Privacy Policy

Welcome to Gemstone Technology Solutions Limited (the “Company,” “we,” “us,” or “our”). We are committed to protecting your privacy and ensuring that your personal data is handled with care, transparency, and accountability. We value the trust you place in us, and we are dedicated to safeguarding your information in compliance with applicable data protection laws and regulations, including but not limited to the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other relevant international privacy frameworks.

This Privacy Policy explains how Hubeatz.com and its affiliated services collect, use, disclose, and protect your personal data when you access or use our websites, mobile applications, platforms, and any other digital products or services that reference or link to this Privacy Policy (collectively, the “Services”).

By accessing or using Gemstone Services, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and processing of your personal data in accordance with it. If you are using our Services on behalf of another individual or entity, you represent that you are authorised to do so and that you consent to our data practices on their behalf.

We operate the website hubeatz.com (the “Site”) and provide a range of technology-driven products and services intended for users around the world. Our Services may be subject to country-specific terms depending on your jurisdiction, which we encourage you to review when applicable.

We strongly recommend that you read this Privacy Policy along with our Terms of Use to understand your rights and responsibilities. If you have any questions, concerns, or requests regarding your personal data or this Privacy Policy, please contact us at support@gemstonetech.onmicrosoft.com. You may also contact the UK’s Information Commissioner’s Office (ICO) if you have concerns about how we handle your personal data.

Conditions of Use, Notices, and Revisions

Use of the Hubeatz Services is subject to this Privacy Policy and our Conditions of Use. By accessing or using any part of our Services, you agree to be bound by these terms, which govern the relationship between you and Gemstone Technology Solutions Limited globally, including within the United Kingdom.

This Privacy Policy may be updated periodically to reflect legal, regulatory, or operational changes, including updates to data protection laws in relevant jurisdictions such as the United Kingdom (UK GDPR and the Data Protection Act 2018), the European Union (EU GDPR), the United States (e.g., CCPA/CPRA), or other applicable frameworks. We may also revise this policy in response to technological advancements, improvements to our Services, or changes in our internal data practices.

All modifications to this Privacy Policy will be reviewed and approved by designated compliance officers or legal representatives within our organisation. When updates are made, we will notify you through appropriate channels — such as in-app messages, email notifications (where applicable), or prominent notices on our website — to help ensure that you remain informed about how your personal data is being processed.

Your continued use of the Services after any changes to this Privacy Policy signifies your agreement to the updated terms. If you do not agree with the revised policy, you should discontinue use of the Services before the changes take effect. We strongly encourage you to review this Privacy Policy periodically for the most current information on our data protection practices.

If you have concerns about our handling of personal data within the UK, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at https://ico.org.uk.

Consent

By clicking “Accept,” registering an account, or otherwise accessing or using our Services, you confirm that you have read, understood, and agreed to the terms of this Privacy Policy, and you provide your consent to the collection, use, disclosure, and processing of your personal data as described herein.

Your consent may serve as the legal basis for certain processing activities where required under applicable laws, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other international data protection frameworks. Where the law requires explicit or granular consent for specific data uses — such as direct marketing communications, use of cookies or similar technologies, or transfers of your personal data outside the UK — we will request such consent clearly and separately at the appropriate point of interaction.

If you do not agree to this Privacy Policy or any updates to it, you should discontinue use of the Services. You have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. You can do so by contacting us at support@gemstonetech.onmicrosoft.com. Please be aware that withdrawing consent may limit or prevent access to certain features or functionalities of the Services.

Your continued use of Hubeatz Services following any policy updates, or after providing explicit consent where required, will be taken as confirmation of your ongoing agreement with this Privacy Policy.

How We Collect Your Personal Information

We collect personal information through a variety of means, including directly from you, automatically through your interactions with our Services, and, where applicable, from third-party sources with your authorisation or as permitted by law.

