Privacy Policy

1. Who is responsible for your data

The data controller is HACKETT ELECTRICAL LIMITED, a private limited company registered in England and Wales, with its registered office at 8 Narwhal Crescent Wouldham, ME1 3DL, United Kingdom. You can reach us about privacy at support@hackelec.shop or +44 7920192326.

2. What we collect

• Account data — name, email address and authentication details when you create an account or subscribe.
• Subscription and billing data — plan, billing status, billing country and the last four digits and card type as provided by our payment processor. We never receive or store your full card number.
• Tool inputs — the room briefs you enter: room type, dimensions, ceiling height, orientation, tasks, pain points, rewire and smart preferences, mood and free-text notes.
• Generated results — the lighting plans, visual deliverables, renders and reveal videos produced from your inputs.
• Uploads and example data — any room photo or sketch you choose to provide to guide a render.
• Support and enquiry data — messages you send through our contact and planning-enquiry forms.
• Technical and usage data — IP address, device and browser type, and pages viewed, collected through cookies and server logs.

3. Collection sources (where the data comes from)

Our collection sources are:

• Directly from you — when you register, subscribe, enter a room brief, upload a file, or contact us.
• Automatically from your device — technical and usage data collected through cookies and server logs as you use the site.
• From our processors — billing status from our payment processor (Stripe) and generation results from our AI provider.

4. Why we use it and our legal bases

5. AI data handling: user input, generated output and uploads

User input. Your room briefs and free-text notes (your user input) are processed only to generate and deliver your lighting plans and visuals, and to let you revisit them in your account.

Generated output. The lighting plans, images, renders and reveal videos we create (your generated output) are stored with your account so you can view, download and export them. You can request their deletion.

Uploads and example data. Any room photo or sketch you upload is cached only for as long as needed to produce your outputs and is cleared within 30 days by default.

AI provider. Generation is performed by a third-party AI provider acting as our processor under contract. Your user input and any upload are sent to the AI provider only to return your generated output; the AI provider does not receive your account or payment details. We do not use your user input, uploads or generated output to train AI models, and our AI provider is contractually restricted from doing so.

6. Who we share it with

We share data only with processors who help us run the service, under contract and only as needed:

• Hosting and delivery — Vercel Inc. (application hosting and content delivery).
• Payments — Stripe, Inc. (checkout, subscriptions and the customer portal). Stripe processes your card details directly; we do not see your full card number.
• Database and storage — Supabase (account, enquiry and lead records).
• AI provider — the AI generation service that renders your images and reveal videos from the prompts we build.
• Email — the email service we use to reply to you.

We do not sell your personal data. We may disclose data where required by law.

7. International transfers

Some processors are located outside the UK and EEA, including in the United States. Where data is transferred internationally we rely on appropriate safeguards such as the UK International Data Transfer Agreement / Addendum and the EU Standard Contractual Clauses.

8. How long we keep it

• Account and subscription records: for the life of your account and up to 6 years afterwards for tax and accounting.
• Tool inputs and generated results: while your account is active, then deleted on request or within a reasonable period after closure.
• Uploaded photos and sketches: cleared within 30 days by default.
• Support and enquiry messages: up to 24 months.

9. Your rights

Under UK GDPR and EU GDPR you have the right to access, rectify, erase, restrict or object to processing, to data portability, and to withdraw consent at any time. To exercise any right, email support@hackelec.shop. You can also complain to the UK Information Commissioner's Office (the ICO) or your local EU supervisory authority.

10. California rights and Do Not Sell or Share

If you are a California resident, the CCPA/CPRA gives you the right to know, delete and correct your personal information, and to opt out of the sale or sharing of personal information and of targeted advertising. We do not sell or share your personal information as those terms are defined under the CCPA/CPRA, and we do not use it for cross-context behavioural advertising. To make a request, email support@hackelec.shop. We will not discriminate against you for exercising your rights.

11. Cookies and analytics

We use a small number of cookies to run the service and, with your consent, to understand usage. See our Cookie Policy for details and how to change your choices.

12. Automated decisions and children

The studio generates lighting plans and visuals automatically from your inputs, but these are planning references only and do not produce legal or similarly significant effects about you. The service is not directed at children: it is not for anyone under 13, and users aged 13–17 must have the consent of a parent or guardian. We do not knowingly collect data from children under 13.

13. Security

We use encryption in transit, access controls and reputable processors to protect your data. No method of transmission or storage is completely secure, but we work to protect your information and review our measures.

14. Changes and contact

We may update this policy and will change the “last updated” date above. For any privacy question or request, contact support@hackelec.shop.