9.2 Right to Rectification

Request correction of inaccurate or incomplete personal data.

9.3 Right to Erasure ("Right to be Forgotten")

Request deletion of your personal data in certain circumstances.

9.4 Right to Restrict Processing

Request limitation of how we process your personal data.

9.5 Right to Data Portability

Receive your personal data in a structured, machine-readable format.

9.6 Right to Object

Object to processing of your personal data based on legitimate interests.

9.7 Right to Withdraw Consent

Withdraw consent at any time for newsletter subscriptions.

9.8 Right to Lodge a Complaint

File a complaint with the Information Commissioner's Office (ICO) if you believe we've mishandled your data.

10. Exercising Your Rights

To exercise any of these rights, contact us at: mark@hyypa.com

We will respond within one month of receiving your request. In complex cases, we may extend this by up to two additional months.

11. Data Retention

11.1 Newsletter Email Addresses

• Retained until you unsubscribe or request deletion
• Automatic deletion of inactive subscribers after 3 years

11.2 Google Calendar Data

• Stored locally in your browser only
• Deleted when you disconnect the calendar integration or uninstall the extension

12. Cookies and Tracking

Our Chrome extension does not use cookies or tracking technologies. All functionality operates locally within your browser.

13. Children's Privacy

Our service is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us immediately.

14. Changes to This Privacy Policy

We may update this Privacy Policy periodically. When we do:

• We'll update the "Last Updated" date
• Significant changes will be communicated via email (if you're subscribed to our newsletter)
• Your continued use of our service constitutes acceptance of the updated policy

15. Contact Information

For privacy-related questions or to exercise your rights:

16. Information Commissioner's Office (ICO)

If you have concerns about how we handle your personal data, you can contact the ICO:

This Privacy Policy is designed to comply with UK GDPR and Data Protection Act 2018. For the most current version, please check our website or extension store listing.