Privacy Policy

Last updated: 15 June 2026

        Summary: We collect only what we need. We do not sell your data. You have full rights over your information and can contact us at any time to access, correct or delete it.
      

1. Who We Are

This privacy policy applies to Hiddening, a self-guided scavenger hunt business operating in the United Kingdom.

Data Controller: Hiddening
Website: hiddening.com
Contact: hello@hiddening.com

We are subject to the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What Data We Collect

2.1 Purchase data

When you buy a hunt through our Stripe payment links, Stripe collects and processes your payment information. We receive only:

Your email address (to confirm your purchase)
The product purchased and transaction reference

We do not store your card details. Payment processing is handled entirely by Stripe, Inc. See Stripe's Privacy Policy.

2.2 Email newsletter subscriptions

If you sign up to our newsletter, we collect:

Your email address
The date, time and method of sign-up
Your explicit consent (recorded with a timestamp)

Email subscriptions are managed by Beehiiv. See Beehiiv's Privacy Policy.

2.3 Affiliate programme

If you sign up to our affiliate programme via GoAffPro, we collect:

Your name and email address
Payment details for commission payouts
Referral and conversion data

See GoAffPro's Privacy Policy.

2.4 Contact form submissions

If you contact us via our contact form, we collect your name, email address and the content of your message. This is used solely to respond to your enquiry.

2.5 Website analytics and technical data

Our website is hosted on Cloudflare Pages. Cloudflare may collect technical data including:

IP address (anonymised)
Browser type and version
Pages visited and time on site
Referring website

This data is used for security, performance and aggregate analytics only. See Cloudflare's Privacy Policy.

3. Legal Basis for Processing

Data type	Legal basis (UK GDPR)
Purchase and transaction data	Contract performance (Article 6(1)(b))
Email newsletter	Consent (Article 6(1)(a))
Affiliate programme	Contract performance (Article 6(1)(b))
Contact form enquiries	Legitimate interests (Article 6(1)(f))
Technical/security data	Legitimate interests (Article 6(1)(f))

4. How We Use Your Data

We use your personal data only for the following purposes:

To fulfil your purchase and provide access to your hunt PDF
To send you email newsletters and updates (only with your consent)
To manage affiliate relationships and process commission payments
To respond to enquiries and customer support requests
To maintain the security and performance of our website
To comply with our legal obligations

We will never sell, rent or trade your personal data to third parties for marketing purposes.

5. Third-Party Services

We use the following third-party processors, each operating under their own privacy policies and data processing agreements:

Service	Purpose	Privacy Policy
Stripe	Payment processing	stripe.com/gb/privacy
Beehiiv	Email newsletter	beehiiv.com/privacy
GoAffPro	Affiliate programme	goaffpro.com/privacy
Airtable	Content management	airtable.com/privacy
Cloudflare	Website hosting & security	cloudflare.com/privacypolicy
GitHub	Source code hosting	github.com/privacy

6. Data Retention

We retain your data only for as long as necessary:

Purchase records — 7 years (UK tax and accounting law requirement)
Email newsletter subscriptions — until you unsubscribe, after which we delete your data within 30 days
Contact form messages — 12 months from the date of your enquiry
Affiliate records — for the duration of your participation plus 2 years

7. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

Right of access — request a copy of the data we hold about you
Right to rectification — ask us to correct inaccurate data
Right to erasure — ask us to delete your data ("right to be forgotten")
Right to restrict processing — ask us to limit how we use your data
Right to data portability — receive your data in a machine-readable format
Right to object — object to processing based on legitimate interests
Right to withdraw consent — withdraw newsletter consent at any time by clicking Unsubscribe in any email

To exercise any of these rights, contact us at hello@hiddening.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):
ico.org.uk/make-a-complaint — Tel: 0303 123 1113

8. Cookies

Our website uses minimal cookies:

Essential cookies — required for the website to function (set by Cloudflare for security)
Affiliate tracking — GoAffPro sets a cookie to track referral links so affiliates receive correct commission. This cookie lasts 30 days.

We do not use advertising, profiling or non-essential tracking cookies. No cookie consent banner is required for essential cookies under UK PECR guidance, but we disclose their use here for transparency.

9. Data Security

We take appropriate technical and organisational measures to protect your personal data, including:

All data transmitted via HTTPS/TLS encryption
API keys and credentials stored as encrypted environment variables — never in public code
Access to data systems restricted to authorised personnel only
Third-party processors selected for their security standards and GDPR compliance

10. International Data Transfers

Some of our third-party processors (including Stripe, Beehiiv and Cloudflare) may process data outside the UK or EEA. Where this occurs, we rely on:

UK adequacy decisions
Standard Contractual Clauses (SCCs) approved by the ICO
The processors' own UK GDPR-compliant data processing agreements

11. Children's Privacy

Our products and services are not directed at children under 13 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately at hello@hiddening.com.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our website after changes constitutes acceptance of the updated policy.

13. Contact Us

For any privacy-related queries, to exercise your rights, or to make a complaint:

Hiddening
Email: hello@hiddening.com
Website: hiddening.com