Privacy Policy
Last updated: September 2026
This policy explains what personal data we process when you visit this site or write to us, what we use it for, and what you can require from us. It is written to be understood: if anything is unclear, ask us.
1. Who processes your data
- Controller
- HACKLET LLC
- Tax ID (EIN)
- 38-4320297
- Address
- 407 Lincoln Road, Suite 708, Miami Beach, FL 33139, United States
- Privacy contact
- info@hacklet.org
2. What we process and on what legal basis
We only process the data you voluntarily give us through the forms, plus the technical logs any web server generates. That is all.
| Channel | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Contact form | Name, email address and the content of your message. Stored in our database as well as sent to our mailbox. | Answer your enquiry and, where relevant, prepare a proposal. | Pre-contractual steps taken at your request (Art. 6(1)(b) GDPR). | 24 months from the last contact, then deleted automatically. |
| Job application form | Name, email address, position applied for, portfolio link and your message. Stored in our database as well as sent to our mailbox. | Assess your application and contact you if there is a fit. | Pre-contractual steps taken at your request (Art. 6(1)(b) GDPR). | 12 months from receipt, then deleted automatically. |
| Submission metadata | The IP address and browser you submit either form from. | Detect and stop automated submissions, spam and form abuse. | Legitimate interest in the security of the service (Art. 6(1)(f) GDPR). | 90 days. After that they are erased and your message is kept without them. |
| Server logs | IP address, browser, requested page and timestamp. | Keep the service running and protect it from abuse. | Legitimate interest in the security of the site (Art. 6(1)(f) GDPR). | As per our hosting provider's retention policy. |
What we do not do, so that it is on the record:
- We do not sell or rent your data to anyone.
- We use no cookies, no analytics and no tracking pixels. Details in the Cookie Policy.
- We do not build profiles or take automated decisions with legal effects on you.
- We do not add you to any mailing list just because you wrote to us.
3. Who we share your data with
We do not disclose personal data to third parties for their own purposes. We do rely on the following providers, which process it on our behalf and solely to deliver their service to us:
- Contabo GmbH — our own server in Lauterbourg, France — hosting of the website and of the database.
- Our email provider — receipt and custody of the messages you send through the forms.
We may also have to disclose data to competent authorities where a law or a court order requires it.
4. International transfers
The website and the database holding your messages run on a server located in Lauterbourg, France, inside the European Union. Your data does not leave the EU to be stored.
HACKLET LLC, however, is a company incorporated in the United States, and the team reads those messages from outside the European Union in order to reply to you. That access is an international transfer not currently covered by an adequacy decision applicable to our situation, so we keep it to a minimum: the forms ask only for what we need to reply to you. If you would rather your enquiry stayed in a conventional email channel, write to us directly at info@hacklet.org.
5. Your rights
If you are in the European Union or the European Economic Area, the GDPR grants you the following rights over your data:
- Access: know what data of yours we hold and obtain a copy.
- Rectification: correct anything inaccurate or incomplete.
- Erasure: ask us to delete it once it is no longer needed.
- Restriction: ask us to keep it but stop using it while a dispute is resolved.
- Objection: object to processing we base on our legitimate interest.
- Portability: receive the data you gave us in a machine-readable format.
- Withdraw your consent at any time where processing is based on it, without affecting what was done before.
To exercise them, write to info@hacklet.org stating which right you wish to exercise. We will reply within one month. We will not charge you for it, nor treat you any differently for asking.
If you believe we have not handled your request properly, you can lodge a complaint with your country's supervisory authority. In Spain that is the Agencia Española de Protección de Datos (www.aepd.es).
6. United States residents
If you live in a state with its own privacy legislation, such as California, you have the right to know what categories of personal data we process, to request its deletion, and not to be treated differently for exercising those rights. We do not sell or share personal data for advertising purposes as the CCPA defines those terms. You can exercise your rights at the same address: info@hacklet.org.
7. Minors
This site is not directed at children under 16 and we do not knowingly collect their data. If we find that we have received data from a minor without the authorisation of their parent or guardian, we will delete it.
8. Security
The site is served entirely over HTTPS, the forms validate their input on the server before processing it, and our service credentials are held in environment variables, never in the code. Access to the mailbox that receives your messages is limited to the team members who need to read them.
No system is invulnerable. If you find a security problem on this site, we would be grateful if you told us at info@hacklet.org before making it public.
9. Changes to this policy
If we change how we handle data, we will update this page and the date at the top of the document. Material changes — a new provider, a new purpose — will also be announced on the site itself.
10. Contact
HACKLET LLC
407 Lincoln Road, Suite 708
Miami Beach, FL 33139, United States
info@hacklet.org