Privacy Policy

1. Hybrid and Our Commitment to Privacy

Who Is Hybrid? Hybrid News Ltd, doing business as Hybrid (“us,” “we,” and “our”), is the organization responsible for the processing activities described in this Privacy Notice. Hybrid is deeply committed to maintaining the privacy and security of the personal information it accesses, collects, stores, uses, and shares in connection with its services.

Scope of This Privacy Notice

This Privacy Notice describes how and why Hybrid may access, collect, store, use, and share personal information when individuals use Hybrid’s services, including by visiting https://hybrid.co or any Hybrid website that links to this Privacy Notice, or by engaging with Hybrid in related sales, marketing, or event contexts.

Data Controller

Where applicable, Hybrid acts as the data controller for the personal information described in this Privacy Notice because it determines the means and purposes of the processing described here. In some cases, however, Hybrid may process personal information on behalf of customers acting as the data processor, in which case the relevant customer is the data controller responsible for that processing.

Updates to This Privacy Notice

From time to time, this Privacy Notice may be updated to reflect changes to our products and services, the way we operate, or to meet new legal and regulatory requirements. You will find the latest version of this Privacy Notice here.

2. Personal Information That We Collect

The type of personal information we collect about you depends on how you interact with our services. We collect personal information directly from individuals when you visit, use or navigate our services.

Information You Provide Directly

We collect personal information that you voluntarily provide when you express an interest in obtaining information about our services, participate in activities on the services, or otherwise contact us.

Depending on the context, this may include names, personal and/or business phone numbers, personal and/or business email addresses, mailing addresses, home country or other geographic data, postcode, job titles, university programme and courses of interest, usernames, passwords, contact preferences, event attendance, authentication data, debit or credit card numbers, and billing addresses.

Where you participate in a focus group or survey, in addition to the above information, we may also collect any information contained in your responses, including your opinion, and demographic or attitudinal information.

Sensitive Personal Information

Where necessary and as permitted by applicable law, we may process sensitive personal information with consent or as otherwise legally permitted.

We may collect information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, credit worthiness data, student data, and social security numbers or other government identifiers.

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

If you are located in the U.S, we may collect categories of sensitive personal information such as account login information, biometric data, citizenship or immigration status, message contents, driver’s license or state ID information, certain financial account details, passport numbers, child data, precise geolocation, racial or ethnic origin, religious or philosophical beliefs, sex life or sexual orientation, social security numbers, transgender or nonbinary status, and union membership, where allowed by law or with consent.

Information Collected Automatically

When you visit, use, or navigate our services, we automatically collect certain information that does not directly reveal a specific identity but may include device and usage information.

Log and Usage Data

Log and usage data is service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our services and which we record in log files. Depending on how you interact with us, this log data may include your IP address, device information, browser type, and settings and information about your activity in the services (such as the date/time stamps associated with your usage, pages and files viewed, searches, and other actions you take such as which features you use), device event information (such as system activity, error reports (sometimes called 'crash dumps'), and hardware settings).

Device Data

We collect device data such as information about your computer, phone, tablet, or other device you use to access our services. Depending on the device used, this device data may include information such as your IP address (or proxy server), device and application identification numbers, location, browser type, hardware model, Internet service provider and/or mobile carrier, operating system, and system configuration information.

Location Data

We collect location data such as information about your device's location, which can be either precise or imprecise. How much information we collect depends on the type and settings of the device you use to access our services. For example, we may use GPS and other technologies to collect geolocation data that tells us your current location (based on your IP address). You can opt out of allowing us to collect this information either by refusing access to the information or by disabling your location setting on your device. However, if you choose to opt out, you may not be able to use certain aspects of our services.

Google API Information

Our use of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

Cookies and Similar Technologies

We use cookies and similar tracking technologies, including web beacons and pixels, to collect and store information when you interact with our services. These technologies help us maintain the security of our services, prevent crashes, fix bugs, save your preferences, support basic site functions, and assist with analytics and advertising-related activities.

We also permit third parties and service providers to use tracking technologies on our Services for analytics and advertising, including to help manage and display advertisements, tailor advertisements to your interests, and display advertising on our Services or other websites.

