Privacy Policy
Last updated: April 15, 2026
Your privacy matters to us. This notice explains what data we collect, how we use it, and your rights under GDPR and other applicable laws.
This policy covers all websites, subdomains, and pages operated by FreshJuice (the “Website”), including demo/showcase pages for our HubSpot modules and themes.
Who we are (Data Controller)
FreshJuice — an independent project and brand operated by a single developer. For any privacy inquiries, please contact: privacy@freshjuice.dev
If you are in the EEA/UK, FreshJuice is the data controller for personal data collected via this Website.
What we collect
We collect:
- Usage data (pages viewed, referrers, device, country, browser/OS) — only after you actively consent via the cookie banner. Until then we are blind.
- Contact data if you submit a form (name, email, company, message).
- Support/sales communications (messages you send us).
- Billing data if you purchase a license — collected by our payment processor (Paddle), not by us directly.
We do not collect special category data.
Legal bases (GDPR)
We process data on:
- Consent — for all non-essential cookies, analytics, and marketing (HubSpot).
- Legitimate interests — to prevent abuse and protect site security.
- Contract — when you request a demo, quote, support, or purchase a license.
- Legal obligations — when we must keep records (e.g., tax invoices).
Cookies & consent
We use HubSpot's cookie consent banner to manage your preferences. Until you actively consent, we are effectively blind: no tracking, no analytics, no marketing cookies, and no third-party scripts that profile you are loaded — period. This applies globally, to every visitor, regardless of where you are located. We apply the same opt-in standard worldwide (EU, UK, US, and everywhere else), even in jurisdictions where prior consent is not legally required. You can change or withdraw your choice at any time via the Cookie settings link in the footer.
If your browser sends a Global Privacy Control (GPC) signal, we treat it as a binding opt-out. In that case the consent banner is shown for informational purposes only — nothing is activated, nothing is set, and no choice can override the signal without an explicit action from you.
Strictly necessary cookies
The only cookies stored without a cookie-banner consent are strictly necessary ones:
- Cloudflare bot-management and security cookies (e.g.
__cf_bm,cf_clearance) used to protect the site from abuse. - HubSpot's consent-state cookie (
__hs_cookie_cat_pref) that remembers your choice so we don't ask again. - Paddle checkout cookies, but only if you actively click "Buy" and open the checkout overlay. These are essential for processing your payment (session integrity, fraud prevention, tax calculation) and are loaded exclusively on your explicit request — never preemptively on page load.
These cookies are exempt from prior consent requirements under Article 5(3) of the ePrivacy Directive 2002/58/EC (as amended by Directive 2009/136/EC), Recital 49 GDPR (security as a legitimate interest), and equivalent national implementations — for example UK PECR Regulation 6(4)(b) and § 25(2) of the German TTDSG/TDDDG. Further guidance: EDPB Guidelines 2/2023 on the technical scope of Art. 5(3) ePD and WP29 Opinion 04/2012 on the Cookie Consent Exemption.
HubSpot tracking (consent-based)
After you consent, we use HubSpot for forms, CRM and site analytics/automation. HubSpot then sets cookies and records interactions (page views, form submissions) to help us understand site usage and respond to inquiries. See HubSpot's Privacy Policy for details.
Embedded third-party content
Some pages embed third-party media which may set their own cookies:
- YouTube (we use privacy-enhanced mode where possible) — https://policies.google.com/privacy
- Vimeo — https://vimeo.com/privacy
- CodePen — https://blog.codepen.io/documentation/privacy-policy/#cookies
When feasible, embeds load only after interaction (click-to-play) or after your consent.
Third-party services
| Service | Purpose | Data collected | Their privacy policy |
|---|---|---|---|
| HubSpot | Forms, CRM, consent & analytics | Email, cookies, page views (after consent) | legal.hubspot.com/privacy-policy |
| Paddle | Payment processing (Merchant of Record) | Billing info, payment data (only on Buy click) | paddle.com/privacy |
| Cloudflare | Hosting, CDN, bot protection | Connection metadata, security cookies | cloudflare.com/privacypolicy |
| Rollbar | Error reporting | Error stack traces, IP address | rollbar.com/privacy |
| Resend | Transactional email delivery (license keys) | Email address | resend.com/legal/privacy-policy |
Payments
Purchases of FreshJuice products are processed by Paddle.com Market Limited, our Merchant of Record. When you click "Buy", Paddle's checkout overlay loads on our website. Paddle collects payment and billing information (such as name, email, billing address, and payment details) under their own privacy policy and handles tax collection, invoicing, and fraud prevention on our behalf.
We do not have access to your full payment details (e.g., card numbers). We receive only the information necessary to fulfill your license (such as email address and country for tax purposes). See Paddle's Privacy Policy and Paddle's Buyer Terms for details.
Forms & communications
If you submit a form or contact us, we process your details to respond and keep a record of the conversation (HubSpot CRM). We may send you transactional emails related to your purchase (e.g., license keys). We do not send marketing emails. Ever. Read our ZeroMail policy for the full story.
Data sharing
We do not sell your personal data. We share limited data with:
- Service providers (processors) — hosting, HubSpot CRM, email delivery, error monitoring; all under data processing agreements.
- Legal authorities — only when required by law.
Some providers may be outside the EEA/UK. Where applicable, we use appropriate safeguards (e.g., EU SCCs).
Retention
- Form/contact data: up to 24 months from your last interaction (or earlier upon request).
- CRM records: while you are an active lead/client and as required by law.
- Analytics: only aggregated, non-personal data.
We delete or anonymize data when no longer needed.
Your rights (EEA/UK)
You can request:
- access, correction, deletion;
- restriction or objection to processing;
- portability (where applicable);
- withdrawal of consent (for HubSpot non-essential cookies/marketing) at any time, without affecting prior lawful processing.
To exercise your rights: email privacy@freshjuice.dev. You also have the right to complain to your local data protection authority.
International transfers
Where data is transferred outside the EEA/UK (e.g., HubSpot infrastructure), we rely on lawful transfer mechanisms (e.g., EU Standard Contractual Clauses) and implement additional safeguards where necessary.
Security
We use technical and organizational measures to protect your data (encryption in transit, access controls, least-privilege, logging). No method is 100% secure; we will notify you and regulators of breaches when legally required.
Children
This Website and our services are not intended for individuals under the age of 18. We do not knowingly collect or process personal data from anyone under 18 years of age.
If you are under 18, please do not use this Website or provide any personal information. If we learn that we have inadvertently collected data from a minor, we will promptly delete it.
Changes to this policy
We may update this policy from time to time. Material changes will be highlighted on this page. Please review periodically.
Contact
For any privacy-related inquiries, please email privacy@freshjuice.dev. We do not publish a postal address publicly. If required for GDPR or legal reasons, our mailing address can be provided upon request.