Privacy Policy

At HICARI, we take the protection of your personal data very seriously. This policy describes how we collect, use, share, and protect your information when you use our platform, in compliance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD).

1. Data controller identity

Trading name: HICARI
Company: HICARI BRAND S.L.
NIF/CIF: B22789945
Address: Calle Marcenado 46, 28002 Madrid (Spain)
Email: hola@hicari.io
WhatsApp: +34 694 269 351

2. What personal data do we collect?

We may collect and process the following categories of data:

Identifiers: first name, last name, email address, username.
Access data: encrypted passwords, login history.
Activity on the platform: portfolios, briefs, delivered content, messages.
Billing data: banking information, tax details, invoices and payments.
Consents: authorisations for sending commercial communications.
Cookies and browsing data, in accordance with our Cookie Policy.

3. Purposes of processing

We collect and process your data for the following purposes:

Manage and facilitate the use of HICARI.
Enable connection between brands and creators.
Carry out administrative, tax, and accounting activities.
Send informational communications or promotions (subject to consent).
Improve the platform through statistical analysis and usability.
Ensure security and prevent fraud.

4. Legal basis for processing

The legal basis for processing is based on:

Performance of the contract (use of the platform).
Express consent of the user (for commercial mailings).
Legitimate interest of the controller (security, improvement, and prevention).

5. Data sharing and disclosure

We will not share your data with third parties, except:

When it is necessary to provide the service (for example, payment platforms, hosting, accounting).
When there is a legal obligation.
In the case of international providers, we ensure compliance with the GDPR through data protection agreements.

6. International transfers

We do not transfer data outside the European Economic Area (EEA). If this is necessary, we will ensure that an adequate level of protection is in place, such as standard contractual clauses or similar mechanisms

7. Data retention

The data required for the contractual relationship will be kept while that relationship is active and during the legally required periods.
The data used for commercial communications will be kept until you withdraw your consent.
After that, they will be securely deleted or anonymized.

8. Your user rights

As a user, you can exercise the following rights:

Access to your personal data.
Rectification of inaccurate or incomplete data.
Erasure of your data when it is no longer necessary.
Restriction of processing in specific circumstances.
Objection to processing in accordance with your situation.
Data portability of your data to another service.
Withdrawal of consent at any time.

To exercise these rights, write to: hola@hicari.io and include a copy of your ID card (DNI) or another identifying document.

9. Security measures

HICARI adopts technical and organizational measures to ensure the confidentiality, integrity, and availability of your data, preventing unauthorized access and misuse.

10. Policy changes

We may update this policy at any time. If the changes significantly affect processing or your rights, we will notify you in advance via a prominent message.