Privacy
Privacy policy
Effective: 17 Aug 2026
1. Data controller
H2O — Just Add Water Limited, registered address: Hong Kong S.A.R. — Ho King Comm Centre, 2–16, Flat 2304, 23/F, registration no.: 78671558-000-08-25-1, email: office@h2o.spot.
EU contact person (GDPR Art. 27): Kodolányi Endre, office@h2o.spot
2. What data do we process?
- Registration data: full name, email, phone number, company name, tax ID/registration number, company address
- Website content data: chat content, uploaded photos and documents
- Payment data: the fact and amount of the transaction — card details are handled by Mollie / Airwallex
- Technical data: IP address, browser data, cookie data
3. Purpose and legal basis of processing
| Data category | Purpose | Legal basis |
|---|---|---|
| Registration data | Performance of contract | GDPR Art. 6(1)(b) |
| Content, files | Building the website | GDPR Art. 6(1)(b) |
| Payment data | Billing | GDPR Art. 6(1)(c) |
| Analytics cookies | Statistics | GDPR Art. 6(1)(a) — consent |
4. Who has access to the data?
- Namecheap, Inc. (USA) — domain, hosting
- Anthropic — processing the chat (Claude API)
- OpenAI — image processing for logo generation
- Mollie / Airwallex — payment transactions
- Email delivery provider — transactional emails
5. Data retention
For the duration of the contractual relationship, and thereafter as required by applicable accounting/tax retention obligations.
6. Data subject rights
Access, rectification, erasure, restriction, data portability, objection, and the right to lodge a complaint with a supervisory authority or a court — contact office@h2o.spot.
7. Data security
Passwords are stored hashed, connections are protected with HTTPS, and access to account data is restricted via signed session authentication.