Privacy Policy

1. Who we are

Hysplex is an online service, run by Layernine Ltd, that lets its members plan running routes and runs in their city, join runs that other members have planned, and share how those runs went. Layernine Ltd is a company registered in England and Wales (company number 14628201), with its registered office at 128 City Road, London, EC1V 2NX. In this policy, “Hysplex”, “we”, “us” and “our” mean Layernine Ltd.

Layernine Ltd is the data controller responsible for your personal information. If you have any question about this policy, or about how we handle your data, write to us at hello@layernine.co.uk.

2. The information we collect

We collect the following information about you.

Information you give us when you join and use your account:

• your name;
• your email address;
• your password, which is stored only in an encrypted, hashed form, so we never see it;
• the city whose chapter you belong to;
• the date and time you accepted our terms and this policy.

Information you create when you use Hysplex:

• routes you draw on the map, meaning their name, the path of map points you place, the calculated distance, and any note you add;
• runs you plan, meaning the route, date, time and description;
• the runs you join, so the chapter can see who is going;
• results you post after a run, meaning your finish time, an optional pace, and any comments;
• your email notification preferences.

Messages you send us: if you contact us, we handle your name, email address and whatever you write, so that we can reply.

Technical information: like most websites, our systems and service providers automatically record basic technical data when you use Hysplex, such as your IP address, browser type and the pages you visit, as part of keeping the service running and secure.

3. How we use your information, and our legal bases

Under UK data protection law we must have a lawful basis for using your personal information. We rely on the following.

• To perform our contract with you: to create and run your account, to give you your chapter dashboard, routes, runs and results.
• For our legitimate interests: to keep Hysplex secure and working, to prevent misuse, to understand how the service is used, and to respond to your messages. We balance these interests against your rights.
• With your consent: where you have chosen to receive something, such as optional notification emails. You can withdraw your consent at any time.
• To meet legal obligations: for example, keeping records we are required by law to keep, or responding to lawful requests.

4. What other members can see

Hysplex is a shared service, so some of what you do is visible to other members of your chapter. Members of your city’s chapter can see your name, the routes you draw, the runs you plan or join, and the results you post. They cannot see your email address, your password or your account settings. Members of other cities’ chapters cannot see your information.

If you delete your account, the routes you drew and the runs you hosted stay visible to your chapter, so that other people’s runs are not broken, but your name on them is replaced with “Past member”.

5. Who we share your information with

We do not sell your personal information. We share it only with the service providers that help us run Hysplex, and that act on our instructions:

• Supabase, our database and sign in provider, which stores your account and the content you create;
• Resend, our email provider, which delivers login codes and notification emails to you;
• OpenStreetMap, which provides the map imagery: when you view or draw on a map, your browser loads that imagery from OpenStreetMap, which may receive your IP address;
• our hosting provider, which runs the servers the service operates on.

We may also disclose information if the law requires it, or to establish, exercise or defend our legal rights.

6. Transfers outside the UK

Some of our service providers process data outside the United Kingdom. Where that happens, we rely on appropriate safeguards recognised under UK data protection law, such as an adequacy decision or standard contractual clauses with the UK addendum, so that your information stays protected.

7. How long we keep it

We keep your account information for as long as you have an account. When you delete your account, your account and personal details are removed, and the shared content you created is anonymised as described in section 4. We keep records we are legally required to keep for as long as the law requires, which is generally up to six years.

8. Your rights

Under UK data protection law you have the right to ask for a copy of your personal information, to have it corrected, to have it erased, to restrict or object to how we use it, to data portability, and, where we rely on your consent, to withdraw that consent. You can change your name and preferences, and delete your account, from your settings at any time. To exercise any other right, write to us at hello@layernine.co.uk and we will respond within the time the law allows.

9. Security

We take reasonable technical and organisational measures to protect your information. Passwords are stored in hashed form, access to the database is restricted so that members can only reach the data they are allowed to, and traffic to the service is encrypted. No service can be completely secure, but we work to keep your information safe.

10. Cookies

Hysplex uses only the cookies that are strictly necessary for the service to work, chiefly to keep you signed in to your account. We do not use advertising cookies. Because these cookies are essential, they do not need your consent, but you can block cookies in your browser, though parts of the service may then stop working.

11. Children

Hysplex is meant for adults aged 18 and over, and is not directed at children. We do not knowingly collect information from anyone under 18.

12. Changes to this policy

We may update this policy from time to time. When we do, we will change the “last updated” date above, and, for significant changes, we will let members know.

13. How to contact us or complain

For anything to do with your data, or to exercise your rights, write to us at hello@layernine.co.uk. If you are not happy with our response, you have the right to complain to the Information Commissioner’s Office, the UK regulator for data protection, at ico.org.uk. We would ask that you give us the chance to put things right first.

See also our Terms & Conditions.