Privacy Policy

ℹ

This document describes how HEKA collects, uses and protects your personal data, in compliance with Ecuador's Organic Law on Personal Data Protection (LOPDP). For information about how we use cookies, please read our Cookie Policy →

Data controller Personal data we collect Purpose of processing Legal basis Data retention Your rights Minors International transfers Changes to this policy Contact

01 / Controller

Data Controller

The controller responsible for personal data collected through this website is:

Company: HEKA S.A. — Global Legal Strategy
Tax ID (RUC): [Número de RUC]
Address: Edificio MOKAI, Paúl Rivet N30-54 piso 7, Quito, Ecuador
Privacy email: privacidad@heka.com.ec
Phone: +593 2 500 1120

02 / Data

Personal data we collect

We may collect the following data depending on your interaction with the site:

Identification data: name, surname, national ID or passport number.
Contact data: email address, phone number, postal address.
Browsing data: IP address, browser type, pages visited, session duration.
Transaction data: history of contracted services (full card data is never stored).
Technical data: device identifiers, cookies, session tokens.

⚠

We never request sensitive data such as passwords by email, nor complete financial details.

03 / Purpose

Purpose of processing

To handle your enquiry or request for legal services.
To send service-related communications (confirmations, alerts).
To send marketing communications only with your prior consent.
To analyse site usage and improve user experience.
To comply with legal obligations in force in Ecuador.
To prevent fraud and ensure site security.

04 / Legal basis

Legal basis for processing

Consent: for non-essential cookies and marketing communications.
Contract performance: to manage requested legal services.
Legal obligation: to comply with the LOPDP and other Ecuadorian regulations.
Legitimate interest: to prevent fraud and improve security.

✓

We comply with the Organic Law on Personal Data Protection (LOPDP) of Ecuador, in force since 2021.

05 / Retention

Data retention

Client data: for the duration of the relationship and up to 5 years after its end.
Transaction data: 7 years in accordance with SRI tax obligations.
Browsing data: up to 25 months.
Marketing: until you withdraw your consent.
Security logs: 12 months.

06 / Your rights

Your rights over your data

Under Ecuador's LOPDP, you have the right to:

👁

Access

Know what data we hold about you and obtain a copy.

✏

Rectification

Correct inaccurate or incomplete data.

🗑

Erasure

Request deletion when data is no longer necessary.

🚫

Objection

Object to processing for certain purposes.

⏸

Restriction

Restrict processing in certain circumstances.

📦

Portability

Receive your data in a structured, readable format.

To exercise any of these rights, send a request to privacidad@heka.com.ec with a copy of your identity document. We will respond within a maximum of 15 business days.

07 / Minors

Minors

This website is not directed at persons under 18 years of age. We do not knowingly collect personal data from minors without verifiable parental or guardian consent. If we detect data from a minor collected without consent, we will delete it immediately.

08 / Transfers

International transfers

Some service providers (Google Analytics, Meta, Stripe) may transfer data to servers outside Ecuador. These transfers are carried out with appropriate safeguards: contracts with standard protective clauses and adherence to international privacy frameworks.

09 / Changes

Changes to this policy

We may update this policy periodically. When we make significant changes, we will notify you via a notice on the website and/or by email. The "Last updated" date at the top of this document will be revised with each update.

10 / Contact

Contact and enquiries

🛡

Data Protection Officer

We are committed to protecting your privacy. Contact us for any queries.

✉ privacidad@heka.com.ec ☎ +593 2 500 1120 📍 Quito, Ecuador ⏱ Mon–Fri 9:00–18:00

← Back to home 🍪 Cookie Policy