Privacy
Policy

This policy explains how Heem Team ("Heem Team", "we", "us") handles personal data in connection with this website, heem.team. It is written to be short on purpose.

01Each product has its own policy

Heem Team is a product forge. Each product we operate — Typesati, DSAR, Dendromeda, Qwerkus and any others — is governed by its own separate privacy policy, published on that product's own website. If you use one of our products, that product's policy tells you what data it collects, why, and how it is protected.

This policy covers only the Heem Team marketing website you are reading now. It does not replace or override any product-specific policy.

02What this website collects

This is a static informational website. We aim to collect as little as possible:

• Server logs. Our hosting provider may record standard technical information such as your IP address, browser type and the pages requested. This is used to keep the site secure and available.
• Enquiries. If you email us, we receive and keep your message and contact details so we can reply.

We do not sell your personal data, and we do not use it for advertising.

03Payments

Where you buy a subscription to one of our products, the billing relationship is with Heem Team (a trading name of jamiecurle ltd) and is governed by this policy — our products link here for how billing and personal data are handled.

Payments are processed for us by Stripe. You enter your card details directly with Stripe; we never see or store your full card number. We receive only limited billing information — such as your name, billing email, the last four digits of your card and whether a payment succeeded — so that we can manage your subscription, issue receipts and meet our tax and accounting obligations. Stripe processes payment data as described in the Stripe Privacy Policy.

04Who we share your data with

We do not sell your personal data. We share it only with the service providers that help us run Heem Team and our products, and only to the extent each needs to do its job, under a contract that requires them to keep it secure and use it only on our instructions:

• Hosting & infrastructure — Cloudflare, which serves this website and records the technical logs described above.
• Email — Google (Google Workspace), which delivers and stores email you send to us.
• Payments — Stripe, which processes subscription payments (see above).

We may also disclose personal data where we are required to do so by law, or where it is necessary to establish, exercise or defend legal claims. Some of these providers operate outside the UK; where personal data is transferred internationally, it is protected by appropriate safeguards such as the UK International Data Transfer Agreement or equivalent measures.

05How we protect your information

We maintain appropriate technical and organisational measures to safeguard the personal data we hold, including:

• Encryption in transit — the entire site is served over HTTPS/TLS.
• Access controls — access to personal data is limited to those who need it to do their work.
• Vetted providers — we rely on established, security-assessed processors (Cloudflare, Google, Stripe) for hosting, email and payments rather than handling sensitive data such as card numbers ourselves.
• Data minimisation — we collect and retain as little personal data as possible.

Our security practices are managed through an information security management system aligned with (but not certified compliant to) ISO/IEC 27001.

No method of transmission or storage is ever completely secure, but we work to protect your data and, where the law requires it, will notify you and the ICO of any breach that affects your rights.

06Cookies

This website does not set advertising or tracking cookies. If we add any strictly necessary or analytics cookies in future, we will update this policy and, where required, ask for your consent.

07Legal basis

Where UK data protection law applies, we rely on the performance of a contract when you buy a subscription from us, our legitimate interests to run and secure this website and to respond to enquiries, our need to comply with legal obligations (such as tax and accounting), and on your consent where we ask for it.

08How long we keep it

We keep enquiry correspondence only for as long as needed to deal with your request and for a reasonable period afterwards. Billing records are kept for as long as required by tax and accounting law. Server logs are retained on a short, rolling basis.

09Your rights

Subject to UK GDPR, you may have the right to access, correct or delete your personal data, to object to or restrict its processing, and to data portability. To exercise any of these rights for data held by this website, contact us using the details below.

You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

We are registered with the Information Commissioner's Office with registration reference ZB503528.

10Contact

Questions about this policy can be sent to info@heem.team.