Information You Provide Directly to Hubeatz

We collect personal data that you voluntarily provide during your interactions with our Services. This may include when you:

• Register or create an account on our platform
• Make purchases or subscribe to our products or services
• Download content or use mobile features
• Adjust your account settings or preferences
• Contact customer support or provide feedback
• Participate in surveys, promotions, competitions, or user reviews

The types of information we may collect directly from you include, but are not limited to:

• Personal identifiers: name, date of birth, gender, postal address, email address, phone number
• Account details: username, password, and profile settings or preferences
• Payment and billing information: including credit/debit card details and billing address (processed securely via third-party payment providers)
• Location data: manually entered or derived from your use of location-enabled features
• User-generated content: such as reviews, messages, uploaded media, and interaction history

Where required under UK law (e.g., UK GDPR), we will obtain your explicit consent before collecting or processing any special category personal data (such as health data or biometric identifiers).

Account and Data Deletion

To delete your account and all associated data, follow these steps within the mobile app:

• Open the app and log in
• Go to the Accounts Tab
• Go to Help and Support
• Tap Delete my account
• Follow the account deletion steps and provide the necessary credentials
• Confirm the deletion

This action is irreversible. All personal data associated with your account will be permanently deleted.

If you have any issues, please contact support@gemstonetech.onmicrosoft.com

Information Collected Automatically

When you use or interact with our Services, we automatically collect certain technical and usage-related information through technologies such as cookies, web beacons, analytics tools, and server logs. This includes:

• IP address and approximate geolocation (e.g., city or region level)
• Device information (e.g., model, operating system, browser type, screen resolution)
• Timestamps, session duration, and login activity
• Pages viewed, content interacted with, and features used
• Referring URLs or outbound links clicked
• Diagnostic and performance-related data

We use these technologies to understand user behaviour, improve system security, remember your preferences, and deliver personalised content. In accordance with the Privacy and Electronic Communications Regulations (PECR) and UK GDPR, we present cookie consent banners where required and give you the option to manage your cookie preferences.

Information Obtained from Third Parties

We may also receive personal information from third-party sources, either with your consent or as otherwise permitted by applicable UK laws. These sources may include:

• Delivery and logistics providers (e.g., updated shipping or contact details)
• Third-party merchants or service providers integrated with our platform
• Analytics and advertising partners, such as search engines or social media platforms, to enhance personalisation and advertising effectiveness
• Identity verification and fraud prevention services, where needed to ensure compliance with legal obligations or protect user accounts

We use this information to maintain accuracy in our services, improve personalisation, detect fraud, and meet our regulatory and contractual obligations.

Use of Your Personal Information

We collect and use your personal information to provide a secure, personalised, and efficient experience across our Services. This processing supports our ability to deliver and improve the Hubeatz platform while also meeting our legal and ethical responsibilities. Specifically, we may use your personal information for the following purposes:

• Purchase and Delivery of Products: To process and fulfil orders, verify payments, arrange shipping, manage returns or refunds, and keep you informed about order status, product availability, updates, or promotional offers.
• Provision, Troubleshooting, and Improvement of Hubeatz Services: To operate, maintain, and enhance the functionality and performance of our websites, mobile applications, and digital platforms. This includes responding to user support enquiries, resolving technical issues, analysing service usage, and implementing improvements.
• Personalisation and Recommendations: To tailor content, features, product suggestions, and experiences based on your activity, preferences, and settings — including location-based services and personalised dashboards — in accordance with your consent where required.
• Legal and Regulatory Compliance: To comply with applicable UK and international laws, such as taxation, consumer rights legislation, financial regulations, anti-money laundering (AML) requirements, and data protection obligations under the UK GDPR and Data Protection Act 2018.
• Marketing and Interest-Based Advertising: To provide you with relevant advertising content and marketing messages that match your interests and browsing behaviour. Where legally required, we obtain your prior consent for direct marketing communications and provide clear opt-out mechanisms. This may involve working with trusted third-party partners or advertising platforms.
• Fraud Prevention and Security: To verify user identities, detect and prevent fraud, unauthorised access, or other malicious activity, and ensure the security and integrity of our systems and services.
• Consent-Based Processing: Where required under the UK GDPR or other applicable laws, we will only process your personal data for specific purposes — such as marketing, sensitive data processing, or optional features — if you have given explicit and informed consent. You may withdraw this consent at any time without affecting the lawfulness of processing prior to withdrawal.
• Research and Service Development: To carry out internal research, usage analytics, market trend analysis, user experience testing, and product development activities aimed at improving the functionality, relevance, and quality of our services.

