Privacy policy

INTRODUCTION Hazel & Oak (“we”, “us”, or “our”) operates member web and mobile applications hosted through the Spacebring platform (the “Service”). This Privacy Policy explains how we collect, use, safeguard, and disclose information when you use the Service. By using the Service, you agree to the collection and use of information in accordance with this policy. Hazel & Oak acts as the Data Controller, determining how and why personal data is processed. Certain technology providers — including Spacebring — act as Data Processors on our behalf. DEFINITIONS Personal Data means information that identifies an individual directly or indirectly. Usage Data means information collected automatically through use of the Service. Cookies means small data files stored on your device. Data Controller means the entity determining purposes of processing (Hazel & Oak). Data Processor means an entity processing data on behalf of the controller (for example, Spacebring). User means an approved therapist, practitioner, renter, or administrator using the Service. INFORMATION WE COLLECT We collect information necessary to operate a shared professional workspace platform. Personal Data may include name, email address, phone number, profile details submitted during account setup, professional or business information, and booking or membership details. Some of this information may be visible to other authorized users within the Service. Users are responsible for ensuring they have legal permission to share any personally identifiable information entered into the platform. Usage Data is collected automatically and may include IP address, browser or device type, pages visited, session duration, and diagnostic information. COOKIES AND TRACKING TECHNOLOGIES We use cookies and similar technologies to operate the platform, save user preferences, improve functionality, and maintain security. Users may disable cookies through browser settings, although some features may not function properly. HOW WE USE DATA We use collected data to provide and maintain the Service, manage memberships and bookings, communicate administrative updates, provide support, improve system functionality, monitor usage, enforce agreements, and meet legal obligations. INFORMATION SHARING We may share data with service providers supporting platform operations, to comply with legal obligations, during business restructuring, or with user consent. We do not sell or rent personal information. DATA PROCESSOR DISCLOSURE — SPACEBRING We utilize Spacebring software services to operate the platform. Company name: Spacebring Sp. z o.o. Website: spacebring.com Purpose: Provision of shared space software services Privacy Policy: https://www.spacebring.com/privacy/ Spacebring processes personal data on our behalf. Data retention and deletion are governed in accordance with Spacebring’s privacy framework and applicable law. DATA SECURITY We implement reasonable administrative, technical, and organizational safeguards to protect personal data. However, no digital transmission or storage system is completely secure. Users acknowledge inherent risks when using online services. DATA RETENTION We retain personal data only as long as necessary for operational purposes, legal compliance, dispute resolution, and enforcement of agreements. Retention and deletion practices are aligned with Spacebring policies and applicable law. DISCOVERABILITY WITHIN THE APP Because the Service is a collaborative member platform, profile information entered may be visible to other authorized users. Members must only upload information they are legally permitted to share and must obtain consent before sharing another individual’s personal data. Hazel & Oak is not responsible for misuse of information shared by users. USER RIGHTS Depending on jurisdiction, users may request access to their data, correction of inaccurate data, deletion of data, restriction of processing, portability of data, or withdrawal of consent. Requests may be submitted through the Support section of the Service. Deleting required account data may limit Service functionality. ANALYTICS We may use analytics tools to improve Service performance. These providers may process anonymized usage data according to their own privacy policies. PAYMENTS Payments may be processed through third-party providers compliant with PCI-DSS standards. Hazel & Oak does not store full payment card details. CHILDREN’S PRIVACY The Service is not intended for users under the age of 13. We do not knowingly collect data from minors. CHANGES TO THIS POLICY We may update this Privacy Policy periodically. Continued use of the Service indicates acceptance of any changes. CONTACT Questions or requests related to this policy should be submitted through the Support section of the Service.