Privacy Policy

1. Who We Are

Join4Crew Ltd ("Join4Crew", "we", "us", "our") operates the website at https://join4crew.com/ and provides premium Django templates, software solutions, and related services.

For any privacy-related enquiries, contact us at [email protected].

2. Data We Collect

Information you provide directly

• Account data: first name, last name, email address, and password (hashed) when you register
• Purchase data: email address and transaction details when you buy a product (payment card details are handled exclusively by Stripe)
• Contact form data: name, email, company, subject, and message when you submit an enquiry
• Trial requests: email and any optional message you provide

Information collected automatically

• Log data: IP address, browser type, pages visited, time spent, referring URLs
• Session data: authentication tokens stored in secure, HTTP-only cookies
• Device data: operating system, screen resolution, and language preferences

Information from social login

If you choose to sign in with Google or GitHub, we receive your public profile information (name and email address) from that provider. We do not receive your password or payment details from social providers.

3. How We Use Your Data

We use your personal data to:

• Create and manage your account
• Process purchases and deliver digital products
• Respond to your contact form enquiries
• Send transactional emails (purchase confirmations, password resets)
• Provide and improve our services
• Detect and prevent fraud and abuse
• Comply with legal obligations

We do not sell your personal data to third parties, and we do not send marketing emails without your explicit consent.

4. Legal Basis for Processing

We process your data under the following legal bases:

• Contract performance: processing necessary to fulfil your purchase or provide account services
• Legitimate interests: security monitoring, fraud prevention, and improving our services
• Legal obligation: retaining transaction records as required by law
• Consent: for any optional marketing communications (which you can withdraw at any time)

5. Sharing Your Data

We share your data only where necessary with trusted service providers who process it on our behalf:

• Stripe — payment processing (PCI DSS compliant)
• Google / GitHub — OAuth social authentication (only if you choose to use social login)
• Email provider — transactional email delivery
• Hosting provider — server infrastructure

All third-party processors are bound by data processing agreements and are required to protect your data in line with applicable law. We do not share your data with advertisers or data brokers.

6. Cookies

We use the following cookies:

• Session cookie (sessionid): keeps you logged in. Expires when you close your browser or after 2 weeks if "keep me signed in" is selected. Essential — cannot be disabled.
• CSRF token (csrftoken): protects forms from cross-site request forgery. Essential — cannot be disabled.

We do not currently use advertising or analytics cookies. If this changes, we will update this policy and request your consent.

7. Data Retention

We retain your data for as long as your account is active or as needed to provide services. Specifically:

• Account data: retained until you request deletion
• Purchase records: retained for 7 years to comply with financial regulations
• Contact form submissions: retained for up to 2 years
• Password reset tokens: auto-expired after 24 hours and purged periodically
• Log data: retained for up to 90 days

8. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Access: request a copy of the data we hold about you
• Rectification: correct inaccurate or incomplete data
• Erasure: request deletion of your data ("right to be forgotten")
• Restriction: ask us to limit how we process your data
• Portability: receive your data in a structured, machine-readable format
• Object: object to processing based on legitimate interests
• Withdraw consent: for any processing based on your consent, at any time

To exercise any of these rights, email [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have handled your data unlawfully.

9. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately and we will delete it promptly.

10. International Data Transfers

Some of our service providers may process data outside the UK or European Economic Area. Where this occurs, we ensure adequate safeguards are in place — such as Standard Contractual Clauses or adequacy decisions — to protect your data in accordance with applicable law.

11. Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, alteration, disclosure, or destruction. These include HTTPS encryption, hashed password storage, HTTP-only session cookies, and regular security reviews.

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will update the "Last updated" date above and notify registered users by email where appropriate. We encourage you to review this page periodically.

13. Contact Us

For any privacy-related questions, requests, or complaints:

• Email: [email protected]
• Contact form: https://join4crew.com/contact/

We aim to respond to all privacy enquiries within 5 business days.