Inbibo Privacy Policy
Last updated: 26 February 2026
1. Introduction
Inbibo (“we”, “us” or “our”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use our website and services, in accordance with the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018.
Please read this policy carefully. If you have any questions, please contact us using the details in section 14 below.
2. Who We Are (Data Controller)
Inbibo is the data controller responsible for your personal data. This means we decide why and how your personal data is processed.
For the purposes of UK data protection law, our contact details are provided in section 14 of this policy.
3. Personal Data We Collect
3.1 Data you provide directly
When you register on our site, contact us, or purchase a licence to our products, we may collect:
Your name
Your email address
Billing and payment information (where applicable)
Any information you provide when contacting us via our contact forms
3.2 Data collected automatically
When you visit our website, we may automatically collect:
Technical data, including your IP address, browser type, operating system and referring URLs
Usage data, including information about how you use our website and services
Cookie data (see section 10 below)
4. Lawful Basis for Processing
Under the UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following bases:
Contract: to perform our contract with you, including processing payments and delivering services you have purchased.
Legitimate interests: to improve our website and services, prevent fraud, and communicate with you about matters relating to your account, where our interests are not overridden by your rights.
Legal obligation: where processing is necessary to comply with a legal obligation to which we are subject.
Consent: where you have given us clear and specific consent to process your data for a particular purpose, such as receiving marketing emails. You may withdraw consent at any time.
5. Purposes of Processing
We use your personal data for the following purposes:
To create and manage your user account
To process and fulfil licence purchases
To verify your email address
To respond to your enquiries and provide customer support
To send you service-related communications (e.g. account notifications)
To send you marketing communications, where you have opted in
To improve our website and services based on your feedback and usage patterns
To detect and prevent fraud or other prohibited activities
To comply with our legal and regulatory obligations
6. Who We Share Your Data With
We do not sell, rent or trade your personal data to third parties for their own marketing purposes. We may share your personal data in the following circumstances:
Service providers: We use trusted third-party service providers who process personal data on our behalf (as data processors), such as payment processors, email delivery services, and website analytics providers. These parties are bound by data processing agreements and may only use your data as directed by us.
Legal requirements: We may disclose your personal data where required by law, court order, or regulatory authority, or where we believe disclosure is necessary to protect our rights, your safety or the safety of others.
Business transfers: In the event of a merger, acquisition or sale of all or part of our business, your personal data may be transferred to the relevant third party, subject to the same protections described in this policy.
Any non-personally identifiable aggregated information may be shared with third parties for analytics, advertising, or other purposes.
7. Third-Party Links
Our website may contain links to third-party websites. We have no control over and are not responsible for the privacy practices or content of those websites. We encourage you to review the privacy policy of any website you visit.
8. International Data Transfers
Where we transfer personal data outside the United Kingdom, we ensure that appropriate safeguards are in place in accordance with the UK GDPR, such as the UK’s International Data Transfer Agreement (IDTA) or adequacy decisions made by the UK Government.
9. Data Retention
We retain your personal data only for as long as is necessary for the purposes described in this policy, or as required by law. Specifically:
Account data is retained for as long as your account remains active.
We may retain certain data after account deactivation to comply with legal obligations, resolve disputes, prevent fraud, and enforce our agreements.
Transaction records are retained for a minimum of six years in accordance with our legal and tax obligations.
We apply a documented data retention policy to all personal data in our care, and securely delete or anonymise data when it is no longer needed.
10. Cookies
We use cookies and similar tracking technologies on our website. Cookies are small text files placed on your device by your web browser when you visit our site.
Essential cookies are necessary for the operation of our website. They include session cookies that keep you logged in while you browse and remember your preferences. These cookies do not collect personal data that could be used for marketing.
Analytics cookies allow us to understand how visitors interact with our website. We use Google Analytics, a service provided by Google LLC, which uses cookies to collect information such as how often users visit the site, which pages they visit, and what other sites they visited before coming to our site. Google Analytics collects only the IP address assigned to you on the date you visit our site, not your name or other personally identifying information. We do not combine the information collected by Google Analytics with personally identifiable data. Google’s ability to use and share information collected by Google Analytics is restricted by the Google Analytics Terms of Service and the Google Privacy Policy, available at www.google.com/policies/privacy.
You can control and manage cookies in several ways. Most web browsers allow you to refuse or delete cookies through their settings. Please note that if you choose to block essential cookies, parts of our website may not function correctly. You can also opt out of Google Analytics tracking at any time by installing the Google Analytics opt-out browser add-on, available at tools.google.com/dlpage/gaoptout.
11. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. However, no transmission of data over the internet is completely secure, and we cannot guarantee the absolute security of data you transmit to us.
12. Children
Our website, products and services are directed to individuals aged 13 and over. We do not knowingly collect personal data from children under the age of 13. If you believe we have inadvertently collected such data, please contact us immediately so we can delete it.
13. Your Rights
Under UK data protection law, you have the following rights in relation to your personal data:
Right of access: to request a copy of the personal data we hold about you.
Right to rectification: to ask us to correct inaccurate or incomplete data.
Right to erasure: to ask us to delete your personal data in certain circumstances.
Right to restriction: to ask us to restrict the processing of your data in certain circumstances.
Right to data portability: to receive your personal data in a structured, machine-readable format.
Right to object: to object to processing based on legitimate interests or for direct marketing purposes.
Rights related to automated decision-making: not to be subject to solely automated decisions that produce legal or similarly significant effects.
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.
To exercise any of these rights, please contact us using the details in section 14. We will respond within one month. You will not normally be required to pay a fee, although we may charge a reasonable fee or decline to respond in the case of manifestly unfounded or excessive requests.
If you are not satisfied with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk or by calling 0303 123 1113.
14. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at:
Inbibo Ltd
Email: [email protected]
Address: 82 St John Street, London, United Kingdom, EC1M 4JN
15. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on this page with a revised date. We encourage you to review this policy periodically.
This policy is governed by and should be read in accordance with the UK General Data Protection Regulation and the Data Protection Act 2018.
