Privacy Policy

1. Introduction

Inovasi GCV, trading as HYPERADVANCER ("we," "us," or "our"), respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you purchase or use our Longevity Events intelligence reports ("Services").

This Privacy Policy complies with the EU General Data Protection Regulation (GDPR) and Belgian data protection law.

2. Personal Data We Collect

2.1 Information You Provide

When you purchase our Services, we collect:

Contact Information:

• Full name
• Email address
• Billing address
• Phone number (optional)

Business Information (for B2B customers):

• Company name
• VAT number
• Business address

Payment Information:

• Payment card details (processed by Stripe, not stored by us)
• Billing address
• Transaction history

Communications:

• Email correspondence with our support team
• Feedback and survey responses

2.2 Information Collected Automatically

When you visit our website, we may automatically collect:

Technical Information:

• IP address
• Browser type and version
• Device type and operating system
• Referring website

Usage Information:

• Pages visited
• Time spent on pages
• Download activity
• Links clicked

Cookies and Similar Technologies:

See Section 9 for detailed cookie information.

2.3 Information from Third Parties

We receive information from:

Stripe (Payment Processor):

• Payment status
• Transaction details
• Fraud prevention data

EU VIES Database (for VAT validation):

• VAT number validity status
• Company name and address verification

2.4 Publicly Available Event Information

To compile our Reports, we source and process publicly available event information, including:

• Speaker names
• Professional titles
• Organisational affiliations
• Event programme details

This information is obtained from event websites, public event programmes, and other publicly accessible sources.

3. How We Use Your Personal Data

We process your personal data for the following purposes:

3.1 Contract Performance (Legal Basis: GDPR Article 6(1)(b))

• Processing your purchase and delivering Reports
• Managing your subscription (renewals, cancellations)
• Providing customer support
• Sending transactional emails (order confirmations, download links, receipts)

3.2 Legal Compliance (Legal Basis: GDPR Article 6(1)(c))

• VAT calculation and invoicing
• Financial record keeping (10 years as required by Belgian law)
• Fraud prevention
• Responding to legal requests

3.3 Legitimate Interests (Legal Basis: GDPR Article 6(1)(f))

• Improving our Services and website
• Analysing customer behaviour and preferences
• Fraud detection and prevention
• Protecting our intellectual property rights
• Internal business analytics
• Compiling market intelligence reports using publicly available event and speaker information

3.4 Consent (Legal Basis: GDPR Article 6(1)(a))

• Sending marketing communications (only if you opt in - see Section 10)
• Using non-essential cookies (only if you consent - see Section 9)
• Sharing your testimonial or feedback publicly (only with your permission)

You may withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

4. Who We Share Your Data With

We share your personal data only with trusted third parties who help us provide our Services:

4.1 Service Providers (Data Processors)

Stripe (Payment Processing):

• Purpose: Process payments, calculate VAT, generate invoices
• Data shared: Contact information, payment details, transaction history
• Location: Ireland (EU) and United States (EU-US Data Privacy Framework certified)
• Privacy Policy: https://stripe.com/privacy

Supabase/Lovable (Database Hosting):

• Purpose: Host website database and application backend
• Data shared: Purchase history, order information
• Location: European Union
• Privacy Policy: https://supabase.com/privacy

Google Workspace (Gmail) (Email Communications):

• Purpose: Send transactional emails (order confirmations, download links, invoices/receipts) and handle support and privacy requests
• Data shared: Name, email address, message content, attachments, and related metadata
• Location: European Union and United States (covered by Google's EU-US Data Privacy Framework certification and Standard Contractual Clauses)
• Data Processing Amendment: https://workspace.google.com/terms/09242021/dpa_terms/

4.2 Legal Obligations

We may disclose your personal data if required by law or in response to valid requests from public authorities (e.g., tax authorities, law enforcement).

4.3 Business Transfers

If we undergo a business sale, merger, or acquisition, your personal data may be transferred to the new owner. We will notify you before your data is transferred and becomes subject to a different privacy policy.

4.4 Third Parties We Do NOT Share With

We do NOT sell, rent, or trade your personal data to third parties for their marketing purposes.

5. International Data Transfers

Some of our service providers are located outside the European Economic Area (EEA), particularly in the United States.

Transfer Safeguards:

Stripe:

• Covered by EU-US Data Privacy Framework
• EU Standard Contractual Clauses in place

Google Workspace:

• Covered by EU-US Data Privacy Framework
• EU Standard Contractual Clauses via Google Workspace Data Processing Amendment

We ensure that all international data transfers comply with GDPR requirements through:

• Adequacy decisions by the European Commission
• Standard Contractual Clauses (SCCs)
• Binding Corporate Rules
• Explicit consent (where required)

6. How Long We Keep Your Data

We retain your personal data only as long as necessary for the purposes set out in this Privacy Policy or as required by law.

Retention Periods:

After Retention Period:

Data is securely deleted or anonymised so it can no longer identify you.

Exceptions:

We may retain data longer if required by law, ongoing legal proceedings, or if you have exercised your right to object to deletion (e.g., for accounting purposes).

7. Your Data Protection Rights

Under the GDPR, you have the following rights:

7.1 Right of Access (Article 15)

You can request a copy of all personal data we hold about you.

7.2 Right to Rectification (Article 16)

You can request correction of inaccurate or incomplete data.

