Privacy Policy – hotpotato

This Privacy Policy outlines how hotpotato collects, uses, and protects personal data in accordance with the General Data Protection Regulation (GDPR).

1. Who We Are

Hotpotato is a Belgian-based design and digital agency. For any privacy-related inquiries, contact us at hello@hotpotato.be.

2. What data do we collect

• Contact information (name, email, phone number, company)
• Project-related correspondence and files
• Billing and payment information
• Website usage (via cookies, analytics tools)

3. How We Use Your Data

• To manage client relationships and deliver our services
• To issue quotes, invoices, and manage contracts
• To respond to inquiries and communicate effectively
• For internal record-keeping and legal compliance

4. Legal Basis for Processing

We process data based on:

• Contractual necessity
• Legal obligations
• Legitimate interest
• Consent (e.g., newsletter sign-ups)

5. Sharing Data with Third Parties

We do not sell or rent personal data. We may share data with:

• Trusted service providers (e.g., hosting, payment platforms)
• Legal or regulatory bodies when required all partners are GDPR-compliant.

6. Data Retention

Personal data is retained as long as necessary for the purposes outlined above or as required by law (e.g., tax records).

7. Your Rights

You have the right to:

• Access your data
• Correct or delete your data
• Object to or restrict processing
• Lodge a complaint with the Belgian Data Protection Authority

To exercise your rights, contact us via hello@hotpotato.be

8. Security

We take appropriate technical and organizational measures to protect your data against unauthorized access, alteration, or loss.

9. Updates

This policy may be updated from time to time. The latest version will always be available on our website.

If you have questions about our Privacy Policy, please contact us.