WELCOME TO HOSTCAKE
Last updated: December 17, 2021
Hostcake takes user privacy seriously. This Policy describes how we handle information collected in relation to access and use of hostcake.com.au (the “Site, browser extensions, blog, and related products and services (collectively, the “Service”). When you access or use the Service, you are deemed to consent to the collection, use, retention, transfer, structuring, manipulation, storage, transmission and/or disclosure (collectively, “processing”) of your information as described in this Policy and in accordance with applicable laws.
This Policy also does not apply to websites or services you might access through links or other features (e.g., YouTube videos, Twitter buttons) on the Service. These other services have their own privacy policies, and we encourage you to review them before providing them with personal information.
Information You Give Us
We may ask for and collect the following personal information about you when you use the Service. This information is necessary for the adequate performance of the contract between you and us, for our legitimate interest in being able to provide and improve the Service, and to allow us to comply with our legal obligations. Without it, we may not be able to provide the Service as intended.
Account and Profile Information
When you create an account on a Hostcake Service (an “Account”), we require you to provide us information such as your username, password, and email address. This information is used for confirming your identity and providing access to the Service.
You can also provide us your photo, your name, and a short bio, so other users can better identify you when you collaborate with them. It also allows us to personalize your experience. As a user with a Hostcake account, you will have a publicly accessible profile where your photo, name, username, and bio will be visible. We do not expose your email address to the public.
When you contact us via our chat and email channels, you may provide us, in addition to the content of your message, your name and email address. If you call our support hotline, you provide us your phone number and any information you choose to provide us in relation to your inquiry. When you contact us for support or feedback, your information is used solely to respond to your request. We do not use your information for marketing.
Information About Your Accounts on Third-Party Services
Hostcake provides the ability to log in to the Service using your Google, Facebook, or Twitter account. If you authenticate yourself using any of these services, you grant us access to your email address, and, if available, your name, photo, and username associated with them. We do not receive your password.
When you use a service that requires payment, we collect your name, email, we do not store credit card information for the purpose of billing and charging you.
Information We Track Automatically
When you use the Service, we may automatically collect information, including personal information, about you and how you use the Service. This information is necessary for the adequate performance of the contract between you and us, to enable us to comply with legal obligations and given our legitimate interest in being able to provide and improve the Service.
If you use Hostcake on different devices, we may associate and combine the information we collect from those different devices to help us provide a consistent service across your different devices. If we do combine any automatically collected information with personal information, we will treat the combined information as personal information, and it will be protected as per this Policy.
Information Collected Using Cookies
Cookies are data that a website can store on a user’s web browser for a duration of time. Every website stores its own set of cookies and, by design, one website cannot read the cookies of another website.
Hostcake’s cookies are used to:
- authenticate users
- keep users logged in while they use the Service
- track behavior on the Service (e.g. which page the user visited after the home page)
- remember user preferences (e.g. timezone)
When you share links to external services on Hostcake, e.g. YouTube, those services may store cookies on your browser too. We have no control over the cookies they store and what they do with them.
Information Related to Your Device
We collect device-specific information such as:
- device brand, version, and type (e.g. Samsung Galaxy S9 Cellphone)
- operating system and version (e.g. Android 8.0)
- browser type and version (e.g. Chrome 63.0)
- screen size and resolution (e.g. 375px wide retina screen)
- battery and signal strength (e.g. 15% battery, 75% signal strength)
This helps us measure how the Service is performing, improve Hostcake for you on your particular device, and send you push notifications if you’ve opted in to receive them.
Information Related to the Use of the Service
We collect information about how people use the Service. This information includes general usage information, and may include information such as the number and frequency of our visitors, which pages or features of the Service they have visited, which links on the Service they have clicked on, and the length of those visits.
We may also use third party applications and services, such as Google Analytics (GA), to collect, analyze, and report this information. We may also use some of this information in aggregate form, that is, as a statistical measure related to all of our users that would not identify you personally.
We use information about your use of the Service to improve and enhance your experience on the Service.
