Privacy Policy

This Privacy Policy explains how hob-hob collects, uses, stores, shares and protects personal data when users visit www.hob-hob.com, use the hob-hob platform, book or offer experiences, communicate with hob-hob, subscribe to communications, or interact with hob-hob through external platforms.

This Privacy Policy is intended to comply with the Swiss Federal Act on Data Protection  ("DPA") and, where applicable, the General Data Protection Regulation ("GDPR").

By using hob-hob, users acknowledge the processing of their personal data as described in this Privacy Policy.

1. General Notes

1.1 Hob-hob operates an online marketplace that connects explorers with creators offering creative experiences. In this Privacy Policy, “hob-hob”, “we”, “us” or “our” refers to the operator of the hob-hob platform

.1.2 “Personal data” means any information relating to an identified or identifiable natural person. “Processing” includes any operation involving personal data, including collection, storage, use, disclosure, modification, deletion or anonymisation.

1.3 If a user provides personal data relating to another person, for example another participant in an experience, the user confirms that they are authorised to do so, that the data is accurate and that the other person has been informed about this Privacy Policy.

1.4 For the purpose of this Privacy Policy, “explorers” are users who book experiences on the platform, and “creators” are users who offer and manage experiences.

2. Controller and Contact Information

2.1 The controller responsible for the processing of personal data is:
‍
• Controller: Hob-hob
• Founder: Shu-Mei Yang
• Address: Badenerstrasse 575, 8048 Zurich, Switzerland
• Email:

‍2.2 For any privacy relatedquestions, requests or complaints, users may contact hob-hob at hello@hob-hob.com.

3. Categories of personal data we process

3.1 Hob-hob may process the following categories of personal data:
1. Account data, such as name, email address, login details, profile information, language preferences and user role as explorer or creator.
2. Booking and transaction data, such as booked experiences, dates, prices, booking status, cancellation status, payment status and related records.
3. Creator listing data, such as creator profile information, experience descriptions, images, availability, pricing, location information and content uploaded to the platform.
4. Communication data, such as messages exchanged through the platform, emails, support requests, feedback and communication with hob-hob through external channels.
5. Technical data, such as IP address, browser type, device information and basic log or session data, which may be collected directly by hob-hob or through infrastructure providers for security, performance and operational purposes.
6. Usage and analytics data, such as interactions with the website, pages visited, clicks, conversions, traffic sources and general platform behaviour.
7. Marketing data, such as newsletter subscription status, marketing consent, campaign interaction, advertising engagement and communication preferences.
8. Partner consent data, where applicable, such as confirmation that a user accepted a brand partner’s privacy policy or marketing consent during the booking process.
9. Content data, such as images, photos, descriptions and other content uploaded by creators or users to the platform.

3.2 Hob-hob does not intentionally collect special categories of personal data, such as health data, religious beliefs, political opinions, genetic data, biometric data, sexual orientation, ethnic origin or trade union membership.

3.3 Users should not submit special categories of personal data unless strictly necessary for a specific experience. If users voluntarily share such information, for example allergy information or health related details with a creator, they do so at their own responsibility. Hob-hob does not request or systematically process such data as part of its standard platform operations.

3.4 Login credentials, such as passwords, are processed in a secure manner through authentication systems and are not accessible to hob-hob in plain text.

3.5 Users are responsible for ensuring they have the necessary rights and permissions to upload images or content, including consent from identifiable individuals.

