Privacy Policy

1. Information we collect

• Newsletter signup. If you subscribe, we collect your email address, the time you consented, and the exact consent wording you agreed to (for example: "I agree to receive emails from eBike Law Hub."). This is stored in our database (see Section 4).
• Technical data. When you visit the Service, our hosting provider and infrastructure may automatically receive information such as your IP address, browser type, device type, referring URLs, and dates and times of requests. We use this to operate, secure, and improve the Service.
• Cookies and similar technologies. We may use cookies or similar technologies that are strictly necessary to run the site. If we add analytics or marketing cookies later, we will update this Policy and, where required, obtain consent.

2. How we use information

We use the information above to: provide and maintain the Service; send newsletter or transactional emails if you signed up; respond to inquiries; detect, prevent, and address fraud, abuse, or security issues; comply with law; and improve the Service.

3. Legal bases (where applicable)

If laws such as the GDPR or UK GDPR apply, we rely on consent for marketing emails, legitimate interests in operating and securing the Service, and legal obligations where required. You may withdraw consent for marketing as described in Section 7.

4. Service providers

We use trusted third parties to host and operate the Service. They process information on our behalf under contractual safeguards. Examples include:

• Hosting. The Service may run on Vercel or comparable providers, which handle HTTP requests and related logs.
• Database. Newsletter data may be stored using Supabase (or another database we configure for the Service).

We do not sell your personal information as that term is commonly defined under U.S. state privacy laws.

5. Retention

We keep newsletter records as long as needed to send updates and maintain an audit trail of consent, unless you ask us to delete them or we no longer need them. Server logs are retained according to our providers' defaults and our operational needs, then deleted or aggregated where appropriate.

6. Security

We use reasonable administrative, technical, and organizational measures designed to protect information. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

7. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, or export personal information, or to object to or restrict certain processing. To exercise these rights or to unsubscribe from marketing emails, contact us using the information on our About page (or the contact method we publish). We will respond consistent with applicable law. You may also use an unsubscribe link in marketing emails when we provide one.

8. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe we have collected such information, contact us and we will take steps to delete it.

9. International users

If you access the Service from outside the United States, your information may be processed in the United States or other countries where our providers operate. Those countries may have different data protection laws than your own.

10. U.S. state privacy notices

Residents of certain U.S. states (including California) may have additional rights regarding personal information, such as the right to know what we collect, to request deletion, and to opt out of certain "sales" or "sharing" for cross-context behavioral advertising where applicable. We describe our practices in this Policy; contact us to submit a request. We will not discriminate against you for exercising privacy rights where such protection applies.