Privacy Policy

1. Our Commitment to Privacy

Skim HQ ("we", "us", "our") is a subscription newsletter service operated by OÜ HMB tech in Estonia. We are committed to protecting your privacy and handling your data responsibly. This policy explains what data we collect, how we use it, and what rights you have.

2. Data We Collect

• Account information — email address, subscription plan, and billing details necessary to provide the service
• Preferences — optional onboarding choices such as country, situation, and content interests to personalise your digests
• Usage data — email engagement events (opens, clicks) to measure delivery quality and improve content
• Device information — standard server logs (IP address, browser, timestamp) retained for security purposes
• Cookies — minimal session cookies to maintain your authenticated state. We use analytics tools to measure site usage. We do not use advertising cookies or third-party ad pixels.

3. How We Use Your Data

• Delivering digest emails to your inbox
• Processing subscription payments and managing billing
• Sending transactional emails — welcome messages, reminders, payment notices
• Personalising content based on your stated preferences
• Improving service quality and preventing abuse

We do not use your data for advertising, profiling for third parties, or any purpose not listed above.

4. Data Sharing

We share data only in these limited circumstances:

• Service providers — we use third-party providers for payment processing, email delivery, and hosting. All providers are contractually bound to protect your data.
• Legal requirements — when required by applicable law, regulation, or legal process
• With your consent — we will not share your data for any other purpose without your explicit consent

5. Data Security and Retention

• We implement appropriate technical and organisational measures to protect your data
• Active subscribers — data retained for the duration of the subscription
• After cancellation — data retained for up to 12 months, then deleted
• On erasure request — deleted within 30 days, except where retention is required by law
• Server logs — automatically deleted after 14 days

6. Your Rights

You have the right to:

• Access — request a copy of your personal data
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your data
• Portability — receive your data in a machine-readable format
• Objection — object to processing of your data

To exercise any right, contact us at privacy [at] skimhq.com.

7. Children

Skim HQ is not directed at persons under the age of 16. We do not knowingly collect data from minors.

8. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated to subscribers by email. The current version is always available at skimhq.com/privacy.

9. Contact Us

For privacy questions or to exercise your rights, contact us at privacy [at] skimhq.com.