Privacy Policy

1. Who we are

AskHector is a concierge and property-assistant service operating in Marbella, Fuengirola, Mijas, Benalmádena and Estepona (Málaga, Spain). For any privacy question or request, contact:
Email: Alicja@askhector.es
WhatsApp: +34 634 791 738

2. What we collect

• Contact details you give us (name, email, phone) when you contact us or buy an hours package.
• Payment data processed by Stripe — we never see or store your full card number, expiry or CVC. We receive only the payment confirmation, the last 4 digits and your billing email.
• Service notes needed to deliver concierge work (e.g. property address, access instructions, errands requested).
• Account data if an admin account is created (email, hashed password).
• Basic technical data (cookies, language preference) — see Cookies below.

3. Why we use it (legal basis)

• Contract — to deliver the concierge services you've paid for and track hours used.
• Legal obligation — to keep invoicing and tax records under Spanish law.
• Legitimate interest — to reply to your enquiries and secure our website.
• Consent — for optional cookies (you can withdraw any time).

4. Who we share it with

We only share what's strictly needed, with the following processors:

• Stripe — payment processing (PCI-DSS Level 1 certified).
• Supabase / Lovable Cloud — secure hosting of our database and backend.
• Email provider — to deliver receipts and replies.

We do not sell your data, and we don't use it for third-party advertising.

5. How long we keep it

Booking and invoicing data is kept for the period required by Spanish tax law (currently up to 6 years). Marketing or enquiry data is deleted within 24 months of last contact, or sooner on request.

6. Your rights (GDPR)

You have the right to:

• Access a copy of your data
• Correct anything that's wrong
• Ask us to delete it ("right to be forgotten")
• Object to or restrict how we use it
• Receive it in a portable format
• Withdraw consent at any time
• Lodge a complaint with the Spanish AEPD (aepd.es)

To exercise any right, email Alicja@askhector.es. We reply within 30 days.

7. Cookies

We use only essential cookies (session, language preference, cookie consent). No third-party advertising or tracking cookies are set without your consent.

8. Security

Data is stored on encrypted European servers with row-level access controls. Payment data is handled entirely by Stripe. We follow industry best practices but cannot guarantee absolute security.

9. Changes

We may update this page from time to time. The "Last updated" date at the top reflects the most recent change.