Privacy Policy

Data Controller

hexadebazn B.V. is the data controller responsible for your personal data. We are registered in the Netherlands with registration number C66551524 and VAT number NL99520025B01.

Data Collection

The data we collect includes personal information that you voluntarily provide to us and information automatically collected when you use our website and services.

Information You Provide

• Name and contact information (email, phone number, address)
• Messages and enquiries sent through our contact forms
• Service preferences and wellness goals
• Communication preferences and consent records
• Payment information (processed securely by third-party providers)

Automatically Collected Information

• IP address and browser information
• Website usage data and analytics
• Cookie data and tracking information
• Device and technical information
• Referral sources and website interactions

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Consent: For marketing communications and optional services
• Contract: To provide services you have requested
• Legitimate Interest: For website analytics and service improvement
• Legal Obligation: For compliance with applicable laws and regulations

How We Use Your Information

We explain how we use your information to provide and improve our services, communicate with you, and ensure legal compliance.

Primary Uses

• Responding to your enquiries and providing customer support
• Delivering wellness consultation and guidance services
• Processing payments and managing service delivery
• Sending service-related communications and updates
• Improving our website functionality and user experience

Secondary Uses (with consent)

• Marketing communications about our services
• Personalised wellness recommendations
• Newsletter and blog updates
• Research and development of new services

Data Sharing and Disclosure

hexadebazn does not sell your personal data. We may share your information in the following circumstances:

• Service Providers: Trusted third parties who assist in service delivery
• Legal Requirements: When required by law or to protect our rights
• Business Transfer: In case of merger, acquisition, or business sale
• Consent: When you have explicitly consented to sharing

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy:

• Contact Information: Retained while you remain a customer or until withdrawal of consent
• Service Records: Kept for up to 7 years for business and legal purposes
• Marketing Data: Deleted upon unsubscribe or withdrawal of consent
• Website Analytics: Anonymised after 26 months
• Legal Documents: Retained as required by Dutch and EU law

Your Rights

Under GDPR and UK data protection law, you have the following rights regarding your personal data:

To exercise any of these rights, please contact us at privacy@hexadebazn.live. We will respond within one month of your request.

Cookies and Tracking

Our website uses cookies and similar technologies to enhance your experience and analyse website performance. For detailed information about our cookie usage, please see our Cookie Policy.

You can control cookie settings through your browser preferences or our cookie consent banner.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction:

• SSL encryption for data transmission
• Secure hosting and data storage systems
• Regular security assessments and updates
• Access controls and staff training
• Incident response and breach notification procedures

International Data Transfers

Your personal data is primarily processed within the European Economic Area (EEA). When we use service providers outside the EEA, we ensure appropriate safeguards are in place through:

• Adequacy decisions by the European Commission
• Standard Contractual Clauses (SCCs)
• Binding Corporate Rules where applicable
• Explicit consent for specific transfers

Contact Information

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us using the following information:

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you believe we have not handled your personal data appropriately.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. For significant changes, we may also provide additional notice through email or website notifications.