Privacy Policy

Last updated: February 2026

1. Introduction

NatureHood ("we", "us", or "our") operates a platform that connects athletes and brands for authentic partnerships. This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong ("PDPO") and applicable international data protection standards.

By using NatureHood, you acknowledge that you have read and understood this policy.

2. Data We Collect

We collect personal data through the following channels:

Quick Sign-Up

    • Full name
    • Email address
    • Role (athlete or brand)
    • Marketing preferences (opt-in)

Account Registration

    • Email address
    • Username
    • Password (stored in hashed form — we never see your plain-text password)
    • Account type (individual athlete or business)

Athlete Applications

    • Full name, email, phone number
    • Sport or discipline, years of experience
    • Instagram handle and follower count
    • Location, portfolio URL
    • Project ideas and availability

Brand Partnership Applications

    • Company name, contact name, job title
    • Business email, phone, website
    • Industry, company size, budget range, timeline
    • Partnership objectives and target audience

Email Subscriptions

    • Email address (for newsletter and platform updates)

Technical Data

    • Authentication session tokens (stored as cookies — see our Cookie Policy)

3. Why We Collect It (Purpose — DPP 1)

We collect personal data only for the following lawful purposes:

  • To create and manage your account on NatureHood
  • To match athletes with relevant brand partnership opportunities
  • To communicate with you about the platform, your applications, and matched partnerships
  • To send marketing updates and newsletters (only where you have opted in)
  • To improve and maintain the security and performance of the platform
  • To comply with our legal obligations under Hong Kong law

We will not use your personal data for any purpose other than those listed above without your consent or a lawful basis under the PDPO.

4. How We Store It (Security — DPP 4)

Your data is stored on Supabase, a cloud database platform hosted on Amazon Web Services (AWS) infrastructure. All data is encrypted in transit (TLS/HTTPS) and at rest. Passwords are hashed using industry-standard algorithms and are never stored in plain text.

We take reasonable steps to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Access to production data is restricted to authorised personnel only.

5. Who We Share It With (Disclosure — DPP 3)

We do not sell your personal data. We may share it only in the following circumstances:

  • Supabase — as our data processor for storage and authentication. Supabase processes data on our behalf under a data processing agreement.
  • Brand or athlete partners — where you have submitted an application or expressed interest in a partnership, relevant profile information may be shared with the matched party.
  • Legal requirements — if required by law, regulation, or court order in Hong Kong or another applicable jurisdiction.

6. Your Rights (DPP 6)

Under the PDPO (sections 18 and 22), you have the right to:

  • Access — request a copy of the personal data we hold about you
  • Correction — request that inaccurate personal data be corrected
  • Deletion — request that your account and personal data be deleted (we will action this within 90 days)
  • Opt-out of marketing — unsubscribe from marketing emails at any time via the unsubscribe link or by contacting us

To exercise any of these rights, contact us at privacy@naturehood.co. We will respond within 40 days as required by the PDPO.

7. Data Retention

  • Account data is retained for as long as your account is active.
  • If you request account deletion, your personal data will be removed from our systems within 90 days.
  • Email subscription data is retained until you unsubscribe or request deletion.
  • Application data (athlete and brand forms) is retained for up to 2 years to support partnership matching, unless you request earlier deletion.

8. Cookies

We use essential cookies to maintain your authenticated session. We do not use advertising or analytics tracking cookies. For full details, see our Cookie Policy.

9. International Transfers

NatureHood is based in Hong Kong and welcomes brand partners globally. When personal data is transferred outside of Hong Kong (for example, to AWS infrastructure), we ensure appropriate safeguards are in place consistent with PDPO requirements and international data protection standards.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page and, where material changes are made, notify you by email or via a notice on the platform.

11. Contact Us

For privacy inquiries, data access requests, or complaints:

You also have the right to lodge a complaint with the Office of the Privacy Commissioner for Personal Data (PCPD) in Hong Kong.