Heijō - Privacy Policy (EU/GDPR)

1. Who We Are (Controller)

Controller: William Campbell
Address: Berlin, Germany
Email: support@heijo.io
DPO Contact: N/A

2. What Data We Collect

• Contact Data: email address (e.g., waitlist).
• Usage Data: basic event logs, device/browser information, and pages visited (only if analytics is enabled).
• Communications: messages you send to us (support, feedback).

3. Why We Process Your Data (Purposes & Legal Bases)

We process your data for:

• Waitlist and communications (Art. 6(1)(b) GDPR – contract or pre‑contractual steps).
• Product updates and newsletters (Art. 6(1)(a) GDPR – consent).
• Site security, prevention of abuse, and service improvement (Art. 6(1)(f) GDPR – legitimate interests, balancing your rights).

4. Cookies & Similar Technologies

We currently use only essential cookies necessary for site operation. If we add analytics or marketing cookies later, we will ask for consent via a cookie banner and update this policy.

5. Who Receives Your Data (Processors)

We may share data with trusted service providers acting as processors (e.g., hosting, email, analytics). They process data on our instructions and under data processing agreements. We do not sell your personal data.

6. International Transfers

If data is transferred outside the EU/EEA, we use appropriate safeguards (e.g., EU Standard Contractual Clauses) and evaluate local laws and practices.

7. Data Retention

We retain personal data only as long as necessary for the purposes described, unless a longer retention is required by law. Waitlist emails are retained until you unsubscribe or we delete inactive records.

8. Your Rights (EU/EEA)

You have the right to: access, rectification, erasure, restriction, portability, and objection to processing (including objection to processing based on legitimate interests).

You may also withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

To exercise rights: contact us at support@heijo.io.

9. Complaints

You have the right to lodge a complaint with a supervisory authority. In Germany, you can contact your state data protection authority (Landesdatenschutzbehörde). A list is available from the Federal Commissioner for Data Protection and Freedom of Information (BfDI).

10. Children's Data

Our Services are not directed to children under the age required by local law. We do not knowingly collect data from children.

11. Security

We implement appropriate technical and organizational measures to protect personal data, proportionate to risk.

12. Changes to this Policy

We may update this policy. We will indicate the "Last updated" date and, where appropriate, notify you of material changes.

13. Contact

William Campbell - Berlin, Germany - support@heijo.io