Privacy Policy

1. Introduction

Welcome to Heyo ("we", "our", or "us"). Heyo is operated by Unlimit Lab Limited, a company registered in England and Wales, with its principal place of business in Gloucester, United Kingdom.

We are committed to protecting your personal information and your right to privacy in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the EU General Data Protection Regulation (EU GDPR, Regulation 2016/679) (where applicable to EU users), and the Privacy and Electronic Communications Regulations 2003 (PECR). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit Heyo.to and use our services.

Where we refer to "GDPR" in this policy, we mean both the UK GDPR and EU GDPR as applicable to you based on your location.

If you have any questions or concerns about this policy, please contact our Data Protection Officer at privacy@Heyo.to.

2. Data Controller & ICO Registration

Unlimit Lab Limited is registered with the Information Commissioner's Office (ICO) as a data controller under the UK Data Protection Act 2018 and UK GDPR. Our registration confirms that we process personal data in accordance with the requirements of data protection legislation.

Unlimit Lab Limited (ICO Ref: ZC097708), trading as Heyo, is the data controller for personal data collected through this platform. For data protection enquiries, contact our Data Protection Officer at privacy@Heyo.to.

3. Information We Collect

3.1 Personal Information You Provide

We collect personal information that you voluntarily provide to us when you:

• Register for an account (full name, email address, username, password)
• Create or edit your creator profile (bio, social media links, profile photo)
• Contact us via email or support channels
• Subscribe to our newsletter or marketing communications

3.2 Information Automatically Collected

When you visit our website, we automatically collect certain information, including:

• Device information (browser type, operating system, device type)
• Usage data (pages visited, time spent, click patterns)
• IP address and approximate location
• Cookies and similar tracking technologies (see our Cookie Policy)

3A. Creator-Uploaded Content & Media Storage

When creators upload content (including videos, images, thumbnails, and descriptions) to Heyo, we process and store this data as follows:

• Video Content: Videos are uploaded to and hosted on our content delivery network (CDN) partner, Bunny.net, for global distribution and playback. Each creator subscription includes 50 GB of video storage.
• Thumbnails & Images: Uploaded thumbnails and product images are stored on our secure servers.
• Metadata: Video titles, descriptions, file sizes, durations, and playback analytics are stored in our database.
• Storage Usage: We track and display your storage usage to help you manage your allocation. Used and free storage is displayed in your Video Studio dashboard.

By uploading content, you acknowledge that this data will be processed and stored in accordance with this Privacy Policy and our Terms of Service.

3B. Creator Content Liability & Legal Responsibility

Heyo (Unlimit Lab Limited) operates as a hosting platform. We do not monitor, endorse, or assume liability for creator-uploaded content. Specifically:

• Copyright & Intellectual Property: Creators must ensure they hold all necessary rights, licences, and permissions for all content they upload. Any copyright infringement claims will be directed to the creator.
• Defamation & Legal Claims: Any legal proceedings arising from creator content — including defamation, breach of contract, or regulatory non-compliance — are the sole responsibility of the creator.
• Content Compliance: Creators must ensure their content complies with all applicable UK, EU, and international laws, including but not limited to the Copyright, Designs and Patents Act 1988 and the Defamation Act 2013.
• Indemnification: By uploading content, creators agree to indemnify and hold harmless Unlimit Lab Limited from any claims, damages, or expenses arising from their content.

If we receive a valid legal complaint about creator content, we may remove the content and/or notify the creator. Heyo will cooperate with law enforcement and regulatory authorities as required by law, but will not act as a legal representative for the creator.

3C. Video Analytics & Performance Data

When viewers watch creator videos, we collect the following performance data:

• View counts and engagement metrics
• Geographic distribution of viewers (anonymised)
• Playback quality and buffering statistics
• Device and browser information for optimisation

This data is used to provide analytics to creators, improve our CDN performance, and enhance the viewing experience. Viewer data is processed under our legitimate interest basis and is not shared with third parties in identifiable form.

3D. Content Removal & Recycle Bin

When a creator deletes a video from their dashboard:

• The video is moved to a recycle bin and is no longer publicly accessible or visible on the creator's profile.
• The video does not count towards the creator's storage quota while in the recycle bin.
• Creators may restore videos from the recycle bin at any time.
• Videos in the recycle bin may be permanently deleted after 30 days at our discretion.
• CDN-hosted copies may persist briefly in edge caches after deletion but will be purged within a reasonable timeframe.

If you need immediate permanent deletion of content for legal or safety reasons, contact us at privacy@Heyo.to.

4. Legal Basis for Processing

Under the UK GDPR, we process your personal data on the following legal bases:

• Consent: Where you have given clear consent for us to process your personal data for a specific purpose (e.g., marketing emails).
• Contract: Where processing is necessary for the performance of a contract with you (e.g., providing your creator profile).
• Legitimate Interests: Where processing is necessary for our legitimate interests, such as improving our services and fraud prevention.
• Legal Obligation: Where we need to process your data to comply with a legal obligation.

5. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our platform
• Create and manage your creator profile
• Process your registration and manage your account
• Send you administrative information, updates, and security alerts
• Respond to your comments, questions, and provide customer support
• Analyse usage trends to improve our services
• Detect, prevent, and address technical issues and fraud
• Send promotional communications (with your consent)

6. Sharing Your Information

We do not sell your personal information. We may share your information in the following situations:

• Public Profile Data: Your creator profile (name, username, bio, social links) is publicly visible as part of the platform's purpose.
• Service Providers: We may share information with third-party vendors who perform services on our behalf (hosting, analytics, email delivery).
• Legal Obligations: We may disclose information where required by law or to respond to legal processes.
• Business Transfers: In connection with a merger, acquisition, or sale of assets.

7. International Data Transfers

Where we transfer personal data outside the UK, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by the Information Commissioner's Office (ICO)
• Transfers to countries with adequate data protection laws
• Other lawful transfer mechanisms under the UK GDPR

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our services. When retention is no longer necessary, we will securely delete or anonymise your data. You can request deletion of your account and associated data at any time by contacting us.

9. Your Rights Under UK GDPR

Under the UK GDPR and Data Protection Act 2018, you have the following rights regarding your personal data:

• Right of Access: Obtain a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise these rights, contact us at privacy@Heyo.to. We will respond within one month.

If you are unsatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or call their helpline on 0303 123 1113.

10. Security

We implement appropriate technical and organisational measures to protect your personal information, including encryption of data in transit and at rest, regular security assessments, access controls, and staff training on data protection.

11. Children's Privacy

Our services are not intended for individuals under the age of 18. You must be at least 18 years old to create an account on Heyo. We do not knowingly collect personal information from anyone under 18. If you become aware that a person under 18 has provided us with personal data, please contact us immediately at privacy@Heyo.to and we will take steps to delete such information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. Material changes will be communicated via email or a prominent notice on our website.

13. Contact Us

If you have questions about this Privacy Policy, please contact us: