Privacy Policy

1. Who we are

This website (stupidhuman.dev) is operated by Stupid Human Ltd, a private limited company registered in England and Wales, company number 16995751, with its registered office at 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom. In this policy "we", "us" and "our" refer to Stupid Human Ltd.

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we are the data controller for personal information we collect through this website.

2. Scope of this policy

This policy applies to information we collect from visitors to stupidhuman.dev. Our mobile and web applications (including Drop DJ, DEFICIT and spine) have their own privacy policies which take precedence for information collected through those products. Where an app privacy policy is available, you will find it linked from the app's store listing and from within the app.

3. Information we collect

Information you provide

• Contact form submissions: when you send us a message via the contact form on our homepage, we collect your name, email address and the content of your message.
• Direct communication: when you email us or otherwise contact us, we retain your message and our reply so we can respond and keep a record of the correspondence.

Information collected automatically

• Server logs: our hosting provider automatically records standard web-server information including IP address, browser type, referrer URL, and access times. This is used for security, abuse prevention and diagnosing service issues.
• Cookies: stupidhuman.dev does not currently set analytics or advertising cookies. Any strictly necessary cookies set by our hosting provider are used only to serve the site and are not used for tracking.

4. How we use your information

We use the information we collect only for the following purposes:

• to respond to messages and enquiries you send us;
• to keep records of correspondence for legal, tax and accounting purposes;
• to operate, secure and improve this website;
• to comply with our legal obligations.

We do not use your information for marketing, we do not sell your information, and we do not share it with third parties for advertising purposes on this website.

5. Legal bases for processing (UK GDPR)

We process personal information under the following legal bases:

• Legitimate interests: for responding to enquiries, operating this website and preventing abuse. Our legitimate interests are balanced against your rights and freedoms.
• Legal obligation: for retaining certain records where required by UK law (e.g. tax records).
• Consent: where we ask for your consent for a specific purpose (we do not currently rely on consent for any processing on this site).

6. Third-party services we use

• Hosting: this website is hosted by a commercial hosting provider. Server logs are retained by the provider for a short period for operational and security purposes.
• Email: messages sent through the contact form or to our published email address are processed by Google (Gmail) for delivery and storage. Google's privacy policy is available at policies.google.com/privacy.

Our mobile applications use additional services (including Google AdMob for advertising, Google Firebase for analytics and authentication, and Apple MusicKit / iTunes Search API for audio). Those services are disclosed in each app's own privacy policy.

7. Advertising in our apps

This website does not display advertisements. Advertising appears only within some of our mobile apps, provided by Google AdMob (operated by Google LLC). Where ads are shown, the applicable app's privacy policy sets out what data is collected for advertising purposes, including device advertising identifiers, and how you can opt out of personalised advertising. See Google's advertising privacy and terms for more information.

8. Data retention

We retain contact form submissions and correspondence for as long as necessary to respond and for a reasonable period afterwards (typically up to 24 months) to keep a record of the conversation. Where we are required to retain records for tax, accounting or other legal purposes, we do so for the period required by law. Server logs are retained for a short period by our hosting provider (typically 30 days) and then deleted.

9. Your rights

Under the UK GDPR you have the right to:

• access the personal information we hold about you;
• request correction of inaccurate information;
• request deletion of your information (subject to legal exceptions);
• restrict or object to certain processing;
• request a copy of your information in a portable format;
• withdraw consent where processing is based on consent;
• lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

To exercise any of these rights, please contact us at the address below.

10. Data security

We use TLS/HTTPS for all connections to this website. Where we store personal information (for example in our email system), we rely on the technical and organisational security measures of our service providers together with our own access controls. No system is completely secure, and we cannot guarantee the security of information transmitted over the internet, but we take security seriously and act promptly if we become aware of an issue.

11. International transfers

Some of our service providers (including Google) may process information outside the United Kingdom. Where that happens, we rely on lawful transfer mechanisms recognised under the UK GDPR (such as the UK International Data Transfer Agreement or the European Commission's Standard Contractual Practices, as applicable).

12. Children

This website is not directed at children under 13, and we do not knowingly collect information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

13. Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last updated. Material changes will be highlighted on this page.

14. Contact us

If you have questions about this policy, or wish to exercise any of your rights, contact us at: