Privacy Policy

Last updated: November 15, 2026

Introduction

This Privacy Policy explains how HBYH LIMITED ("fabovilsolution", "we", "our", or "us") collects, uses, shares, and protects information when you use the fabovilsolution platform, websites, and related services (the "Services"). For the purposes of the UK GDPR and the Data Protection Act 2018, HBYH LIMITED is the data controller of the personal data described in this policy. By using the Services, you acknowledge this policy. If you do not agree with it, please do not use the Services.

1. Information we collect

1.1 Information you provide

• Account information: name, company name, work email, country, and password credentials when you register.
• Account verification details: information we ask for to confirm that an account is genuine and used for legitimate advertising, where required.
• Campaign content: campaign settings, budgets, creative assets, audience definitions, and reporting preferences you configure in the platform.
• Communications: the content of support requests, contact form messages, and feedback you send us.

1.2 Information collected automatically

• Usage data: pages viewed, features used, session activity, and timestamps within your workspace.
• Device and connection data: IP address, browser type, device type, operating system, and approximate location derived from IP.
• Cookies and similar technologies: necessary cookies for sign-in and session security, plus analytics, advertising, and functionality cookies where you consent to them.

1.3 Information from advertising activity

• Delivery data: impressions, clicks, and completion events associated with campaigns you run.
• Audience and measurement data: audience segments and conversion events you choose to connect, processed to report on campaign performance.

2. How we use information

• To provide, operate, and maintain the Services.
• To deliver, pace, and measure the campaigns you configure.
• To generate reports, dashboards, and audience insights for your workspace.
• To verify accounts and prevent misuse, fraud, and invalid activity.
• To respond to support requests and communicate about your account.
• To improve the platform, including debugging, testing, and product development.
• To send product updates and marketing communications, where permitted and with consent where required.
• To meet legal, regulatory, and contractual obligations.

3. Legal bases

Where the UK GDPR or EU GDPR applies, we process personal data on the basis of one or more of the following legal bases: performance of a contract with you; our legitimate interests (such as securing the platform, preventing misuse, and improving the Services); your consent (such as for non-essential cookies and marketing communications); and compliance with legal obligations. Where we rely on legitimate interests, we consider whether those interests are overridden by your rights and freedoms. You can withdraw consent at any time where processing is based on consent.

Where US state privacy laws apply, we process personal data as permitted by those laws and provide the rights described in section 8.

4. Sharing information

We do not sell personal data. We share information only as needed to run the Services:

• Service providers: hosting, data storage, analytics, email delivery, and customer support tools that process information on our behalf under contract.
• Delivery and measurement partners: partners involved in serving or measuring campaigns you choose to run.
• Fraud and security providers: partners that help filter invalid traffic and protect the platform.
• Legal and regulatory: where required by law, court order, or a valid governmental request.
• Business transfers: in connection with a merger, acquisition, or transfer of assets, subject to this policy.
• With your direction: where you ask us to share information with a third party.

5. Cookies and your choices

We use necessary cookies to keep you signed in and to secure sessions. With your consent, we also use analytics, advertising, and functionality cookies. In the UK, the use of non-essential cookies is subject to the Privacy and Electronic Communications Regulations (PECR); in the EU/EEA, it is subject to the ePrivacy rules implemented in the relevant member state. You can accept, reject, or customise these categories at any time using the Cookie Settings link in the footer, or through your browser settings.

6. Data security

We apply technical and organisational measures designed to protect personal data against unauthorised access, loss, or alteration. These measures may include, for example:

• encryption of data in transit and at rest;
• role-based access controls and least-privilege administration;
• activity logging for workspace and administrative actions;
• scheduled testing and vulnerability management;
• security and privacy training for team members.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Data retention

We keep personal data for as long as needed to provide the Services and for legitimate business or legal purposes, such as maintaining records, resolving disputes, and meeting legal obligations. When data is no longer needed, we delete or de-identify it.

8. Your rights

Depending on where you live, you may have some or all of the following rights:

• UK and EU/EEA: access, rectification, erasure, restriction of processing, objection to processing, data portability, and withdrawal of consent where processing is based on consent. You also have the right to lodge a complaint with a supervisory authority. In the UK, this is the Information Commissioner's Office (ICO) at ico.org.uk. In the EU/EEA, you can complain to the supervisory authority in the country where you live, work, or where an alleged infringement occurred.
• United States: where a state privacy law applies to you, you may have the right to know or access personal information, to request deletion or correction, to opt out of the sale or sharing of personal information or its use for targeted advertising, and not to be discriminated against for exercising those rights. We do not sell personal information. We do not share personal information for cross-context behavioural advertising in exchange for money.

To exercise any of these rights, contact privacy@fabovil.com. We may need to verify your identity before acting on a request, and we will respond within the timeframe required by applicable law.

9. International transfers

Information may be transferred to and processed in countries other than your own, including where our service providers operate. Where required, we put appropriate safeguards in place for these transfers. These safeguards may include the UK International Data Transfer Addendum to the Standard Contractual Clauses, the European Commission's Standard Contractual Clauses, and any required transfer risk assessment.

10. Children

The Services are intended for business use and are not directed to children. We do not knowingly collect personal data from children.

11. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be announced through the platform or by email, and the "last updated" date will be revised.