1. Who we are
Haxtick Human Presence Pro is operated by César Tulio González F. (Haxtick), based in Spain. Contact: info@haxtick.com
2. What data we collect
We collect the following personal data only when you actively provide it:
- Order data — name, email, phone, shipping address, and payment reference when you place an order.
- Contact form data — name, email, phone, and message when you use the contact form.
- Analytics data — anonymised usage data (pages visited, scroll depth, clicks) via Google Analytics 4, only if you consent via the cookie banner.
We do not collect sensitive personal data, and we do not sell or share your data with third parties for marketing purposes.
3. Why we collect it (legal basis)
- Order processing — contract performance (Art. 6(1)(b) GDPR)
- Contact enquiries — legitimate interest in responding to your request (Art. 6(1)(f) GDPR)
- Analytics cookies — your explicit consent via the cookie banner (Art. 6(1)(a) GDPR)
4. Third-party services
- Stripe — payment processing. Your card data is handled entirely by Stripe and never touches our servers. Stripe Privacy Policy
- Supabase — order and lead data storage (EU region). Data is encrypted at rest.
- Resend — transactional email delivery (order confirmations, contact replies).
- Cloudflare — website hosting and DDoS protection. Cloudflare may process request metadata (IP address) as a processor. Cloudflare Privacy Policy
- Google Analytics 4 — website analytics, loaded only with your consent. Google Privacy Policy
5. Cookies
We use the following cookies:
| Cookie | Purpose | Consent required |
|---|
| haxtick_cookie_consent | Stores your cookie preference | No (functional) |
| _ga, _ga_* | Google Analytics — visitor tracking | Yes |
You can withdraw your cookie consent at any time by clearing your browser's local storage or cookies for haxtick.com.
6. Data retention
- Order data — retained for 5 years to comply with Spanish tax law.
- Contact form data — retained for 12 months or until your enquiry is resolved.
- Analytics data — retained for 14 months (Google Analytics default).
7. Your rights (GDPR)
As an EU resident you have the right to:
- Access — request a copy of your personal data
- Rectification — correct inaccurate data
- Erasure — request deletion of your data ("right to be forgotten")
- Portability — receive your data in a structured, machine-readable format
- Objection — object to processing based on legitimate interest
- Withdraw consent — at any time, for consent-based processing (analytics cookies)
To exercise any of these rights, email us at info@haxtick.com. We will respond within 30 days. You also have the right to lodge a complaint with the Spanish data protection authority (AEPD) at aepd.es.
8. Security
We implement appropriate technical measures to protect your data: HTTPS everywhere, encrypted database storage, API rate limiting, and restricted access to personal data. No method of transmission or storage is 100% secure, but we follow industry best practices.
9. Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top reflects the most recent revision. Continued use of haxtick.com after changes constitutes acceptance of the updated policy.