4. Purposes of processing

4.1 Hob-hob processes personal data for the following purposes:
1. To provide, operate and maintain the hob-hob platform.
2. To create and manage user accounts.
3. To allow explorers to discover, book, cancel or manage experiences.
4. To allow creators to create listings, manage bookings and communicate with explorers.
5. To display user generated content, including images and listings, on the platform.
6. To facilitate payments, refunds and transaction related processes through payment providers.
7. To send booking confirmations, reminders, cancellation notices, platform notifications and other transactional communications.
8. To provide user support and respond to inquiries.
9. To improve platform functionality, user experience, content, performance and security.
10. To analyse platform usage, traffic, conversions and marketing performance.
11. To send newsletters, promotional content or marketing communications where consent has been given or where otherwise legally permitted.
12. To run advertising campaigns and measure campaign performance through tools such as Meta Pixel, Google Analytics and Google Tag Manager.
13. To prevent fraud, misuse, unauthorised access, platform abuse and violations of the Terms and Conditions.
14. To comply with legal, accounting, tax, regulatory and record keeping obligations.
15. To establish, exercise or defend legal claims.
16. To manage collaborations with brand partners where users have given the required consent.

5. Legal basis for processing

5.1 Where the GDPR applies, hob-hob processes personal data based on one or more of the following legal bases:
1. Performance of a contract, where processing is necessary to provide the platform, manage accounts, process bookings, facilitate communication or perform related services.
2. Legal obligation, where processing is required for tax, accounting, regulatory or legal compliance.
3. Legitimate interest, where processing is necessary for platform operation, security, fraud prevention, service improvement, customer support, analytics or enforcement of legal rights, provided that user rights do not override these interests.
4. Consent, where required for newsletters, marketing communications, non essential cookies, tracking technologies, partner marketing consent or certain optional services.

5.2 Users may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

6. Platform communication and user data sharing

6.1 Communication between explorers and creators takes place primarily through the hob-hob platform.

6.2 Hob-hob may share the personal data necessary to perform a booked experience between the explorer and creator. This may include name, booking details, experience information and other information required for coordination.

6.3 Creators currently receive the explorer’s name after booking. Email addresses are not shared with creators as part of the standard process, unless required for the performance of the service, legal obligations, or explicitly communicated platform changes.

6.4 Explorers and creators are responsible for how they process any personal data they receive from each other in connection with an experience.

6.5 Hob-hob does not control how explorers or creators independently process personal data outside the platform.

7. Email system and communications

7.1 Hob-hob uses SendGrid, a service provided by Twilio, to send transactional and, where applicable, marketing emails.

7.2 Transactional emails may include booking confirmations, reminders, cancellation notices, account notifications, payment related notices and essential platform communications. These communications are necessary for the performance of the platform services.

7.3 Marketing emails, newsletters and promotional communications are sent only where the user has subscribed, given consent or where otherwise legally permitted.

7.4 In connection with email delivery, personal data such as name, email address, message content, delivery status, opening data and interaction data may be processed.

7.5 Twilio may process personal data outside Switzerland, the EU or the EEA, including in the United States. Such transfers are protected through appropriate safeguards, including applicable Data Privacy Frameworks, Standard Contractual Clauses or equivalent contractual safeguards.

7.6 Users may unsubscribe from marketing emails at any time by using the unsubscribe link in the email or by contacting hello@hob-hob.com. Transactional emails necessary for the platform cannot be opted out of while the user continues to use the relevant platform services.

8. Newsletters and marketing communication

8.1 Users may subscribe to hob-hob newsletters or marketing communications through the website, platform, forms or other channels.

8.2 When subscribing, hob-hob may process the user’s email address, name, subscription status, consent timestamp, IP address and interaction data for the purpose of sending relevant updates, experiences, offers and platform information.

8.3 The legal basis for newsletter and marketing communication is consent, unless another legal basis applies.

8.4 Users may withdraw consent at any time. Withdrawal does not affect the legality of processing before withdrawal.

9. Cookies, analytics and tracking

9.1 Hob-hob uses cookies and similar technologies to operate the website and platform, maintain security, analyse usage, improve performance and support marketing activities.

9.2 Hob-hob may use the following categories of cookies and tracking technologies:

1. Necessary cookies, which are required for platform operation, security, login, session management and booking functionality.
2. Performance and analytics cookies, which help hob-hob understand how users interact with the website and platform.
3. Marketing cookies, which help measure advertising performance and deliver relevant ads.

9.3 Non essential cookies and tracking technologies are activated only where user consent is required and has been provided through the cookie banner or equivalent consent mechanism.

9.4 Users can manage or withdraw cookie consent through the cookie banner where available, or adjust cookie settings through their browser. Disabling certain cookies may affect platform functionality.

9.5 Hob-hob uses Google Analytics, Google Tag Manager and Meta Pixel to measure website performance, understand user behaviour, optimise campaigns and measure conversions. These tools may process data such as IP address, browser type, device information, interaction data, page views and conversion events.

9.6 Google and Meta may process data under their own responsibility where they act as independent controllers. Users should review the privacy settings and privacy policies of these providers.

10. Third party tools and service providers

10.1 Hob-hob uses third party tools and service providers to operate, maintain, improve and market the platform. The use of such providers may change over time as hob-hob adds, replaces or removes services.

10.2 These providers may include, but are not limited to:
1. Bubble, for platform infrastructure, application functionality, database and hosting.
2. AWS through Bubble, for underlying cloud infrastructure.
3. Webflow, for website and landing page hosting.
4. Stripe, for payment processing, payouts, refunds and payment related compliance.
5. Google Analytics and Google Tag Manager, for analytics and tracking management.
6. Meta Pixel, Meta platforms, Instagram and TikTok, for social media activities, paid campaigns, advertising and performance measurement.
7. SendGrid by Twilio, for email delivery.
8. WhatsApp, for communication where users contact hob-hob through this channel.
9. Airtable, for CRM and operational management. 10. Weglot and DeepL, for translation and content related processing.

10.3 These providers process personal data only to the extent necessary for the relevant service, or as otherwise described in their own privacy policies where they act as independent controllers.

10.4 Hob-hob selects service providers with appropriate data protection and security standards and, where required, enters into contractual arrangements to protect personal data.

11. Payments

11.1 Payments on hob-hob are processed through Stripe. Hob-hob does not store full payment card details.

11.2 Stripe may process payment related data, including name, payment method information, transaction amount, payment status, refund data, payout information and data required for fraud prevention, compliance and payment processing.

11.3 Stripe may act as an independent controller for certain payment related processing. Users should review Stripe’s privacy policy for details.

11.4 Hob-hob may add further payment providers in the future, including local payment methods. If this happens, this Privacy Policy may be updated accordingly.

12. Brand partners and collaborative experiences

12.1 Certain experiences may be offered in collaboration with brand partners.

12.2 In such cases, users may be asked during the booking process to accept the brand partner’s own privacy policy, terms or marketing consent.

12.3 Where users explicitly consent, hob-hob may share selected personal data with the relevant brand partner for purposes such as experience delivery, participant management, campaign reporting, customer communication or marketing.

12.4 The shared data may include name, booking information, consent status and other data necessary for the specific collaboration.

12.5 Brand partners act as independent data controllers for the personal data they receive. Hob-hob is not responsible for the independent data processing practices of such partners.

12.6 Users should review the relevant partner privacy policy before giving consent.

13. Data transfers to authorities and legal advisers

13.1 Hob-hob may disclose personal data to public authorities, courts, regulators, legal advisers or other third parties where required by law, court order, regulatory obligation, or where necessary to establish, exercise or defend legal claims.

14. International data transfers

14.1 Personal data may be transferred to countries outside Switzerland, the EU or the EEA, including the United States.

14.2 Such transfers may occur through service providers including, but not limited to, Bubble, Webflow, Stripe, Google, Meta, Twilio, Airtable, Weglot, DeepL and other providers necessary for operating the platform.

14.3 Where required, international transfers are protected by appropriate safeguards, including adequacy decisions, the EU Data Privacy Framework, the Swiss United States Data Privacy Framework, Standard Contractual Clauses or equivalent contractual protections. The GDPR restricts transfers outside the EEA unless these safeguards or other recognised transfer mechanisms are in place.

14.4 Despite such safeguards, users acknowledge that data protection standards in third countries may differ from those in Switzerland or the EU.

15. Data retention, deletion and anonymisation

15.1 Hob-hob retains personal data only for as long as necessary for the purposes described in this Privacy Policy, or as required or permitted by law.

15.2 Unless a longer retention period is required or permitted by law, personal data linked to a user account will be retained for up to 30 days after account deletion or deactivation. After this period, the data will be permanently deleted or anonymised.

15.3 Certain data may be retained for longer periods where necessary for legal, accounting, tax, fraud prevention, security, dispute resolution, enforcement of the Terms and Conditions or evidence purposes.

15.4 Booking records, invoices, accounting records, payment related records and business documents may be retained for up to 10 years where required under applicable legal or accounting obligations.

15.5 Personal data retained only for legal or accounting purposes will be restricted where appropriate and used only for those purposes.

15.6 Under Swiss data protection principles, personal data should be deleted or anonymised once it is no longer required for the relevant processing purpose, unless a legal basis for further retention exists.

16. Data security

16.1 Hob-hob implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

16.2 These measures may include access restrictions, role based permissions, secure authentication, encrypted transmission, provider security controls, monitoring, backups and internal operational controls.

16.3 Hob-hob relies on established service providers such as Bubble, AWS, Webflow and Stripe for parts of the technical infrastructure and security environment.1

6.4 Despite these measures, no system or data transmission over the internet can be guaranteed to be completely secure. Hob-hob cannot guarantee absolute security, but implements appropriate safeguards to reduce risks.

16.5 Hob-hob does not guarantee uninterrupted or error free operation of the platform.

17. Profiling and automated decision making

17.1 Hob-hob may analyse user behaviour, preferences and platform interactions to improve services, personalise content, recommend experiences and measure marketing performance.

17.2 Hob-hob does not use automated decision making that produces legal effects or similarly significant effects on users.

17.3 Users may object to profiling for marketing purposes or contact hob-hob at hello@hob-hob.com for questions about such processing.

18. User rights

18.1 Subject to applicable law, users may have the following rights:
1. Right of access to personal data processed by hob-hob.
2. Right to correction of inaccurate or incomplete data.
3. Right to deletion of personal data, subject to legal retention obligations.
4. Right to restriction of processing.
5. Right to data portability, where applicable.
6. Right to object to processing, especially for direct marketing.
7. Right to withdraw consent at any time.
8. Right to information about international transfers and safeguards.
9. Right to lodge a complaint with a supervisory authority.

18.2 Requests may be submitted to hello@hob-hob.com.

18.3 Hob-hob may require proof of identity before processing a request.

18.4 Some rights may be limited where retention or processing is necessary for legal obligations, contractual performance, security, fraud prevention, accounting, dispute resolution or legal claims.

18.5 In Switzerland, the competent authority is the Federal Data Protection and Information Commissioner, FDPIC.

19. External links and third party platforms

19.1 The hob-hob platform may contain links to third party websites, social media pages or partner platforms.

19.2 Hob-hob is not responsible for the privacy practices of third party websites or platforms. Users should review the applicable privacy policies before using such services.

19.3 If users interact with hob-hob through platforms such as Instagram, TikTok, Meta, WhatsApp or other external services, those providers may process personal data under their own responsibility.

20. Changes to this Privacy Policy

20.1 Hob-hob may update this Privacy Policy to reflect changes in operations, tools, services, legal requirements or data processing practices.

20.2 Updated versions will be published on the platform. Hob-hob may, where appropriate or required by law, inform users of significant changes through the platform or other communication channels.

20.3 Continued use of the platform after publication of an updated Privacy Policy constitutes acceptance of the updated version, to the extent permitted by applicable law.

20.4 This Privacy Policy is governed by Swiss law. Where applicable, users may also benefit from mandatory data protection laws of their country of residence.

Last updated: May 2026