HECHIA · Legal
Privacy Policy
Last updated: 14 September 2026. This Privacy Policy explains how HECHIA processes personal information when people use the platform, request services, create accounts, communicate with professionals, or appear in professional directory listings.
Who is responsible for your data
The controller of the personal data described in this policy is Zhanna Grigorian, working as an autónomo registered in Spain, NIF Z1773152H, Avenida Pernet 26, ap. 215, 29688 Estepona, Málaga, Spain. To ask a question about this policy or to exercise any of your rights, write to info@hechia.com.
1. Information we collect
Depending on how you use HECHIA, we may process your name, username, email address, telephone number, account details, property or service information, quote and booking information, messages, technical information and other information you choose to provide.
2. How we use information
We use information to operate accounts, respond to enquiries, route service and quote requests, facilitate communications between customers and service professionals, administer listings, provide support, maintain platform security, prevent misuse and comply with applicable legal obligations.
3. Legal bases
Depending on the activity, processing may be necessary to perform a contract or take steps requested before entering into a contract, to comply with a legal obligation, on the basis of consent where required, or for legitimate interests pursued by HECHIA or a third party where those interests are not overridden by the rights and freedoms of the individual.
4. Professional and business directory listings
HECHIA may maintain profiles of companies, individual entrepreneurs and professional service providers relevant to the areas and services covered by the platform. A profile may be created from information supplied directly by the business or professional, or from publicly available professional and business sources such as an official business website, professional directory, public business profile or other source reasonably believed to be accurate.
For profiles that have not been claimed or confirmed by the business, HECHIA may display an Unverified label. An Unverified listing does not mean that HECHIA endorses, recommends, certifies or has a commercial relationship with that provider.
For unclaimed listings, HECHIA aims to limit information to data reasonably necessary to identify and describe the professional activity, such as business or trading name, service category, service area, professional contact information and a link to the provider’s public business presence. We do not intentionally use information relating to a professional in their private capacity for this purpose.
5. Information obtained from public or third-party sources
Where personal data relating to an individual entrepreneur, professional or business contact is obtained from a source other than that person, HECHIA processes such information in accordance with applicable data-protection law, including transparency obligations where they apply. The source may include the provider’s own website, a public professional profile or another publicly accessible business source.
Where HECHIA relies on legitimate interests for such processing, the interests pursued include maintaining a useful local directory, helping users identify relevant service providers, keeping business information accurate and enabling businesses to claim or correct their profiles. Individuals have the right to object to processing based on legitimate interests in circumstances provided by applicable law.
6. Claiming, correcting or removing a professional profile
A business owner, individual entrepreneur, professional or authorised representative may ask HECHIA to claim, correct, update or remove a profile. HECHIA may request reasonable information to confirm authority over the relevant business or profile before making certain changes.
7. Sharing information
Information relevant to a service or quote request may be shared with the professional or company handling that request. We may also use hosting, email, security, analytics, payment and marketplace technology providers where necessary to operate HECHIA. Such providers should process personal data only for authorised purposes and subject to applicable safeguards.
8. Retention
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including account administration, service requests, directory administration, dispute handling, security and legal or regulatory requirements. Retention periods may differ according to the type of information and the applicable obligation.
9. Your rights
Subject to applicable law, individuals may have rights to request access to, rectification or erasure of personal data, restriction of processing, data portability where applicable, and to object to certain processing. Where processing is based on consent, consent may be withdrawn without affecting processing already lawfully carried out. Individuals may also lodge a complaint with the competent data-protection supervisory authority.
10. International processing
Some technology providers may process information outside the European Economic Area. Where applicable, HECHIA will use a lawful transfer mechanism and appropriate safeguards required by data-protection law.
11. Security
HECHIA uses reasonable organisational and technical measures intended to protect personal information against unauthorised access, alteration, loss or disclosure. No online system can guarantee absolute security.
12. Contact and controller information
Requests concerning privacy, personal data or a professional listing should be sent using the contact details published by HECHIA. The final legal identity, registered address and dedicated privacy contact of the data controller must be inserted here before the platform’s public production launch.
This policy should be read together with the Terms of Use and any service-specific notices shown during account creation, booking or provider onboarding.