1. Introduction
RelaXstart ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
2. Information We Collect
2.1 Information You Provide
- Account Information: Name, email address, profile picture (via Google OAuth)
- Startup Information: Company name, description, industry, funding details
- Payment Information: Processed securely by Stripe; we do not store card details
- Communications: Messages, feedback, and support requests
2.2 Information Collected Automatically
- Device Information: IP address, browser type, operating system
- Usage Data: Pages visited, time spent, features used
- Cookies: Session and preference cookies (see Cookie Policy)
3. How We Use Your Information
We use collected information to:
- Provide, maintain, and improve our Service
- Process transactions and send related information
- Send promotional communications (with your consent)
- Respond to your comments and questions
- Monitor and analyze usage patterns
- Detect, prevent, and address technical issues
- Comply with legal obligations
4. Legal Basis for Processing (GDPR)
We process your personal data based on:
- Contract: To fulfill our contractual obligations to you
- Consent: Where you have given explicit consent
- Legitimate Interests: For our business operations and improvements
- Legal Obligation: To comply with applicable laws
5. Information Sharing
We may share your information with:
- Service Providers: Third parties that help us operate (Stripe, Google, hosting providers)
- Business Partners: Mentors, investors, or partners you choose to connect with
- Legal Requirements: When required by law or to protect our rights
- Business Transfers: In connection with mergers or acquisitions
We do not sell your personal information to third parties.
6. Data Security
We implement appropriate security measures including:
- SSL/TLS encryption for data in transit
- Secure password hashing
- Regular security assessments
- Access controls and authentication
- PCI-DSS compliant payment processing via Stripe
7. Data Retention
We retain your personal data for as long as necessary to provide our services and fulfill the purposes described in this policy. When you delete your account, we will delete or anonymize your data within 30 days, unless retention is required by law.
8. Your Rights (GDPR)
Under GDPR, you have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate data
- Erasure: Request deletion of your data
- Portability: Receive your data in a portable format
- Restriction: Limit processing of your data
- Object: Object to certain processing activities
- Withdraw Consent: Withdraw previously given consent
To exercise these rights, contact us at privacy@relaxstart.com
9. International Data Transfers
Your data may be transferred to and processed in countries outside the European Economic Area. We ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.
10. Children's Privacy
Our Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.
11. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of significant changes via email or through the Service. Continued use after changes constitutes acceptance.
12. Contact Us
For privacy-related inquiries:
Data Protection Officer: privacy@relaxstart.com
Address: Oxford (UK)
Data Controller: Cosmic Ventures Group Ltd
Company Number: 17029943
13. Supervisory Authority
If you are in the EU and believe we have not addressed your concerns, you have the right to lodge a complaint with your local data protection authority.