We process your personal data in line with the principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality, as required under the UK GDPR and endorsed by the ICO.

Third-Party Technologies

Our Platform may contain links to, or be integrated with, third-party services, applications, or websites (“Third-Party Services”) that are not owned or operated by Gemstone Technology Solutions Limited. These may include, but are not limited to:

• Payment processors
• Delivery and logistics partners
• Analytics and performance monitoring tools
• Advertising networks and social media platforms
• Content hosting providers and plugins

When you interact with these Third-Party Services — for example, by clicking on a link, using a plug-in, or submitting personal data through an embedded form — your personal information may be collected and processed by the relevant third party. In such cases, your data will be governed by their own privacy policies, terms of use, and security standards.

We do not control and are not responsible for the privacy practices, data handling, or security measures of any Third-Party Services. We strongly recommend that you review the privacy notices of all third-party providers before interacting with their platforms or disclosing any personal data.

Where we rely on third parties to process data on our behalf (such as payment providers or IT infrastructure services), we ensure that appropriate data processing agreements and safeguards are in place, in line with the requirements of the UK GDPR.

To the maximum extent permitted by law, Gemstone Technology Solutions Limited disclaims any liability for the actions, omissions, or data practices of third parties not under our direct control.

Location Services

Location access is an important feature of Hubeatz Services and may be required for certain functionalities, such as recommending nearby restaurants, markets, stores, or delivery options based on your proximity.

We may collect location data using various technologies, including GPS signals, IP address-based geolocation, Wi-Fi access points, and mobile network information. This data helps us provide location-aware features, improve service accuracy, and enhance your overall user experience.

We collect location data only with your explicit permission, in line with the UK GDPR and the Privacy and Electronic Communications Regulations (PECR). You can enable or disable location access at any time through your device or browser settings. Please note that if you choose to disable location services, some features of the Hubeatz platform may be limited or unavailable.

All location data is processed securely and used only for legitimate purposes, as described in this Privacy Policy and in accordance with your privacy preferences. We do not use location data to track users continuously or without a clear purpose.

Communication

Hubeatz may record or monitor communications — including calls, chats, emails, or in-app messages — for purposes such as safety, quality assurance, training, compliance with legal obligations, and service improvement.

Where recording or monitoring occurs, it will be done transparently and only where there is a lawful basis for doing so under the UK GDPR. In most cases, this will be based on one or more of the following legal grounds:

• Your consent, where required and appropriate
• Our legitimate interests, such as ensuring service quality, resolving disputes, or protecting our business and users
• Legal obligations, such as complying with regulatory requirements

All communication data is stored securely, accessed only by authorised personnel, and retained in accordance with our data retention policies. You may be notified when a recording is taking place, and you have the right to object where the lawful basis is our legitimate interest (unless we have compelling reasons to continue processing).

We are committed to handling communication data lawfully, fairly, and transparently, and in accordance with the standards set out in the UK GDPR and other applicable UK privacy laws.

Surveys

From time to time, Hubeatz may invite you to participate in surveys to help us better understand user preferences and improve our products and services.

By voluntarily participating in a survey, you provide implied consent for us to collect and process your responses for purposes such as internal research, service evaluation, and feature development. Where surveys involve the collection of personal or sensitive data, we will provide clear information about the intended use and, where required, seek your explicit consent before processing.

All survey data is handled in accordance with this Privacy Policy and relevant UK data protection laws. Your responses will be kept confidential, and any insights drawn will typically be anonymised or aggregated to protect your identity unless you have agreed otherwise.

Participation in surveys is entirely optional and will not affect your access to or use of Hubeatz Services.

