Privacy Policy
1. Introduction
Data Controller: Teepee Limited trading as HRA Global (“we,” “us”) operates https://hra-global.com.
This policy explains how we collect, use, and protect your personal data under the EU General Data Protection Regulation (GDPR).
- Contact: info@hra-global.com
- Data Protection Officer (DPO): info@hra-global.com
2. Data We Collect and Legal Basis
We process data based on consent, contractual necessity, or legitimate interests:
| Data Type | Purpose | Legal Basis |
|---|---|---|
| Comments (name, email) | Spam detection, public display | Consent |
| Media (images) | Website functionality | Legitimate interests |
| Contact form submissions | User inquiries | Contractual necessity |
| Cookies | Login persistence, analytics | Consent |
Embedded content (e.g., videos, social media) may collect data if you interact with it. We require all third parties (e.g., YouTube, Twitter) to comply with GDPR prior-consent rules.
3. Data Retention
- Comments: Retained indefinitely to auto-approve follow-ups.
- User profiles: Stored until account deletion.
- Contact form data: Deleted after 24 months.
- Backups: Encrypted and purged after 90 days.
4. Your Rights
You may:
- Access, correct, or delete your data.
- Request portability of your data (machine-readable format).
- Object to processing (e.g., direct marketing).
- Withdraw consent at any time (e.g., cookie preferences).
Requests are fulfilled within 30 days. Contact info@hra-global.com
5. Data Sharing and Transfers
- Third parties: Data shared only with GDPR-compliant services (e.g., spam detection tools).
- International transfers: Data processed within the EU/EEA. Non-EU transfers use Standard Contractual Clauses (SCCs)
6. Security and Breach Protocols
- Protections: Encryption (AES-256/TLS 1.3), access controls, and regular audits.
- Breaches: Reported to authorities within 72 hours. Users notified if high-risk
7. Cookies
- Essential cookies (login, security) are always active.
- Non-essential cookies (analytics, marketing) require explicit opt-in via granular consent categories. Consent lasts 12 months and is documented
8. Policy Updates
Changes will be communicated via website notice or email. Review this policy periodically.
This policy supersedes all prior versions and complies with GDPR (2018) and 2025 amendments.
Updated : July 22, 2025.
