Privacy Policy
Last updated: July 10, 2025
At jorgehi.com, operated by Jorge Hernández Ibáñez, your privacy is of the utmost importance. This Privacy Policy outlines how we collect, use, store, and protect your personal data when you use our website, purchase our digital products, or register for our online services. This Privacy Policy applies to all visitors, users, and customers of jorgehi.com, and is written in compliance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and other applicable data protection laws.
1. WHO WE ARE
- • Controller: Jorge Hernández Ibáñez
- • Website: https://jorgehi.com
- • Contact Email: info@jorgehi.com
- • Jurisdiction: Spain, European Union
2. WHAT DATA WE COLLECT
We may collect and process the following categories of personal data:
a) Account Information
- • Name
- • Email address
- • Encrypted password (if registering with email/password)
- • OAuth identifiers (if registering via Google or other third-party providers)
b) Purchase and Payment Information
- • Purchase history
- • Invoice details
- • Country and VAT information (if applicable)
⚠️ Note: Payment details such as credit card numbers are not stored by us. Payments are securely processed through Paddle, our authorized reseller and Merchant of Record.
c) Usage and Interaction Data
- • Pages visited and course progress
- • IP address and device type
- • Login timestamps
d) Support Communications
Any data voluntarily submitted via email to our support address (info@jorgehi.com), including bug reports or refund requests.
3. HOW WE COLLECT DATA
We collect data through the following means:
- • When you register on the website (email/password or via Google).
- • When you make a purchase via Paddle.
- • When you interact with the site (e.g., completing courses, accessing tools).
- • When you communicate with us via email.
4. LEGAL BASES FOR PROCESSING
We rely on the following legal bases under the GDPR:
- • Performance of a contract (e.g., fulfilling your order).
- • Consent (e.g., opting in to a newsletter, using Google login).
- • Legitimate interests (e.g., improving the site, fraud prevention).
- • Compliance with legal obligations (e.g., tax record keeping).
5. THIRD-PARTY SERVICES
We use the following external services that may process your personal data on our behalf:
a) Supabase
Purpose: User authentication, account management, and storage of progress data.
Location: EU-based hosting or global infrastructure with GDPR compliance.
More info: https://supabase.com/privacy
b) Paddle
Purpose: Payment processing, VAT handling, and invoicing.
Role: Paddle acts as the Merchant of Record and independently collects and processes payment information.
More info: https://www.paddle.com/legal/privacy
c) Google (OAuth login)
Purpose: Authentication for user sign-in.
Data shared: Email, public profile (name, avatar).
You can revoke access via your Google account settings at any time.
d) Video Streaming Providers (YouTube, Vimeo, and others)
Purpose: Hosting and streaming of video content for courses and portfolio demonstrations.
Data processing: When you view embedded videos, these providers may collect data including IP address, viewing behavior, and device information according to their own privacy policies.
Control: We do not control the data collection practices of video hosting services. Users should review the privacy policies of these providers directly.
Privacy policies: YouTube (Google): https://policies.google.com/privacy | Vimeo: https://vimeo.com/privacy
We do not sell or share your personal data with any third parties for marketing purposes.
6. HOW WE USE YOUR DATA
We use your personal data to:
- • Create and manage your account.
- • Deliver your purchased products and track course progress.
- • Provide customer service and respond to inquiries.
- • Generate invoices and comply with tax regulations.
- • Monitor and improve website functionality and security.
7. DATA STORAGE AND SECURITY
- • Your data is stored securely using Supabase, which implements strong encryption both in transit (TLS) and at rest.
- • We follow industry-standard practices to protect your personal information against loss, misuse, unauthorized access, alteration, or destruction.
- • Access to your data is restricted to only those individuals who require it to provide the services you request.
8. DATA RETENTION
We retain your personal data only as long as necessary:
- • For account-related information: as long as your account remains active.
- • For legal, tax, and accounting obligations: typically 6 years, unless otherwise required by law.
- • For support and correspondence: up to 12 months unless required longer for legal defense.
You may request deletion of your account and associated data at any time (see Section 10).
9. COOKIES AND TRACKING
- • Our site uses essential cookies for authentication and user experience. We do not use third-party advertising cookies.
- • For analytics, we may use privacy-friendly tools that do not store personally identifiable information or require cookie consent under EU law.
10. YOUR RIGHTS UNDER GDPR
You have the right to:
- • Access your personal data.
- • Rectify inaccurate or incomplete data.
- • Request erasure ("right to be forgotten").
- • Restrict or object to processing in certain cases.
- • Data portability, where applicable.
- • Withdraw consent at any time (e.g., from email subscriptions or Google login).
- • Lodge a complaint with a supervisory authority (e.g., AEPD in Spain).
To exercise these rights, contact us at: 📧 info@jorgehi.com
11. CHILDREN'S PRIVACY
Our services are not intended for children under 16 years old. We do not knowingly collect personal data from children. If you believe we have done so, please contact us to request deletion.
12. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time. Changes will be published on this page and become effective immediately upon posting. We encourage you to review it periodically.
13. CONTACT INFORMATION
If you have any questions about this Privacy Policy or wish to exercise your rights, contact:
Jorge Hernández Ibáñez
📧 info@jorgehi.com