Privacy Policy

Privacy Policy

Input Hub · Privacy Policy · v1.0 · Effective 20 October 2026

Who this policy applies to: customers, Account holders, site visitors and people contacting Input Hub.

1 Introduction & scope

1.1 This Privacy Policy explains how WILDMINT WORKS LTD, trading as Input Hub, collects, uses, shares, protects and retains personal data when you browse input-hub.com, register, place a one-time order for a downloadable AI Prompt, receive customer support or subscribe to marketing communications. It applies to customers, prospective customers and ordinary website visitors.

1.2 Our lawful handling of personal data is governed principally by the UK General Data Protection Regulation, the Data Protection Act 2018 and applicable provisions of the Privacy and Electronic Communications Regulations. Other mandatory rules may apply where we actively serve individuals in another country. Privacy rights are not replaced by the Terms & Conditions.

1.3 We sell our own digital products; Input Hub is not a vendor marketplace, payment account operator or subscription service. We process order and download-entitlement information rather than physical-shipping records. When a separate AI-model provider receives text from you, that provider's own privacy terms govern its processing.

2 Data controller & contact

2.1 WILDMINT WORKS LTD, Company No. 17012774, is the controller responsible for the data described here. Its registered office is Dept 7136, 43 Owston Road, Carcroft, Doncaster, United Kingdom, DN6 8DA. You may contact our privacy team at info@input-hub.com, with "Privacy Request" in the subject line.

2.2 The same address accepts written privacy correspondence. We will route the request internally to the person responsible for privacy compliance. A dedicated statutory Data Protection Officer is appointed only where the legal criteria apply; using a privacy contact does not imply that a separate DPO role is required for every online retailer.

2.3 If processing is undertaken jointly with an identified third-party controller, the relevant terms or a specific notice will explain the allocation of responsibilities. Payment processors, providers of external AI tools and social networks may be independent controllers for portions of their services.

3 Age position

3.1 The website is intended for customers aged 18 or older. We do not deliberately solicit data from children for direct purchases. A person placing an Order must have legal capacity and authority to use the payment method, as explained in the Terms & Conditions.

3.2 If a parent or guardian believes that a minor has registered or sent personal data without appropriate authority, they should email info@input-hub.com with enough detail for us to locate the relevant record. We will assess the request, secure the account and delete information where no lawful basis justifies retaining it.

3.3 We avoid knowingly using children's information for behavioural advertising or marketing. If our service changes so that it is likely to be accessed by children, we will reassess age-appropriate transparency, consent, default settings and risk controls before implementing the change.

4 Categories of personal data

4.1 Account records may include name, email address, encrypted password credentials, username, account identifier, preferred currency and registration timestamps. When a business customer provides contact details, we also process ordinary business identity information. We do not need to collect a delivery street address to dispatch a digital file.

4.2 Order records can include item names, order references, purchase date, currency, final amount, tax calculation, billing country, masked card metadata, payment status, processor transaction reference and download-entitlement logs. Full card numbers and security codes are captured by the external card payment process rather than retained in our own customer database.

4.3 Technical and interaction records can include IP address, browser, device type, session identifiers, download attempts, error logs, fraud indicators, cookie preferences and product browsing events. Communications records include support requests, attachments, responses, review submissions and newsletter preferences. The following data-categories table provides more detail.

Processing reference table

5 Sources of personal data

5.1 Most account, contact, billing and support information is obtained directly from you. We also receive technical information automatically from the device connecting to the website and transactional status information from a payment gateway after a charge is authorised, declined, refunded or disputed.

5.2 When appropriate, we may receive fraud alerts, network indicators and dispute documentation from the payment provider, card scheme or acquiring bank. We use these records to investigate duplicate or unauthorised charges and to preserve an accurate record of the transaction, not to sell financial profiles.

6 How we use personal data

6.1 We use data to create and secure Accounts, fulfil one-time purchases, provide downloads, send receipts and operational communications, answer queries, manage returns, prevent fraud and satisfy accounting or legal duties. Product-performance data may be analysed in aggregated form to maintain the functionality and commercial relevance of the catalogue.

6.2 Service messages about a purchase, security alert or complaint are distinct from optional advertising. We do not require marketing consent to supply an Order. If you choose to receive the newsletter, you can unsubscribe using the message link or by contacting support without losing access to past purchases.

