This Privacy Policy explains what personal data HC Claudius collects, why we collect it, how we share it, and the rights you have. It covers hcclaudius.com, the portal at app.hcclaudius.com, the newsletter, and the Services described in our Terms of Use.

References to "we", "us", and "our" mean HC Claudius. This policy does not cover the practices of third parties, including the platforms we link to.

1. Information we collect

  • Contact and account details: your name, email, password (stored hashed), and profile details when you subscribe, book a call, or create an account.
  • Business and listing information: the details you give us about a business you want to buy or sell, including financials, documents, and messages.
  • Payment information: handled by PayPal. We receive a payment reference, status, amount, and the email associated with the account, not your full card or bank details.
  • Communications: messages you send through the portal, email, or booking, and our replies.
  • Usage and device data: IP address, browser and device type, pages viewed, and similar data collected through standard server logs and cookies.
  • Newsletter and podcast data: your email and engagement with the newsletter, and basic analytics provided by the podcast platforms.

2. How we collect it

  • From you, when you sign up, subscribe, list a business, book a call, or contact us.
  • Automatically, from your browser or device when you use the Services.
  • From service providers, such as PayPal (payment status) and our email and hosting providers.

3. How we use it

  • to create and manage your account and provide the Services;
  • to process memberships, listing fees, success fees, and refunds;
  • to match buyers and sellers and to share listing details with prospective counterparties;
  • to send the newsletter, service messages, and updates you asked for;
  • to respond to enquiries and arrange calls;
  • to keep the Services secure, prevent fraud and abuse, and enforce our Terms; and
  • to understand how the Services are used and improve them.

4. Legal bases

Where the law requires a legal basis, we rely on your consent (for marketing emails), the performance of a contract (for a membership, listing, or account), our legitimate interests (to run, secure, and improve the Services), and legal obligations (such as keeping financial records). You can withdraw consent at any time, without affecting processing that happened before.

5. Cookies and local storage

We use a small amount of local storage to remember your theme preference and to keep you signed in to the portal. We do not currently run advertising cookies. Third-party players, such as Spotify, and the PayPal checkout may set their own cookies when you choose to use them. You can block or clear cookies in your browser, but parts of the portal may stop working.

6. Who we share it with

We share personal data only as needed to run the Services:

  • Service providers, including Cloudflare (hosting and security), PayPal (payments), our email provider (newsletter and transactional email), and Spotify (the podcast).
  • Other users, when you choose to share a listing or message a counterparty. We control what contact details are exposed and do not publish your email, phone number, or address without your consent.
  • Professional advisers and authorities, where required by law or to protect our rights.
  • A successor, in connection with a merger, acquisition, or sale of assets.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising.

7. How long we keep it

We keep personal data for as long as needed to provide the Services and for the period required by law. Newsletter data is kept until you unsubscribe. Listing and transaction records are kept while the listing is live and for the period we need to handle disputes and meet accounting and legal duties. You can ask us to delete your account data, subject to those obligations.

8. Security

We use reasonable technical and organisational measures to protect personal data, including encryption in transit, access controls, and hashed passwords. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. International transfers

We and our providers may process data in countries other than yours, including the United States. Where we transfer data from the European Economic Area, the United Kingdom, or Switzerland, we rely on appropriate safeguards such as the provider's standard contractual clauses.

10. Your rights

Depending on where you live, you may have the right to access, correct, delete, or port your personal data, to object to or restrict certain processing, and to withdraw consent. To make a request, email [email protected]. We will verify your request and respond within the time the law allows.

California residents. You have the right to know what personal information we collect and how we use it, to request deletion or correction, to opt out of the sale or sharing of personal information (we do not sell or share it for cross-context behavioural advertising), and not to be discriminated against for exercising your rights. You or your authorised agent may make a request using the contact above.

11. Children

The Services are for people 18 and over and are not directed to children. We do not knowingly collect personal data from children under 16. If you believe a child has given us data, contact us and we will delete it.

12. Third-party links

The Services link to third-party sites such as Spotify, Apple Podcasts, Amazon, and PayPal. We are not responsible for their content or privacy practices. Read their policies before using them.

13. Changes

We may update this policy. If we make a material change, we will post it on this page and update the date at the top. Where the law requires it, we will ask for your consent.

14. Contact

For any privacy question or request, contact [email protected].