A £2.99 monthly subscription is required to use Hawk Organiser.
Hawk Organiser can store information about your exercise and fitness activities, including activity type, exercise, distance, time, steps, weights, sets and repetitions.
Some fitness information may constitute health data under UK data protection law and is therefore given additional protection.
I explicitly consent to Hawk Data Ltd processing the fitness and health-related information I choose to enter into Hawk Organiser for the purpose of providing the Fitness Tracker and Fitness Dashboard.
I understand that using the Fitness Tracker is optional and that I can withdraw my consent at any time.
Hawk Organiser is provided by Hawk Data Ltd (“Hawk Data”, “we”, “us” or “our”).
Hawk Data Ltd is the data controller for personal information processed through Hawk Organiser where we determine how and why that information is used.
Hawk Data Ltd
The Briars
Mill Lane
Horseman's Green
SY13 3EA
United Kingdom
Email: support@hawkdata.co.uk
ICO registration reference: ZC250782
This Privacy Policy explains what personal information we collect when you use Hawk Organiser, why we use it, how it is protected and the rights you have in relation to it.
When you use Hawk Organiser, we may process the following types of personal information.
Account information includes your email address, account identifier, password in securely hashed form, account creation information and information needed to maintain your login session.
Subscription information includes your subscription status, Stripe customer and subscription identifiers and information about the current subscription period. Payment card details are handled by Stripe and are not stored by Hawk Organiser.
Tasks and productivity information includes tasks, descriptions, priorities, due dates, completion information and Task Performance information.
Planner information includes information you enter into the Planner, including dates and details of planned activities.
Aide Memoire and Name Reminder information includes checklists, reminders, names, context and other information that you choose to enter.
Fitness information may include activity type, exercise, date, distance, time, steps, weights, sets and repetitions.
Settings and technical information includes application preferences and information required to maintain the security and operation of your account and login session.
The content you enter into free-text areas of Hawk Organiser is determined by you. You should avoid entering information that you do not need Hawk Organiser to store.
The Fitness Tracker and Fitness Dashboard are optional features.
Some Fitness information may constitute, or allow inferences about, health information. Health information is classed as special-category personal data under UK data protection law and receives additional protection.
Before enabling Fitness, Hawk Organiser asks you to expressly confirm:
For this processing, we rely on your consent under Article 6(1)(a) UK GDPR and, where the information constitutes special-category health data, your explicit consent under Article 9(2)(a) UK GDPR.
We keep a record of the consent you give, including the consent version and the time it was granted. If you withdraw consent, we also retain a record of when it was withdrawn. This allows us to demonstrate and manage your privacy choices.
You may withdraw Fitness consent at any time through Account → Privacy → Withdraw Fitness Consent. Withdrawing consent disables access to the Fitness Tracker and Fitness Dashboard. It does not affect the lawfulness of processing carried out before consent was withdrawn.
You may separately permanently delete your Fitness activity records through Account → Privacy → Delete Fitness Data. This action cannot be undone.
Hawk Organiser allows you to enter your own tasks, reminders, planner information and other content. Some of this information may relate to other people.
You are responsible for ensuring that information you enter about another person is appropriate and that you have a lawful reason to record it.
We recommend that you do not enter sensitive or special-category information about another person unless it is genuinely necessary and you are entitled to do so.
We use personal information where necessary to provide and operate Hawk Organiser, including to create and secure your account, authenticate you when you sign in, provide the Tasks, Planner, Aide Memoire, Name Reminder and other application features, maintain your subscription, process payments through Stripe, provide optional Fitness functionality where you have consented to it, provide support, maintain backups, protect the security and reliability of the service, investigate technical problems and comply with applicable legal obligations.
We do not sell your personal information.
Our principal lawful bases under UK data protection law are:
Performance of a contract — Article 6(1)(b). We process information that is necessary to create and operate your Hawk Organiser account, provide the service you have requested and administer your subscription.
Legitimate interests — Article 6(1)(f). We may process limited personal information where necessary for our legitimate interests in securing, maintaining, troubleshooting and improving Hawk Organiser, provided those interests are not overridden by your rights and interests.
Legal obligation — Article 6(1)(c). We may process information where necessary to meet legal, accounting, regulatory or other obligations that apply to Hawk Data Ltd.
Consent — Article 6(1)(a). We rely on consent for the optional processing of Fitness information where applicable.
Where Fitness information constitutes special-category health information, we additionally rely upon explicit consent under Article 9(2)(a).
Hawk Organiser uses Stripe to manage subscription payments.
When you subscribe, relevant information is provided to Stripe so that Stripe can process the transaction and manage your subscription. This may include your email address and Hawk Organiser account reference.
