Privacy Policy

HechoX (hereinafter "we", "our" or "the company") is committed to protecting the privacy of personal data of our users, clients, and visitors to the website hechox.com. This policy describes how we collect, use, store, and protect your personal information when you use our services or visit our website.

We collect the following types of personal data: Identification data: full name, email address, phone number or WhatsApp. Browsing data: IP address, browser type, pages visited, time spent, and referral source. Service data: information necessary for the provision of contracted services, such as company data, procedure-related documentation, and tax information. Scheduling data: date, time, and details of appointments scheduled through our booking platform.

We use your personal data to: Provide the requested services (procedures, compliance, operations). Communicate with you about the status of your services. Send relevant information about our services, only if you have given your consent. Improve the browsing experience on our website. Comply with applicable legal and regulatory obligations. Generate anonymous statistics about the use of our services.

The processing of your data is based on: Your explicit consent when providing us with your data. The execution of a contract or service you have requested. Compliance with applicable legal obligations. Our legitimate interest in improving our services, provided that your fundamental rights and freedoms do not prevail.

We do not sell, rent, or share your personal data with third parties for commercial purposes. We may share your data only in the following cases: With service providers who assist us in operations (scheduling platforms, email services), who are contractually obligated to protect your information. When required by law, court order, or competent authority. With your express consent for a specific purpose.

We retain your personal data only for as long as necessary to fulfill the purpose for which it was collected. Active client data: during the term of the business relationship and up to 5 years after its termination, as required by legal obligations. Contact and prospect data: up to 2 years from the last contact, unless you request deletion sooner. Browsing data: up to 12 months.

You have the right to: Access your personal data and obtain a copy. Rectify inaccurate or incomplete data. Request deletion of your data when it is no longer necessary for the purpose for which it was collected. Object to the processing of your data in certain circumstances. Request restriction of processing. Data portability in a structured format. To exercise any of these rights, contact us through the means indicated in the contact section.

Our website uses cookies and similar technologies for: Essential cookies: necessary for the website to function (language preference, session). Analytical cookies: help us understand how visitors interact with the site (Google Analytics, Vercel Analytics). You can configure your browser to reject cookies, although this may affect the functionality of the site.

We implement technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or destruction. These measures include data encryption in transit (HTTPS/TLS), restricted access control to personal data, storage on platforms with recognized security certifications, and periodic review of our security practices.

Our services are not directed at individuals under 18 years of age. We do not knowingly collect personal data from minors. If we discover that we have collected data from a minor, we will proceed to delete it immediately.

We reserve the right to update this privacy policy at any time. Any changes will be posted on this page with the corresponding update date. We recommend reviewing this policy periodically.