To the extent these activities are considered a “sale” or “sharing” under applicable U.S. state privacy laws, you may opt out as described in the U.S. State Privacy Rights section below.

We may also use Google Analytics, including Google Display Network Impressions Reporting, and we provide opt-out mechanisms for Google Analytics tracking and advertising features.

3. How We Use Personal Information

We process your personal information to provide, improve, and administer our services, communicate with you, support security and fraud prevention efforts, comply with legal obligations, and, where appropriate, process your information for other purposes with your prior explicit consent.

More specifically, we use personal information to deliver requested services, respond to inquiries, provide support, send administrative information about our products, services, terms, and policies, fulfil and manage orders, payments, returns, and exchanges, and protect an individual’s vital interests where necessary to prevent harm.

4. Legal Bases for Processing

Where required by applicable law, we process personal information only where we have a valid legal basis to do so. If you are located in the EU or UK, our legal bases for processing your personal information may include:

• Consent. We may process your information if you have given us permission (i.e., consent) to use your personal information for a specific purpose. You can withdraw your consent at any time by contacting us as detailed in the ‘Contact Us’ section below.

• Performance of a Contract. We may process your personal information when we believe it is necessary to fulfil our contractual obligations to you, including providing our Services or at your request prior to entering into a contract with you.

• Legal Obligations. We may process your information where we believe it is necessary for compliance with our legal obligations, such as to cooperate with a law enforcement body or regulatory agency, exercise or defend our legal rights, or disclose your information as evidence in litigation in which we are involved.

• Vital Interests. We may process your information where we believe it is necessary to protect your vital interests or the vital interests of a third party, such as situations involving potential threats to the safety of any person.

In legal terms, we are generally the 'data controller' under European data protection laws of the personal information described in this Privacy Notice, since we determine the means and/or purposes of the data processing we perform. This Privacy Notice does not apply to the personal information we process as a 'data processor' on behalf of our customers. In those situations, the customer that we provide services to and with whom we have entered into a data processing agreement is the 'data controller' responsible for your personal information, and we merely process your information on their behalf in accordance with their instructions. If you want to know more about our customers' privacy practices, you should read their privacy policies and direct any questions you have to them.

If you are located in Canada

If you are located in Canada, we may process your information if you have given us specific permission (i.e., express consent) to use your personal information for a specific purpose, or in situations where your permission can be inferred (i.e., implied consent). You can withdraw your consent at any time by contacting us as detailed in the ‘Contact Us’ section below.

In some cases, we may be legally permitted under applicable law to process your information without your consent, including, for example:

• If collection is clearly in the interests of an individual and consent cannot be obtained in a timely way

• For investigations and fraud detection and prevention

• For business transactions provided certain conditions are met

• If it is contained in a witness statement and the collection is necessary to assess, process, or settle an insurance claim

• For identifying injured, ill, or deceased persons and communicating with next of kin

• If we have reasonable grounds to believe an individual has been, is, or may be victim of financial abuse

• If it is reasonable to expect collection and use with consent would compromise the availability or the accuracy of the information and the collection is reasonable for purposes related to investigating a breach of an agreement or a contravention of the laws of Canada or a province

• If disclosure is required to comply with a subpoena, warrant, court order, or rules of the court relating to the production of records

• If it was produced by an individual in the course of their employment, business, or profession and the collection is consistent with the purposes for which the information was produced

• If the collection is solely for journalistic, artistic, or literary purposes

• If the information is publicly available and is specified by the regulations; and

• We may disclose de-identified information for approved research or statistics projects, subject to ethics oversight and confidentiality commitments.

5. How We Share Personal Information

We may share your personal information with:

• Our parent company, EAB, and EAB affiliates; and

• Service providers that perform services on our behalf.

We may share personal information with service providers that perform services on our behalf such as hosting providers and our help support provider. In accordance with applicable law, we have entered into legally binding agreements requiring them to use or disclose personal information only as necessary to perform services on our behalf or comply with applicable legal requirements.

In addition, we may disclose personal information about you (a) if we are required or permitted to do so by law or legal process, for example due to a court order or a request from a law enforcement agency, (b) when we believe disclosure is necessary or appropriate to prevent physical harm or financial loss, (c) in connection with an investigation of suspected or actual fraudulent or other illegal activity, and (d) in the event we sell or transfer all or a portion of our business or assets (including in the event of a reorganization, dissolution, or liquidation).

6. How We Transfer the Personal Information That We Collect

We may transfer the personal information that we collect about you to recipients in countries other than the country in which the personal information originally was collected, as described in section 4 above. Those countries may not have the same data protection laws as the country in which you initially provided the personal information. When we transfer your personal information to recipients in other countries (such as the U.S.), we will protect that personal information as described in this Notice.

If you are located in the European Economic Area (“EEA”) or the United Kingdom (“UK”), we will comply with applicable legal requirements providing adequate protection for the transfer of personal information to recipients in countries outside of the EEA and the UK. In all such cases, we will only transfer your personal information if:

• The country to which the personal information will be transferred has been granted a European Commission adequacy decision or has been recognized as adequate under UK law

• We have put in place appropriate safeguards in respect of the transfer, for example the EU or UK Standard Contractual Clauses; or

• In certain limited circumstances, one or more of the derogations for data transfers provided by applicable law applies.

You may request a copy of the safeguards that we have put in place in respect of transfers of personal information by contacting us as described in the ‘Contact Us’ section below

7. Data Retention

Your personal information is retained for the duration of your relationship with Hybrid, plus a reasonable period thereafter as necessary to fulfil the purposes described above. Retention periods may be extended if we are required to preserve your personal information in connection with litigation, investigations and proceedings, or if a longer retention period is required or permitted by applicable law.

8. Your Rights and Choices

Subject to applicable law, you may have the right to request:

• confirmation of whether we process personal information relating to you and, if so, to request a copy of that personal information

• that we rectify or update your personal information that is inaccurate, incomplete or outdated

• that we stop processing your personal information in certain circumstances, such as where you object to our processing of your personal information on grounds relating to your particular circumstances

• that we erase your personal information in certain circumstances, including where we collected personal information based on your consent and you withdraw that consent, subject to applicable legal obligations

• that we restrict the use of your personal information in certain circumstances, such as while we consider another request that you have submitted, for example a request that we update your personal information

• withdrawal of your consent where you have given us consent to process your personal information; and

• that we provide a copy of your personal information to you in a structured, commonly used and machine readable format in certain circumstances.

You also have the right not to be subject to automated decision-making. If a decision that produces legal or similarly significant effects is made solely by automated means, we will inform you, explain the main factors, and offer a simple way to request human review.

You may submit a privacy rights request using any of the following methods:

• Online (preferred): Submit via Hybrid’s Privacy Rights Request Form here.

• Email: privacy@eab.com (subject line: “Privacy Rights Request”)

• Phone: (877) 613-6393

• Mail: EAB Global, Inc., Attn: Chief Privacy Officer, 2445 M Street NW, Washington, DC 20037

• Opt Out of Sale / Targeted Advertising: Use the Hybrid privacy rights request form here, or submit a request using one of the methods above.

• Authorized Agent: To submit a request on behalf of another individual, click here. The individual must provide written authorization. We may require the individual to verify their identity directly with Appily.

If you are located in the EEA or the UK and believe we are unlawfully processing your personal information, you may lodge a complaint with the relevant supervisory authority, and if you are located in Switzerland, you may contact the Swiss Federal Data Protection and Information Commissioner. If you are located in the UK and have any concerns about how we handle your personal information, including concerns about compliance with applicable data protection law, you can contact us as detailed in the ‘Contact Us’ section below. We will review and respond to your concerns in accordance with applicable law.

9. Security

We employ a variety of physical, administrative, and technological safeguards designed to protect personal information against loss, misuse, and unauthorized access or disclosure.

10. Contact Us

If you have questions or concerns about our Privacy Notice or data privacy practices, contact us by email at dpo@hybrid.co or write to us at the following address.

Hybrid News Ltd
46-48 Queen Charlotte St
Bristol BS1 4HX
England