Hawk Organiser stores Stripe identifiers and subscription status information required to associate your subscription with your Hawk Organiser account. Hawk Organiser does not store your payment card details.
Stripe may act as a data processor or as an independent data controller depending on the particular processing it performs. More information is available in Stripe's Privacy Policy and Privacy Centre.
Hawk Organiser is hosted using infrastructure supplied by Fasthosts Internet Limited.
Fasthosts may process information hosted on its infrastructure on our behalf as necessary to provide its services.
We may also use carefully selected providers where reasonably necessary for hosting, infrastructure, payments, backup, security or technical support.
We may disclose information where required by law or to regulators, courts, law-enforcement authorities or professional advisers where there is an appropriate legal basis to do so.
We do not permit our service providers to use information entrusted to them by Hawk Data Ltd for unrelated purposes where they are acting as our processors.
Some organisations that provide services to Hawk Data Ltd may process personal information outside the United Kingdom.
In particular, Stripe operates internationally and states that personal information may be processed in countries other than the individual's own country, including the United States.
Where Hawk Data Ltd is responsible for an international transfer of personal information, we will take appropriate steps required by applicable UK data protection law to ensure that the information remains protected.
We keep personal information only for as long as reasonably necessary for the purposes for which it is processed, including providing Hawk Organiser and meeting legal, accounting, security and regulatory requirements.
Information associated with an active Hawk Organiser account will generally be retained while the account remains active.
Cancelling a paid subscription does not by itself constitute a request to delete the account or its data.
Fitness activity information can be permanently deleted by the user through the Privacy controls in Hawk Organiser.
Records of Fitness consent and withdrawal may be retained as necessary to demonstrate how Hawk Data Ltd obtained and managed consent and complied with its data-protection obligations.
Hawk Organiser backups are currently retained for approximately 30 days. Information deleted from the live system may therefore remain temporarily within protected backup copies until those backups expire through the normal backup-retention cycle. Backups are intended for disaster recovery and are not used as active application records.
Other information may be retained for longer where required by law or where reasonably necessary to establish, exercise or defend legal claims.
We take reasonable technical and organisational measures designed to protect personal information against unauthorised access, alteration, disclosure, loss or destruction.
These measures include encrypted HTTPS connections, password hashing, authenticated user sessions, access controls, database separation between users, rate limiting, server security measures and protected backups.
No internet-based service can guarantee absolute security, but we review and develop our security arrangements as Hawk Organiser evolves.
You are responsible for keeping your Hawk Organiser password confidential and should contact us if you believe your account may have been compromised.
Hawk Organiser uses a secure session cookie that is necessary to keep you signed in and maintain the security of your authenticated session.
This cookie is used for the operation of the service rather than advertising.
The current Hawk Organiser login session can remain valid for up to seven days, subject to application and security controls.
If we introduce non-essential analytics, advertising or other technologies in future, we will review the consent and information requirements before doing so.
Depending on the circumstances, UK data protection law gives you rights in relation to your personal information. These can include the right to:
These rights are subject to the conditions and exemptions provided by law and do not all apply in every circumstance.
To exercise a data-protection right, contact support@hawkdata.co.uk. We may need to verify your identity before fulfilling a request.
Hawk Organiser provides organisational, performance and Fitness information based on information entered into the application.
Hawk Data Ltd does not currently use personal information in Hawk Organiser to make solely automated decisions that produce legal effects or similarly significant effects about users.
Hawk Organiser is intended for adults and is not designed as a service for children.
We do not knowingly seek to collect children's personal information through Hawk Organiser. If you believe a child has provided personal information to the service, please contact support@hawkdata.co.uk.
Cancelling your Hawk Organiser subscription through Stripe stops future subscription renewal in accordance with the applicable subscription arrangements. It does not automatically delete your Hawk Organiser account or the information stored within it.
Fitness information can be deleted independently through Account → Privacy → Delete Fitness Data.
For requests concerning deletion of other account information, contact support@hawkdata.co.uk.
We may update this Privacy Policy from time to time, for example where Hawk Organiser's functionality, service providers or legal obligations change.
The current version will be made available through Hawk Organiser. Where a change is significant and appropriate, we will take reasonable steps to bring it to users' attention.
The date at the top of this policy indicates when it was last updated.
Questions about this Privacy Policy, personal information held by Hawk Data Ltd or the exercise of data-protection rights can be sent to:
Hawk Data Ltd
The Briars
Mill Lane
Horseman's Green
SY13 3EA
United Kingdom
Email: support@hawkdata.co.uk
ICO registration reference: ZC250782
If you have concerns about our use of your personal information, we would welcome the opportunity to address them.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data-protection regulator.
ICO website: https://ico.org.uk/