7 Lawful bases for processing

7.1 Contract is the normal basis for registration, checkout, entitlement delivery, account support and communicating about an Order. A legal obligation supports processing necessary for tax, corporate recordkeeping, lawful requests and compliance with applicable consumer or accounting law.

7.2 Legitimate interests may support proportionate anti-fraud controls, website security, prevention of repeated technical errors, establishment or defence of legal claims and routine service improvement, balanced against your rights. We document the purpose, necessity and impact when relying on this basis.

7.3 Consent is used for optional marketing and non-essential storage or access technologies where consent is required. You can withdraw consent prospectively without affecting earlier lawful activity. Cookie consent is managed independently of acceptance of purchase terms and can be changed through the Cookie Policy controls.

Processing reference table

8 Payments & checkout (PSP handling of card data)

8.1 Card-payment details are entered using the technical checkout and processing facilities supplied by an independent payment service provider. We ordinarily receive a token or transaction reference, masked payment details and payment status, rather than the complete payment-card number or card security code.

8.2 The processor may conduct payment authentication, fraud screening, financial-risk controls and card-scheme dispute administration under its own obligations. Strong Customer Authentication or 3-D Secure may be invoked where applicable. Review the processor's notice presented during checkout for information specific to its processing activities.

9 Cookies & similar technologies

9.1 Cookies, web storage and related technologies help maintain login state, remember cart selections, retain currency preference, prevent abuse and record consent choices. Optional analytics and marketing tools are governed by the applicable UK privacy and electronic communications rules.

9.2 Our Cookie Policy identifies categories, typical purposes and controls, including how to refuse or withdraw consent for non-essential technologies. Some essential checkout and security storage can operate without consent where an applicable legal exception applies; marketing tracking is not treated as essential.

10 Sharing of personal data

10.1 We share only information reasonably necessary with hosting and infrastructure providers, technical maintenance teams, checkout/payment processors, fraud-prevention and information-security services, customer support platforms, professional advisers and authorities entitled to receive data. These recipients have access appropriate to their role and legal responsibilities.

10.2 Service providers processing data only on our instructions are required to use suitable confidentiality, security and contractual controls. Where a payment provider or other third party determines its own processing purposes, it acts as an independent controller for those activities, and its own privacy notice applies.

11 International transfers

11.1 Input Hub is established in the United Kingdom. Support, payment processing, hosting or analytics systems may involve processing in the UK or another country, including outside the UK. The specific routing can vary with the infrastructure used for a transaction or website feature.

11.2 Where personal data is transferred to a destination without applicable UK adequacy protection, we use a lawful transfer mechanism, such as the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses or another valid legal basis, together with technical and organisational measures appropriate to the risk.

12 Data retention

12.1 We keep information no longer than reasonably needed for the purpose for which it was collected, considering statutory obligations, dispute windows, safety and legitimate operational needs. Retention may vary where an unresolved complaint, chargeback, suspected fraud or legal hold requires preservation of particular evidence.

12.2 Customer and entitlement records are maintained while an Account is active and may be kept for a proportionate period after closure to resolve claims and confirm past licences. Ordinary transaction and accounting records are normally kept for six years after the relevant financial-year end, subject to longer mandatory duties or a documented dispute.

Processing reference table

13 Data security

13.1 We maintain safeguards proportionate to the scale and sensitivity of the information, including access restrictions, encrypted communications, account authentication, separation of duties where appropriate, vendor security controls, back-up management and procedures to investigate unauthorised access. No internet service can guarantee the absence of every security incident.

13.2 You are responsible for choosing strong account credentials, securing your own devices and promptly notifying us of a suspected compromise. We never ask you to provide a full card security code or disclose a password by email. We may temporarily lock access or require a credential reset if account abuse is suspected.

14 Your privacy rights

14.1 Subject to the applicable conditions and exemptions, you may request access, correction, erasure, restriction of processing, data portability and objection to processing based on legitimate interests or direct marketing. You can withdraw consent where consent is the lawful basis and seek safeguards concerning qualifying solely automated decisions.