Information Related to Your Location
An IP address is an address assigned to any device connected to the Internet. Depending on where you are, your IP address can be unique to your computer, or shared among many devices. An IP address can be used to locate the device it is assigned to, and in turn the user using it.
When you use the Service, we collect your IP address for:
- analytics (e.g. how many people from Australia used Hostcake today)
- detecting and preventing spam and malware (e.g. blocking the IP addresses posting bad links)
- troubleshooting issues with our Service
Information Related to Your Search History
We track your search queries on the Service to learn your preferences and improve your search results over time.
Information received from third-party sources
We may also obtain information, including personal information, from third-party sources to update or supplement the information you provided or we collected automatically. This may include aggregated anonymous information or certain personal information that may be provided to us. If we receive personal information from third-parties, we will handle it in accordance with this Policy. If we directly combine information we receive from other third-parties with personal information that we collect through the Service, we will treat the combined information as personal information and handle it in accordance with this Policy.
Local law may require you authorize the third-party to share your information with us before we can acquire it. We do not control, supervise, or respond to how third parties providing your information process your personal information, and any information request regarding the disclosure of your personal information to us should be directed to such third-parties.
How Long We Retain Information
Hostcake will keep information for as long as necessary to provide the Service under our Terms and Conditions and other relevant agreements between you and Hostcake. We will also retain information so as to fulfil any legal requirement to which we are subject to, e.g. trade, tax, and employment law. We will discard personal information when:
- the data subject withdraws consent to processing,
- our contractual obligations have been fully performed and cannot be performed to any further extent, or
- the personal information is obsolete.
We will also not keep any information the processing of which has been objected to, or for which a request for erasure has been made, beyond the legally required timeframe to complete such a request (usually 30 days).
Whom Do We Share the Collected Information With?
First and foremost, you should know that Hostcake does not sell or rent your personal information to any third-party for any purpose.
We share information we collect from you under the limited circumstances set forth below:
Information Shared With Service Providers in Order to Operate and Improve the Services
We work with many vendors, service providers, and other partners to help us provide the Service by performing tasks on our behalf. We may need to share or provide information (including personal information) to them to help them perform these business functions. E.g. your email address to perform troubleshooting etc.
Information Shared with Third Parties
We may share aggregated information (information about our users that we combine together so that it no longer identifies or references an individual user) and other de-identified or non-personally identifiable information, with users, partners, press, or other third-parties in order to, for example, demonstrate how Hostcake is used, spot industry trends, or to provide marketing materials for Hostcake. Any aggregated information and non-personalized information shared this way will not contain any personal information.
Information Disclosed to Fulfil Legal Obligations
We may disclose personal information if necessary to comply with the law, such as complying with a subpoena or other legal process. We may need to disclose personal information where, in good faith, we think it is necessary to protect the rights, property, or safety of Hostcake, our employees, our community, or others, or to prevent violations of our Terms of Service or other agreements. This includes, without limitation, exchanging information with other companies and organizations for fraud protection or responding to law enforcement and government requests.
Where appropriate, we may notify users about the legal requests, unless (i) providing notice is prohibited by the legal process itself, by court order we receive, or by applicable law; (ii) we believe that providing notice would be futile, ineffective, create a risk of injury or bodily harm to an individual or group, or create or increase a risk of fraud upon Hostcake, or its users. In instances where we comply with legal requests without notice for these reasons, we will attempt to notify that user about the request after the fact where appropriate and where we determine in good faith that we are no longer prevented from doing so.
Information Disclosed Pursuant to Business Transfers
Over time, Hostcake may grow and reorganize. We may share your personal information with affiliates such as a parent company, subsidiaries, joint venture partners or other companies that we control or that are under common control with us, in which case we will require those companies to agree to use your personal information in a way that is consistent with this Policy.
