This policy explains how we handle personal data collected through usehector.com, under Regulation (EU) 2016/679 (GDPR) and Spain’s Organic Law 3/2018 on Data Protection and Digital Rights (LOPDGDD). It does not cover data processed inside the Hector platform on behalf of our clients, which is governed by our service terms and data processing agreement.
1. Data controller
Parrot Partners, S.L. (NIF B75733972), Calle Cristòfor Colom, 4-6, 43001 Tarragona, Spain. Email: legal@usehector.com.
2. What we collect
- What you send us: your name, email, company and message when you request a demo; and, on the gestorías form, your firm’s name, province, approximate fees and team size.
- Technical data: your IP address, browser and the pages requested, recorded by our hosting provider to deliver and protect the site.
Your name and email are needed to reply to you; without them we can’t answer your enquiry. The other fields are optional.
We don’t use advertising trackers, we don’t buy or sell personal data, and we don’t make automated decisions or build profiles.
3. Why we use it, and on what basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Replying to your enquiry or demo request | Steps taken at your request before a contract, Art. 6(1)(b); our legitimate interest in answering enquiries, Art. 6(1)(f) |
| Confidential conversations with gestoría owners about partnering with or joining Hector | Steps taken at your request before a contract, Art. 6(1)(b) |
| Keeping the site secure and working | Legitimate interest, Art. 6(1)(f) |
| Sending news about Hector, only if you ask for it | Consent, Art. 6(1)(a), which you can withdraw at any time |
| Meeting our legal obligations | Legal obligation, Art. 6(1)(c) |
4. Who receives it
Only service providers that help us run the site and reply to you, under data processing agreements as required by Article 28 GDPR: Cloudflare, Inc., which hosts the site and delivers form messages to our inbox, and the provider of that mailbox. Gestoría enquiries are seen only by Hector’s founders.
5. Transfers outside the EEA
Where a provider processes data outside the European Economic Area, the transfer relies on an EU adequacy decision, including the EU–US Data Privacy Framework, or on the European Commission’s Standard Contractual Clauses.
6. How long we keep it
| Data | Kept for |
|---|---|
| Enquiries and demo requests | Two years from our last contact, or until you ask us to delete them |
| Gestoría conversations that don’t go ahead | Two years from our last contact |
| Technical logs of the site | At most seven days |
| Records we must keep by law | For the period the law requires |
7. Your rights
You can ask to access, correct or delete your data, to restrict or object to how we use it, to receive it in a portable format, not to be subject to automated decisions, and to withdraw consent at any time (GDPR Articles 15 to 22 and LOPDGDD Articles 12 to 18). Write to legal@usehector.com; we’ll reply within one month.
If you think we haven’t handled your data properly, you can complain to the Agencia Española de Protección de Datos, C/ Jorge Juan 6, 28001 Madrid, www.aepd.es.
8. Security
We protect personal data with technical and organisational measures appropriate to the risk, and we will notify the AEPD of any personal data breach within 72 hours where the law requires it.
9. Minors
This site is meant for business owners and professionals. We don’t knowingly collect data from anyone under 18.
10. Changes
If we change this policy in a material way, we’ll say so on this page 30 days before the change takes effect.