Eithect

Privacy & Data Protection

At Eithect, we believe transparency is the foundation of trust. This policy outlines exactly how we collect, process, and protect your personal information when you interact with our creative studio and subscription services.

Information We Collect

Additionally, we gather usage data—pages visited, features accessed, and session duration. This helps us optimize the platform experience and ensure our infrastructure scales reliably during high-traffic periods. All data is anonymized where possible.

Technical information including IP address, browser type, and device identifiers is logged for security purposes, fraud prevention, and to maintain the integrity of our subscription verification systems.

Data Categories Matrix

  • Identity Data: Name, username, password hash
  • Contact Data: Email address, phone number
  • Technical Data: IP, browser, device type
  • Usage Data: Analytics, feature engagement

Eithect does not collect biometric data, financial payment information (processed via third-party PCI-compliant providers), or precise location data beyond country/region for compliance purposes.

How We Use Your Information

Service Delivery

Account provisioning, feature access, and personalized content curation based on your creative preferences and interaction patterns with our tools.

Security & Compliance

Fraud detection, DDoS mitigation, and compliance with UK GDPR regulations regarding data sovereignty and user consent management.

Communication

Service updates, billing notifications, and responses to inquiries. Marketing emails require explicit opt-in consent separate from your core subscription.

Third-Party Sharing

Eithect does not sell your personal data. We share information only with essential service providers (hosting, email delivery, payment processing) under strict data processing agreements. All partners are GDPR-compliant and located within the UK/EEA where possible.

Your Data Rights

Under UK GDPR and the Data Protection Act 2018, you have robust rights over your personal data. Eithect is committed to facilitating these rights promptly and without friction.

Right to Access
Request a copy of all personal data we hold about you. We'll provide this within 30 days in a structured, machine-readable format (JSON or CSV).
Right to Erasure
Delete your account and associated data permanently. Exceptions apply for legal obligations or legitimate business interests (e.g., fraud prevention records).
Right to Rectification
Correct inaccurate information or complete incomplete data. Update your profile directly in account settings for immediate changes.
Right to Object
Object to processing for direct marketing at any time. We'll remove you from promotional lists within 24 hours of your request.

Exercise Your Rights

To exercise any of these rights, contact our Data Protection Officer using the details below. We'll verify your identity before processing to prevent unauthorized access.

Hours: Mon-Fri 9:00-18:00
Post: Eithect
Euston Road 17
Bristol, United Kingdom
Contact Support

Security Measures

Our infrastructure is hosted in UK-based data centers with SOC 2 Type II certification. Regular security audits and penetration testing ensure our defenses remain robust against evolving threats. In the event of a data breach affecting your rights, we will notify you and the Information Commissioner's Office within 72 hours.

Data Retention Policy

  • Active accounts: Retained until deletion request or 2 years of inactivity
  • Billing records: 7 years for HMRC compliance
  • Support tickets: 3 years after resolution
  • Security logs: 12 months for fraud prevention
  • Marketing consent: Until withdrawal or 2 years post-campaign

After retention periods expire, data is securely deleted or irreversibly anonymized.

Questions About Your Privacy?

Last Updated: January 2026 • Eithect Limited • Registered in England & Wales