Privacy Policy

HEYDAY JOURNAL
PRIVACY POLICY
Effective Date: January 2026
Company Name: Heyday Journal Limited
Registered Office: New Zealand

Heyday was created to preserve memories with care. We are not a social media platform. We are not a data marketplace. We are a memory archive. Your stories stay yours.

You Own Your Content
The photos, videos, audio, and words you upload are yours. We do not claim ownership. We do not sell them. We do not use them in marketing without your permission. We store them only so your journal and QR codes work properly. Your Digital Memories Are Private QR-linked content:
- Is not publicly searchable
- Is not indexed by Google
- Is only viewable by someone who has access to your physical journal

We do not browse your memories. We would only access content if:
- You ask us for technical help
- There’s a security issue
- We are legally required to

HEYDAY JOURNAL PRIVACY POLICY
Effective Date: January 2026
Company: Heyday Journal Limited
Registered Office: New Zealand
Contact Email: hey@heyday-journal.com

Heyday Journal Limited (“Heyday”, “we”, “us”, “our”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, disclose, and safeguard personal information when you:
- Visit our website
- Create an account
- Purchase a product
- Subscribe to digital hosting services
- Upload content
- Interact with our marketing

We operate from New Zealand and sell globally, including to customers in the United States. By using our Services, you acknowledge and agree to this Privacy Policy.

We collect the following categories of personal information:

A. Account & Contact Information
- Full name
- Email address
- Billing address
- Shipping address
- Phone number (if provided)

B. Payment Information

Payments are processed securely through third-party providers (such as Stripe, Shopify Payments or equivalent providers). We do not store full credit card numbers on our servers.

C. User-Generated Content
When you create a Heyday Journal, you may upload:
- Photos
- Videos
- Audio files
- Written stories
- QR-linked digital media
This content is privately hosted and is not publicly searchable.

D. Subscription & Hosting Data
- Storage allocation
- Renewal dates
- Subscription activity
- Payment status

E. Technical & Usage Data
- IP address
- Device type
- Browser type
- Pages visited
- Time spent on site
- Referring URLs
- Cookies and similar tracking technologies

We use personal information to:
- Process and fulfil orders
- Print and deliver journals

- Host QR-linked digital media
- Manage subscriptions
- Provide customer support
- Send renewal notices
- Improve platform functionality
- Detect fraud or misuse
- Comply with legal obligations
- Send marketing communications (if you opt in)
We do not sell personal information. We do not use uploaded media for advertising or marketing without your express consent.

Depending on your location, we process personal information based on:
- Performance of a contract (e.g., fulfilling your order)
- Your consent (e.g., marketing communications)
- Our legitimate business interests (e.g., platform improvement and fraud prevention)
- Compliance with legal obligations

QR-linked content:
- Is not indexed by search engines
- Is not publicly searchable
- Is accessible only via the QR code

We do not review or monitor your content. We may access user content only where:
- You request technical support
- A security issue arises
- We are required to comply with law

You are responsible for deciding who receives your physical journal and therefore who may access the QR-linked content.

Digital content and account data are hosted using reputable third-party cloud infrastructure. We implement commercially reasonable security safeguards, including:
- Encrypted transmission (HTTPS)
- Access controls
- Authentication measures
- System monitoring

However, no internet-based system is completely secure. You acknowledge the inherent risks of transmitting information online. Customers are responsible for maintaining backup copies of original media.

As a global business, personal information may be processed or stored in:
- New Zealand
- United States
- Other jurisdictions where our service providers operate By using our Services, you acknowledge that your information may be transferred internationally. Where required, we take reasonable steps to ensure data is protected in accordance with applicable privacy laws.

We retain personal information only as long as reasonably necessary to:
- Provide Services
- Maintain subscriptions
- Comply with legal obligations

Resolve disputes
Specifically:
- Account information is retained while your account remains active
- Subscription data is retained while active
- Unpurchased projects may be deleted after 90 days
- Hosted digital media is retained while your subscription remains active

If a subscription lapses:
- QR-linked content may become inactive
- Media may be permanently deleted after reasonable notice. We may retain limited information for compliance or legal defence purposes.

Depending on your location, you may have the right to:
- Request access to personal information
- Request correction of inaccurate information
- Request deletion of personal information
- Withdraw consent to marketing
- Object to certain processing activities
To make a request, contact: hey@heyday-journal.com
We may take reasonable steps to verify your identity before processing a request. We may decline or limit requests where permitted by applicable law, including where requests are manifestly unfounded, excessive, or where we are legally required to retain certain information.

If you are a California resident, you may have rights under the California Consumer Privacy Act (CCPA), as amended by the CPRA, including:
- Right to know what personal information we collect
- Right to request deletion
- Right to correct inaccurate information
- Right to opt out of sale or sharing

Heyday does not sell personal information. We do not knowingly share personal information for cross-context behavioural advertising. To submit a California privacy request, email:
hey@heyday-journal.com

We will verify your identity before processing requests.

We use cookies and similar technologies to:
- Enable secure login
- Process transactions
- Maintain subscriptions
- Analyse traffic
- Improve user experience
You can control cookies through your browser settings. Disabling cookies may affect website functionality.

If you opt in, we may send:
- Product updates
- Launch announcements
- Promotional offers
- Subscription reminders
You may unsubscribe at any time using the link provided in emails.

Heyday is intended for individuals aged 18 and over.

Individuals aged 13–17 may use the platform only with parental or guardian involvement. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, contact us and we will take reasonable steps to remove it.

Our website may contain links to third-party services. We are not responsible for the privacy practices of third parties. Payment processing and cloud hosting are provided by independent providers subject to their own privacy policies.

This Privacy Policy is governed by the laws of New Zealand. To the maximum extent permitted by law, any dispute relating to privacy or data protection arising from your use of the Services shall be subject to the jurisdiction of the courts of New Zealand. Nothing in this clause limits any non-waivable privacy rights you may have under applicable mandatory laws in your country of residence.

We may update this Privacy Policy from time to time. The updated version will be published on our website with a revised effective date. Continued use of our Services after changes are posted constitutes acceptance of the updated policy.

Heyday Journal Limited
New Zealand
Email: hey@heyday-journal.com