7.3 Right to Erasure / "Right to be Forgotten" (Article 17)

You can request deletion of your personal data, except where we must retain it for legal compliance (e.g., invoices for tax purposes).

7.4 Right to Restriction of Processing (Article 18)

You can request that we limit how we use your data in certain circumstances.

7.5 Right to Data Portability (Article 20)

You can request your data in a structured, commonly used, machine-readable format (e.g., CSV, JSON) and transfer it to another service.

7.6 Right to Object (Article 21)

You can object to processing based on legitimate interests or for direct marketing purposes. We will stop processing unless we have compelling legitimate grounds.

7.7 Right Not to Be Subject to Automated Decision-Making (Article 22)

We do not use automated decision-making or profiling that produces legal effects concerning you.

7.8 Right to Withdraw Consent

Where processing is based on consent, you can withdraw consent at any time (e.g., unsubscribe from marketing emails).

How to Exercise Your Rights:

Email: privacy@hyperadvancer.com
Include: Your name, email address, and specific request

Response Timeframe:

We will respond within 1 month. For complex requests, we may extend this to 3 months and will inform you of the delay.

Right to Complain:

If you believe we have violated your data protection rights, you can lodge a complaint with:

8. Security Measures

We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.

Security Measures Include:

• Encryption of data in transit (HTTPS/TLS)
• Encryption of sensitive data at rest
• Secure payment processing through PCI DSS-compliant provider (Stripe)
• Two-factor authentication for admin accounts
• Access controls (limiting who can access customer data)
• Regular security updates and patches
• Secure backup procedures
• Employee training on data protection

Your Responsibility:

• Keep your account password secure (if applicable)
• Do not share login credentials
• Report suspected security breaches to privacy@hyperadvancer.com

Data Breach Notification:

In the event of a data breach likely to result in a high risk to your rights and freedoms, we will notify you without undue delay (within 72 hours where feasible) and inform the Belgian Data Protection Authority as required by law.

9. Cookies and Tracking Technologies

What Are Cookies?

Cookies are small text files stored on your device when you visit our website. They help us remember your preferences and understand how you use our site.

Cookie Categories:

9.1 Strictly Necessary Cookies

These cookies are essential for the website to function. They include:

• Session cookies (remember items in your cart)
• Authentication cookies (if applicable)
• Security cookies (prevent fraud)

Legal Basis: Legitimate interest (website functionality)
Consent Required: No

Note: Blocking strictly necessary cookies may prevent parts of our website from functioning properly.

9.2 Analytics Cookies

We use Google Analytics to understand how visitors use our website and improve user experience.

Cookies Set:

• _ga - Identifies unique visitors (2 years)
• _gid - Distinguishes users (24 hours)
• _gat - Throttles request rate (1 minute)

Purpose: Website usage analytics, page views, visitor behaviour

Third Party: Google LLC (United States)

Consent: These cookies are set only if you accept cookies via our consent banner.

Legal Basis: Consent (GDPR Article 6(1)(a))

Data Sharing: Analytics data is processed by Google in accordance with their Privacy Policy.

Your Rights:You can withdraw consent at any time by clearing your cookies or using the "Manage Cookies" option in the footer.

9.3 Marketing Cookies

We do not use marketing cookies or tracking pixels.

Managing Cookies:

You can control cookies through:

• Your browser settings (block or delete cookies)
• Browser "Do Not Track" settings

For information about cookies set by our payment processor (Stripe) during checkout, please see Stripe's Cookie Policy.

10. Marketing Communications

10.1 Current Marketing Practices

We do not send marketing emails and do not operate a marketing mailing list at this time.

10.2 Future Marketing Communications

If this changes in the future:

• We will request opt-in consent via a separate unticked checkbox or subscription form
• We will update this Privacy Policy to reflect our marketing practices
• You will have the right to unsubscribe at any time
• Marketing consent will be separate from transactional communications

10.3 Transactional Communications

You will continue to receive transactional emails (order confirmations, receipts, download links, support responses) as these are necessary for contract performance. These are not marketing communications and cannot be opted out of whilst you use our Services.

11. Children's Privacy

Our Services are not directed at children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately at privacy@hyperadvancer.com and we will delete it.

12. Third-Party Websites

Our website may contain links to third-party websites (e.g., event organiser websites, payment processors). We are not responsible for the privacy practices of these websites. We encourage you to read their privacy policies before providing personal information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements.

Notification of Changes:

• Updated policy posted on our website with new "Last updated" date
• Email notification to customers if changes are material
• For subscribers: notification before renewal if changes affect subscription terms

Continued Use:

Your continued use of our Services after changes take effect constitutes acceptance of the updated Privacy Policy.

The version of the Privacy Policy that applied to your purchase is the version that was effective on your purchase date. We maintain the effective date and last updated date so you can prove which version applied to your order.

Previous Versions:

We maintain an internal archive of previous versions with effective dates for reference and compliance purposes.

14. Contact Us

For Privacy Questions or to Exercise Your Rights:

Data Protection Officer:

We have not appointed a Data Protection Officer as we are a small business and our processing activities do not require one under GDPR Article 37.

Response Timeframe:

We aim to respond to all privacy requests within 1 month (extendable to 3 months for complex requests).

Language: This Privacy Policy is provided in English.
Version: 1.0
Last updated: 23 January 2026
Effective date: 23 January 2026