Privacy Policy

Last Updated: June 5, 2026 | Version: 1.0

1. Introduction

Welcome to MebHevy. This Privacy Policy explains how we collect, use, store, protect, and disclose your personal information when you access or use our website, mebhevy.com.

We are committed to protecting your privacy and processing your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using our website and services, you acknowledge that you have read and understood this Privacy Policy.

2. Information We Collect

We only collect personal information that is necessary for the operation of our services.

When you create an account, we collect:

  • Username
  • First Name
  • Last Name
  • Email Address
  • Password

We may also collect information related to purchases and orders placed through the platform.

3. Payment Processing

Payments made through our website are securely processed by Stripe.

We do not store, process, or have access to your complete payment card details. Payment information is collected and processed directly by Stripe in accordance with their own privacy and security practices.

4. How We Use Your Information

We use your personal information to:

  • Create and manage user accounts
  • Authenticate users and maintain account security
  • Process orders and payments
  • Provide access to our services
  • Respond to support requests and inquiries
  • Prevent fraud, abuse, and unauthorized access
  • Comply with legal and regulatory obligations
  • Improve the functionality and security of our platform

We do not sell, rent, or trade personal information to third parties.

5. Legal Basis for Processing

Under the UK GDPR, we process personal data on one or more of the following legal bases:

  • Performance of a contract
  • Legitimate interests
  • Compliance with legal obligations
  • Consent, where required by law

6. Data Storage and Security

We take the protection of personal data seriously and implement appropriate technical and organizational security measures to protect information against unauthorized access, disclosure, alteration, or destruction.

Personal data stored within our database, including account information and order-related information, is protected using industry-standard encryption measures. Sensitive personal data is encrypted at rest to help prevent unauthorized access, disclosure, or misuse.

Passwords are never stored in plain text and are protected using industry-standard one-way hashing algorithms.

The username is the only account-related information that is not encrypted at rest, as it serves as a unique identifier required for user authentication and account management.

7. Data Sharing

We only share personal information when necessary to provide our services or comply with legal obligations.

  • Stripe, for payment processing
  • Hosting and infrastructure providers
  • Legal or regulatory authorities where required by law

8. Data Retention

We retain personal information only for as long as necessary to maintain user accounts, provide our services, fulfill contractual obligations, comply with legal requirements, and resolve disputes.

9. Your Rights

Under the UK GDPR, you may have the right to:

  • Access your personal data
  • Correct inaccurate or incomplete personal data
  • Request deletion of your personal data
  • Request restriction of processing
  • Object to the processing of your personal data
  • Request transfer of your personal data
  • Withdraw consent where applicable

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

10. Social Media Links

Our website may contain links to our official social media profiles, including Facebook, Instagram, LinkedIn, and GitHub.

These websites operate independently from us and have their own privacy policies.

11. Children's Privacy

Our services are not intended for individuals under the age of 13, and we do not knowingly collect personal information from children.

12. International Data Transfers

Some of our service providers may process information outside the United Kingdom. Where this occurs, we implement appropriate safeguards in accordance with applicable data protection laws.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last Updated" date.

14. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us at: