Privacy Policy

1. Who we are

This site is operated by Aaron Gomm, trading as HapiTech ("HapiTech", "we", "us"), a sole trader based in Oxford, UK.

Address: 2 Deer Walk, Oxford, OX4 7XX
Contact: aaron@hapitech.dev

We're the data controller for the personal data described below.

2. What data we collect

Contact form. When you use the "Get in Touch" form on this site, we collect the name, email address and message you provide. To help filter spam and respond appropriately, we also capture your IP address, browser user-agent, referring page and the time of submission. This is sent to us by email — it isn't stored in a database.

Client accounts. If you're a HapiTech client with portal access, we hold your name, email address and phone number so we can manage the relationship and give you access to your dashboard. Login is by username and password, stored as a salted hash — we never see or store your plain password.

Solar Journal accounts. Solar Journal (hapitech.dev/solar-system) is a separate, self-contained feature. To create an account you provide an email address and a display name. There's no password — logging in works by emailing you a one-time 6-digit code, valid for 10 minutes. We use your email only to send these codes and, if needed, essential messages about your account.

Solar Journal entries. If you post a journal entry, we store the text you write and, optionally, an image you upload (resized and re-encoded, max 15MB raw upload). Entries are private by default and are never shown to anyone else — including other Solar Journal users — unless you tick "share publicly" on that specific entry.

3. Why we process this data

• Contact form: legitimate interest — responding to enquiries you've sent us.
• Client accounts: contract / legitimate interest — providing the service you've engaged us for.
• Solar Journal accounts and entries: consent — you created the account and chose what to submit.

4. Where your data is stored

Everything above is stored on our own server, a VPS hosted with Namecheap, Inc. Outgoing email (contact form notifications, Solar Journal login codes) also goes through Namecheap's email service. We don't use any other third party for this — no analytics, no ad networks, no data brokers — and we don't sell or share your data with anyone else.

5. Cookies

We only use one cookie: a signed session cookie that keeps you logged in (client portal or Solar Journal). It's strictly necessary for the site to function and is deleted when you log out or it expires. We don't use analytics or tracking cookies, so there's no cookie consent banner.

6. How long we keep it

• Contact form submissions exist only as an email in our inbox, kept as long as any other business correspondence, then deleted at our discretion.
• Client account data is kept for the duration of the working relationship and a reasonable period afterward for accounting/legal purposes.
• Solar Journal accounts and entries are kept until you delete them or ask us to delete your account.

7. Your rights

Under UK GDPR you can ask us to:

• tell you what data we hold about you
• correct inaccurate data
• delete your data ("right to be forgotten")
• restrict or object to how we use it
• give you a copy of your data in a portable format

To do any of this, email aaron@hapitech.dev. We'll respond within one month. If you're not happy with how we've handled your data, you can complain to the UK Information Commissioner's Office at ico.org.uk.

8. Children

Solar Journal isn't specifically aimed at children. If you're under 13, please don't create an account without a parent or guardian's involvement. If you believe a child has created an account, get in touch and we'll remove it.

9. Changes to this policy

We'll update this page if what we collect or how we use it changes. Significant changes will be reflected in the date above.