Privacy Policy
Your privacy matters to us, and this is a topic we take seriously given what Unhook is about. This policy explains what we collect, why, how we protect it, and the rights you have over your data. We collect as little as possible and never sell it.
1. Who we are (the data controller)
UNHOOK is operated by MB JB DIGITAL, a company registered in the Republic of Lithuania (European Union), legal entity code 308048427. Throughout this policy, "we," "us," and "UNHOOK" refer to MB JB DIGITAL, which is the data controller responsible for your personal data.
Website: tryunhook.com · Contact: info@tryunhook.com
2. What data we collect
| Category | Examples | When |
|---|---|---|
| Assessment answers | Your responses to the on-site quiz (e.g. habits, focus, self-reported time), and the results generated from them | When you take the quiz |
| Contact data | Email address, and first name if you provide it | When you submit the results form |
| Payment data | Handled by our payment processor. We receive confirmation, amount, and a transaction reference: we never see or store your full card number | When you make a purchase |
| Technical & usage data | IP address, device/browser type, pages viewed, referring source, and similar server logs | Automatically, when you visit |
We do not knowingly collect special-category data (such as health diagnoses). The quiz is a self-improvement tool, not a medical assessment; please don't enter medical or sensitive information into free-text fields.
3. How we use your data, and our legal bases
Under the EU General Data Protection Regulation (GDPR), we rely on the following legal bases:
- To generate and show your results and deliver the product you purchase: performance of a contract, or steps taken at your request before entering one.
- To email you your results, your download, and order/support messages: performance of a contract and our legitimate interest in fulfilling your order.
- To send optional marketing or follow-up emails (only if you opt in): your consent, which you can withdraw at any time via the unsubscribe link or by emailing us.
- To operate, secure, and improve the site (analytics, fraud/abuse prevention, debugging): our legitimate interests in running a safe, functional service, balanced against your rights.
- To meet legal, accounting, and tax obligations: legal obligation.
4. Who we share data with (processors)
We do not sell your personal data and we do not share it for others' advertising. We use a small number of trusted service providers ("processors") who handle data only on our instructions, under contract:
- Stripe: payment processing (PCI-DSS Level 1 certified). Stripe handles your card details directly; we never receive them.
- Cloudflare: website hosting, content delivery, DNS, and security/DDoS protection. Processes technical data such as IP addresses to serve and protect the site.
- Email delivery provider: used to send your results, downloads, and support messages.
- Privacy-conscious analytics: to understand aggregate usage and improve the funnel. Where analytics use cookies or similar, we rely on your consent.
We may also disclose data if required by law, to protect our legal rights, or in connection with a business transfer, in which case we will keep this policy's protections in place.
5. International transfers
Some processors may store or process data outside the European Economic Area (EEA). Where they do, we rely on appropriate safeguards recognised under GDPR: such as the European Commission's Standard Contractual Clauses or an adequacy decision: so your data keeps an equivalent level of protection.
6. How long we keep it (retention)
- Quiz answers & results: kept only as long as needed to give you your results and improve the service, then deleted or anonymised.
- Contact data: kept while you're on our list; removed promptly when you unsubscribe or ask us to delete it.
- Order & payment records: retained as required by accounting and tax law (typically several years), then deleted.
- Server logs: retained for a short period for security and troubleshooting.
7. How we protect your data (security)
We take security seriously and design for it from the start:
- Encryption in transit: the entire site is served over HTTPS/TLS.
- Card data isolation: payments go directly to Stripe; card numbers never touch our servers.
- Data minimisation: we only collect what we genuinely need, and secrets are stored in protected server-side environment variables, never in the browser or our code repository.
- Hardened delivery: a strict Content-Security-Policy, HTTP security headers (including clickjacking and MIME-sniffing protections), and Cloudflare's network-level protection guard the site.
- Verified payment events: payment notifications are cryptographically signature-verified to prevent tampering and fraud.
- Access control: access to personal data is limited to what's necessary to operate the service.
No method of transmission or storage is ever 100% secure, but we work to protect your data using appropriate technical and organisational measures and to keep improving them. If a breach ever affects your rights, we will notify you and the relevant authority as required by law.
8. Your rights
Under GDPR you have the right to:
- Access the personal data we hold about you.
- Rectify data that's inaccurate or incomplete.
- Erase your data ("right to be forgotten").
- Restrict or object to certain processing, including direct marketing.
- Portability: receive your data in a portable format.
- Withdraw consent at any time, where processing is based on consent.
To exercise any right, email info@tryunhook.com and we'll respond within the timeframe required by law (normally one month). You also have the right to lodge a complaint with your local data protection supervisory authority in the EU.
9. Cookies & similar technologies
We use only what's needed to run the site (essential cookies/local storage, e.g. remembering your theme or session) and, with your consent, limited analytics. You can control cookies through your browser settings. Where consent is required, we ask for it before setting non-essential cookies.
10. Children
Unhook is intended for adults and is not directed at children. We do not knowingly collect data from anyone under 16. If you believe a minor has provided us data, contact us and we will delete it.
11. Third-party links
Our site may link to other websites (for example our payment page). We're not responsible for their privacy practices; please review their policies.
12. Changes to this policy
We may update this policy from time to time. We'll change the "last updated" date above and, for significant changes, take reasonable steps to let you know. Continuing to use the site after an update means you accept the revised policy.
13. Contact us
Questions, requests, or concerns about your data:
Email: info@tryunhook.com
UNHOOK · MB JB DIGITAL · Legal entity code 308048427
This document is provided for transparency and is not legal advice.