Privacy Policy

1. Introduction

Welcome to hubgta6.com ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website.

This policy complies with the General Data Protection Regulation (GDPR)and the California Consumer Privacy Act (CCPA). By using hubgta6.com, you agree to the practices described in this policy.

2. Information We Collect

2.1 Information You Provide

• Account Information: When you register for membership, we collect your email address, username, and chosen membership tier.
• Payment Data: If you purchase a Premium or Elite membership, payment processing is handled by Stripe. We do not store full credit card numbers. Stripe's privacy policy applies to payment data.
• Communications: If you contact us via email or social media, we retain those communications.

2.2 Information Collected Automatically

• Cookies & Similar Technologies: We use essential cookies for site functionality and optional analytics cookies (with your consent). See our Cookie Policy below.
• Usage Data: We collect non-personal information about how you interact with our site, including pages visited, time spent, and referral source.
• Device Information: Browser type, operating system, and IP address (anonymized where possible).

3. How We Use Your Information

We use your data for the following purposes:

• To provide and maintain your membership account
• To process transactions via Stripe (subject to their privacy policy)
• To improve our website and user experience
• To send you membership-related communications (with your consent)
• To comply with legal obligations

4. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA), our legal basis for collecting and using your personal data depends on the specific context:

• Consent: For newsletter subscriptions and optional cookies
• Contract: To fulfill membership services you've purchased
• Legitimate Interests: For site analytics and improvement
• Legal Obligation: When required by law

5. Your Rights

GDPR Rights (EEA Users)

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a machine-readable format
• Right to Object: Object to processing based on legitimate interests

CCPA Rights (California Users)

• Right to Know: Request details about data collected, used, and shared
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt out of the sale of your personal information (we do not sell your data)
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights

To exercise any of these rights, please contact us at hubgtasix@gmail.com. We will respond within 30 days.

6. Cookies

We use cookies and similar tracking technologies. You can control cookies through your browser settings and our cookie consent banner (shown on your first visit). For more details, see our Cookie Policy below.

Essential cookies are required for site functionality (e.g., session management, age verification).Analytics cookies (if consented) help us understand how visitors use our site.

7. Third-Party Services

We use the following third-party services:

• Stripe — Payment processing. Stripe Privacy Policy
• Supabase — Database and authentication. Supabase Privacy Policy
• Cloudflare — CDN and hosting. Cloudflare Privacy Policy
• Buttondown — Newsletter delivery (if subscribed). Buttondown Privacy Policy
• YouTube — Embedded video trailers. Google Privacy Policy
• Font Awesome & Google Fonts — Icons and typography

8. Data Retention

We retain your personal data only as long as necessary for the purposes described in this policy, or as required by law. When you delete your account, your personal data is removed within 30 days, except where retention is legally required (e.g., transaction records for tax purposes).

9. Data Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit (HTTPS/TLS) and at rest, access controls, and regular security reviews. However, no method of electronic storage is 100% secure.

10. International Data Transfers

Your data may be processed outside the European Economic Area (EEA). When we transfer your data internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) where required.

11. Children's Privacy

Our site is not intended for children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us with personal data, please contact us so we can delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.