14.2 Send a clear request to info@input-hub.com; we may request proportionate identity verification before disclosing or changing protected records. We usually respond within one calendar month, subject to lawful extensions and to explaining any applicable exemption, refusal or fee permitted by law.

14.3 You may complain to the UK Information Commissioner's Office (www.ico.org.uk) if you believe your rights have been infringed. Contacting us first can permit a direct resolution but is not a prerequisite to approaching the regulator. Individuals in other jurisdictions may also have rights before their competent data-protection authority.

15 Marketing communications

15.1 We may send email offers, product updates or promotional newsletters only where the applicable marketing rules permit it. Subscription forms identify the intended marketing purpose and give an affirmative choice where consent is required. Purchase confirmation and security notices are sent as operational messages rather than optional promotional content.

15.2 Every electronic marketing message will identify the sender and provide an accessible unsubscribe or opt-out mechanism. You can also withdraw through info@input-hub.com. We keep the minimum suppression information needed to respect an opt-out and prevent accidental re-enrolment.

15.3 Optional advertising measurement or personalised advertising may involve marketing cookies or similar technologies. Such tools are activated and controlled according to the consent rules described in our Cookie Policy; refusing them will not prevent you from buying a Prompt.

16 Automated decision-making & profiling

16.1 Technical systems may identify anomalous access, payment velocity, suspicious login attempts, chargeback patterns or bot traffic. These controls support transaction safety and may result in a temporary review or request for further verification before Delivery.

16.2 We do not use routine catalogue recommendations as a substitute for legal, employment, credit or medical judgments about customers. Where an automated determination produces a legal or similarly significant effect within applicable law, we will provide the required information, safeguards and routes to challenge the outcome.

17 Third-party services & links

17.1 Product descriptions may refer to external AI systems, websites or services. Accessing one of those services may disclose data to the third party under its own terms and privacy notice. We cannot control how an independent AI provider uses information that you voluntarily submit directly to it.

17.2 Do not upload confidential, personal or regulated information to an AI tool merely because a Prompt example refers to that use case. Evaluate the third-party provider's data retention, training, geographic processing, intellectual-property rules and confidentiality terms before submitting material.

18 Changes to this policy

18.1 We may update this Privacy Policy to reflect changes in law, technology, products or data-processing practices. The current version and effective date appear at the beginning and end of the document. Material changes will be communicated by suitable website notice or direct message where required.

18.2 We will not retrospectively turn an earlier consent into authority for a different purpose. If new processing requires your consent, we will request a new choice before enabling it. Earlier lawful processing remains governed by the conditions applicable when it occurred.

19 How to contact us / submit a request

19.1 Send privacy questions, requests for access or deletion, objections and complaints to info@input-hub.com. Identify the relevant account email and the right you wish to exercise; do not attach identity documents unless specifically requested over a secure channel.

19.2 Postal correspondence: WILDMINT WORKS LTD, Dept 7136, 43 Owston Road, Carcroft, Doncaster, United Kingdom, DN6 8DA. Standard customer-support hours are Monday to Friday, 9:00 a.m. to 6:00 p.m. UK time; lawful response periods continue to apply regardless of working hours.

19.3 If we cannot fully comply with a request due to a statutory duty, security need or overriding right, we will explain the relevant basis where legally permitted and describe how you can challenge the decision.

Schedule 1 — Practical Retention Guide

A. For Account access and order history, keep your sign-in email current and download purchased files promptly. Closing the Account ends routine access but does not erase statutory accounting records or unresolved dispute evidence immediately.

B. For a transaction or disputed refund, supply the order reference, date, currency and a description of the issue. We retain evidence necessary to assess the claim while protecting unrelated records from unnecessary access.

C. For a privacy request, email the subject "Privacy Request" and identify the right sought. We will confirm identity through a proportionate method and provide an outcome or update within the applicable legal period.

D. For consent-based cookies and newsletters, use the preference control or unsubscribe facility. An opt-out stops future relevant processing, while minimal evidence of that preference may be maintained to honour it.

E. For a suspected account compromise, secure your email and password, contact our support team, and avoid transmitting card numbers or passwords in a free-text message. Incident evidence may be kept longer where necessary to protect the account or satisfy a lawful duty.

Input Hub · Privacy Policy · v1.0 · Effective 20 October 2026 · Published on the website; subject to update; the current published version governs.