In the event that all or a portion of Hostcake or its assets are acquired by or merged with a third-party, personal information that we have collected from users would be one of the assets transferred to or acquired by that third-party. This Policy will continue to apply to your information, and any acquirer would only be able to handle your personal information as per this Policy (unless you give consent to a new policy). We will provide you with notice of an acquisition within 30 days following the completion of such a transaction, by posting on our homepage, or by emailing you on your email address on file. If you do not consent to the use of your personal information by such a successor company, you may request its deletion from the company.
In the unlikely event that Hostcake goes out of business, or files for bankruptcy, we will protect your personal information, and will not sell it to any third-party.
Information You Share with Third Party Services
You may access Third Party Services through the Service, for example by watching a YouTube video on a Hostcake. You may also choose to share information that you provide to us with Third Party Services (e.g., by posting your Hostcake to Twitter or Facebook). These services have their own privacy policies which we don’t govern. We encourage you to review them before providing them with personal information.
Information Shared With Your Consent or at Your Request
Other than the cases above, we will share your information only if we have your consent.
How We Secure Information
The security of your personal information is important to us. We maintain administrative, technical and physical safeguards to protect against loss, theft, unauthorized use, disclosure, or retrieval of personal information. In particular:
- We perform application security testing; penetration testing; conduct risk assessments; and monitor compliance with security policies
- We periodically review our information collection, storage and processing practices, including physical security measures, to guard against unauthorized access to systems
- We continually develop and implement features to keep your personal information safe
- When you enter any information anywhere on the Service, we encrypt the transmission of that
- information using secure socket layer technology (SSL/TLS) by default
- We ensure passwords are stored and transferred securely using encryption and salted hashing
- The Service is hosted on servers at a third-party facility, with whom we have a contract providing for enhanced security measures. For example, personal information is stored on a server equipped with industry standard firewalls. In addition, the hosting facility provides a 24×7 security system, video surveillance, intrusion detection systems and locked cage areas
- We restrict access to personal information to authorized Hostcake employees, agents or independent contractors who need to know that information in order to process it for us, and who are subject to strict confidentiality obligations and may be disciplined or terminated if they fail to meet these obligations
Although we make concerted good faith efforts to maintain the security of personal information, and we work hard to ensure the integrity and security of our systems, no practices are 100% immune, and we can’t guarantee the security of information. Outages, attacks, human error, system failure, unauthorized use or other factors may compromise the security of user information at any time.
If we learn of a security breach, we will attempt to notify you electronically (subject to any applicable laws) so that you can take appropriate protective steps; for example, we may post a notice on our Site or elsewhere on the Service, and email to your email address on file. Depending on where you live, you may have a legal right to receive notice of a security breach in writing.
Deleting Your Account
You may delete your Account at any time. You can do so from your Account Settings page on the Site or the App or by contacting us using our online contact form. If you email us directly, we may require sufficient identifying information to be able to determine that you own the account.
When you delete your account, we delete:
- your profile information and any other content you provide in your profile (such as your name, username, password, email address, and profile photos)
We also do not delete non-identifiable aggregate information about your usage of the service.
We aim to maintain our services in a manner that protects information from accidental or malicious destruction. Because of this, even after you update or delete personal information you have provided us from our Service, your personal information may be retained in our backup files, archives, and server logs for up to 30 days, unless legal obligations require us to retain them for longer periods of time.
Please be aware that deleting your Account may not fully remove all content you have published on our Service from search engine indexes (e.g. Google) and network caches. We cannot control the behavior of these entities.
You have the choice to request correction and/or deletion of personal information we process about you as well as to request that we cease communicating with you where we do so on the basis of your consent or previous customer relationship with you. If you are a registered user, you can access and update most information associated with your Account by logging in to the Service and checking your Account Settings page.
Recourse, Enforcement, Liability.
In compliance with the Privacy Shield Principles, Hostcake commits to resolve complaints about our collection or use of your personal information. Further contact information can be found at the end of this document.
If you have any questions, concerns, or complaints regarding this Policy or our data processing activities, please contact us using our online contact form or write to us at:
PO BOX 161
SAMFORD QLD 4520