Disclosures of Your Personal Information

We do not sell your personal information. We take your privacy seriously and disclose your data only in accordance with the purposes outlined in this Privacy Policy and as required by applicable law, including the UK GDPR and other relevant data protection regulations.

We will share your personal data in the following circumstances:

• Transactions involving Third Parties: If you engage in transactions or activities that involve third-party services (such as payments or deliveries), we may need to share certain personal information with third-party partners to facilitate the transaction and fulfil your order.
• Third-Party Service Providers: We may engage trusted third-party companies or individuals to perform services on our behalf, such as hosting, payment processing, analytics, customer support, or marketing. These third-party providers will only access your personal data as necessary to perform their tasks and are bound by contractual obligations to protect the confidentiality and security of your data.

In addition, we may disclose your personal information in the following cases:

• Legal Compliance: If required by law, regulation, or a legal process (such as a court order), we may disclose your personal information to authorities or regulatory bodies.
• Business Transfers: In the event of a merger, acquisition, or sale of our business or assets, your personal data may be transferred as part of that transaction, subject to applicable data protection laws.
• With Your Consent: We may disclose your personal information to others if you have provided explicit consent for us to do so.

You will be notified whenever we plan to share your personal data with any third parties outside of these outlined purposes. You have the right to opt out or withdraw your consent in such cases, where applicable.

Please exercise caution when interacting with third-party sites and services, and ensure that you only provide personal information to trusted parties. We recommend reviewing their privacy policies to understand how they handle your data.

Information About Your Personal Information

Users can request confirmation, access, correction, deletion, and more regarding their personal information. Requests are subject to verification.

Storage and Security

We prioritise security and privacy in our systems. We employ physical, technical, and administrative measures to safeguard your information to prevent inadvertent loss, unauthorised access, or unauthorised alteration or disclosure of your personal data. Only individuals including employees, agents, contractors, and specific third parties, have access to your data. They handle your personal data on our instructions and are bound by confidentiality obligations.

We have put in place procedures to address any suspected breaches of personal data. We commit to notifying you and relevant regulators of any breaches if we are legally obligated to do so.

Your devices also offer security features, and it is crucial to protect against unauthorised access to your password and devices.

Retention Period

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, including to meet legal, regulatory, and contractual obligations.

In general, your personal data will be retained for no longer than two years after your last use of our Services. However, there are certain exceptions to this general rule:

• Regulatory Compliance: If we are required by law or regulation to retain your data for a longer period (for example, to comply with tax, accounting, or anti-money laundering laws), we will keep your data for the period specified by those regulations.
• User Requests: In some cases, you may request that we delete or anonymize your data before the end of the retention period. If you exercise your right to erasure, we will comply with that request in accordance with the UK GDPR unless we have a legitimate reason to retain your data (e.g., for legal obligations or contractual purposes).

Once your data is no longer needed for the purposes for which it was collected, we will securely delete or anonymize your personal information to prevent unauthorised access or use.

Disclaimer

Hubeatz is solely responsible for purchase and delivery, not vendor‘s representations. Accuracy is not guaranteed.

Direct Marketing

By subscribing, you consent to receive marketing communications. Opt-out at any time by clicking “Unsubscribe” or contacting us.

Links to Other Websites

We are not liable for third-party websites. Use links at your discretion.

Governing Law

This Privacy Policy is governed by the laws of the United Kingdom and is designed to comply with the UK General Data Protection Regulation (UK GDPR) and other applicable UK data protection regulations, including the Data Protection Act 2018.

In the event of any inconsistencies or conflicts between this Privacy Policy and the laws of your jurisdiction, the applicable laws of your country will take precedence with regard to the processing of your personal data. This includes the protection of your rights as outlined by local data protection laws.

Where required by applicable law, we will ensure that we meet all necessary legal obligations, processing personal data only for the legitimate purposes stated in this Privacy Policy.

This policy applies to all users of Hubeatz Services, regardless of location, and to anyone providing personal data to Hubeatz.