GDPR Compliance Policy

Last updated: July 2026

GDPR Statement

The General Data Protection Regulation (GDPR), which applies from 25 May 2018, creates consistent data protection rules across Europe. Hi/Lo Ventures Group welcomes the implementation of GDPR and is committed to complying with it.

Who We Are

Hi/Lo Ventures Group is a micro-SaaS venture studio that builds, launches, and invests in simple software for small contractors and the trades. For the purposes of the GDPR, Hi/Lo Ventures Group is the data controller for personal data collected through this website and our products. You can reach us at support@hiloventuresgroup.com for any question about this policy or your data.

What Data We Collect

We collect only the personal data we need to run our website, respond to enquiries, and operate our software products. Depending on how you interact with us, this may include:

1. Contact details you provide when you email us or fill out a form, such as your name, email address, and the content of your message.
2. Account information for people who use our software products, such as name, email address, business name, and login credentials.
3. Usage and device data collected automatically when you visit our website or use our products, such as pages viewed, approximate location, browser type, and cookie identifiers.
4. Billing information for paid products, which is processed by our payment providers and not stored in full on our own servers.

How We Use Your Data

We use personal data to respond to your enquiries, provide and improve our products, process payments for paid services, send service and product updates you have asked for, keep our systems secure, and meet our legal obligations. We do not use your data for automated decision-making that produces legal or similarly significant effects.

Legal Bases for Processing

We process personal data where we have a lawful basis to do so: your consent (for example, when you opt in to updates), the performance of a contract (for example, to deliver a product you use), our legitimate interests in operating and improving our business, and compliance with legal obligations.

Individual Data Rights

Our compliance policy has been developed taking into account your right to access, revise, restrict, and delete your data. As described in Chapter III of the GDPR, your rights are the following:

1. Right to be informed (Articles 12-14)
2. Right of access (Article 15)
3. Right of rectification (Article 16)
4. Right of erasure (Article 17)
5. Right to restrict (Article 18)
6. Right to data portability (Article 20)
7. Right to object (Article 21)
8. Rights related to automated decision making and profiling (Article 22)

You can exercise your rights by contacting us at support@hiloventuresgroup.com. We will respond without undue delay and at the latest within 1 month, with a limited right to extend this period by up to 2 further months for complex requests (Article 12(3)). We may ask you to provide information to confirm your identity before we act on a request. These rights apply across the EU, regardless of where the data is processed and where the company is established.
You can learn more about the GDPR through the European Commission’s page on Data Protection: https://ec.europa.eu/info/law/law-topic/data-protection_en

Sensitive Data

We do not knowingly collect or process any data considered “special category” under the GDPR, such as personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic or biometric data, or data concerning health, sex life, or sexual orientation.

Data Sharing and Third Parties

We share personal data only with trusted service providers who help us operate our website and products — such as hosting, analytics, email, and payment providers — and only to the extent needed to deliver those services. We require these providers to comply with applicable data protection law. We do not sell your personal data, and we transfer data outside the EEA only where appropriate safeguards are in place.

Data Storage and Security

We have taken appropriate technical and organizational measures to protect your data. Electronic data is stored using GDPR-compliant service providers, and access is restricted to authorized personnel who need it to do their work. We work with our vendors to ensure they comply with applicable provisions of the GDPR and other relevant privacy laws.

Data Retention

We keep personal data only for as long as necessary to fulfil the purposes described in this policy, to comply with our legal obligations, or to resolve disputes, after which it is deleted or anonymized.

Cookies and Analytics

Our website may use cookies and similar technologies to keep the site working and to understand how it is used so we can improve it. You can control cookies through your browser settings.

Social Media Data

Our website links to social media platforms including LinkedIn and X (Twitter). Any data you share with those platforms, such as identifiers shared using “like” or “follow”, is governed by the terms of agreement of each respective platform.

Things We Will Never Do

Please note that we will never:

1. Harvest or scrape personal data from online resources.
2. Purchase and use personal data from unverified sources.
3. Sell your personal data to third parties.

Data Breach Notification

We commit to notifying the relevant supervisory authorities and affected individuals of any data breach without undue delay, and where feasible not later than 72 hours after becoming aware of it. Where required, we will describe the nature of the breach, the approximate number of people affected, the likely consequences, and the measures taken to address it.

Accessing or Revising Your Data

If you would like to know what personal data we hold about you, or to correct, update, or delete it, please contact us at support@hiloventuresgroup.com. We will confirm your identity before releasing or changing any information.