Privacy policy — Honed Assets

1. Who we are

Honed Assets Ltd., registered in England and Wales (company no. 14893211), 12 Curtain Road, London EC2A 3NR, is the data controller for the personal data described here. Our data protection lead can be reached at privacy@honedassets.com.

2. What we collect

Account data: name, email, password hash, avatar, country and language.
Billing data: billing address, VAT number, the last four digits and expiry of your card. Full card numbers are handled by Stripe and never touch our servers.
Usage data: searches, downloads, collections, pages viewed and the device and browser you use.
Creator data: shop profile, product files, payout details (held by our payout partner), tax forms.
Support data: messages you send us and any files you attach.

3. Why we use it

To run the service (contract): creating your account, delivering downloads, processing payments and paying creators.

To improve the service (legitimate interest): understanding which searches fail, which assets get downloaded and where people get stuck. We analyse this in aggregate wherever possible.

To keep the marketplace safe (legitimate interest and legal obligation): detecting fraud, licence abuse and copyright infringement.

To send marketing (consent): the weekly newsletter and product announcements. Unsubscribe from any email in one click.

4. Who we share it with

Processors who act on our instructions: Stripe (payments), Wise (creator payouts), Postmark (email), Mux (media), Amplitude (product analytics), Cloudflare (hosting and security). Each is bound by a data processing agreement.

Creators see aggregate download counts and the country of buyers of their products. They never see your name or email unless you message them.

We disclose data to authorities only when legally required and, where the law allows, we tell you first.

5. How long we keep it

Account data: for as long as your account is open, then 30 days.
Billing records: 7 years, as tax law requires.
Usage logs: 13 months, then aggregated.
Support conversations: 2 years.

6. Your rights

You can access, correct, export or delete your data from account settings, or by emailing privacy@honedassets.com. You can object to processing based on legitimate interest and withdraw consent at any time. If you are unhappy with how we handle a request you can complain to the UK Information Commissioner's Office or your local supervisory authority.

7. International transfers

Data is stored in the EU (Frankfurt) with backups in London. Where a processor is outside the UK or EEA we rely on adequacy decisions or the UK and EU standard contractual clauses.

8. Children

Honed Assets is not aimed at children under 16 and we do not knowingly collect their data. If you believe a child has an account, tell us and we will remove it.