Privacy Policy

A LEGAL DISCLAIMER

Last updated: 10/04/25

At hejj.io (“we”, “us”, or “our”), we take your privacy seriously. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website and services.
By using our services, you agree to the terms of this policy.

1. Who We Are

hejj.io is a company registered in Belgium, with its registered office at Nelson Mandelaplein 2, 8500 Kortrijk.
We are the data processor for information entered into our platform by our customers, and the data controller for data we collect about website visitors and users of our platform (e.g., admin accounts).
If you have any questions, you can contact us at [Email Address].

2. What Data We Collect

We may collect and process the following categories of personal data:

a. Data you provide directly:

Name, email address, job title
Company name and billing information
Account login credentials

b. Data entered by customers:

As part of our Services, our customers may input employee-related information into the platform. This may include:

Employee names and emails
Feedback and performance review data
Team structures and roles

We process this data solely on behalf of our customers, in line with our Data Processing Agreement (DPA).

c. Data we collect automatically:

IP address and browser/device info
Usage data (e.g. log-ins, feature use, click paths)
Cookies and similar tracking technologies (see section 6)

3. How We Use Your Data

We use personal data to:

Provide and maintain the Services
Communicate with you (e.g. onboarding, updates, support)
Improve our platform and user experience
Ensure platform security and compliance
Send relevant marketing communications (if you opt in)

We do not sell personal data to third parties.

4. Legal Basis for Processing

We rely on the following legal bases under GDPR:

Contractual necessity: to deliver our Services
Legitimate interest: for product improvement, security, and communication with business contacts
Consent: for optional marketing emails and cookie usage
Legal obligation: where required by law (e.g. accounting or tax compliance)

5. Data Sharing and Subprocessors

We may share data with trusted third-party service providers ("subprocessors") who help us deliver our Services. These include:

Cloud infrastructure providers (e.g. AWS, Google Cloud)
Email and notification tools
Analytics and support tools

All subprocessors are bound by data protection agreements and operate in compliance with GDPR.
A full list of our subprocessors is available upon request.

6. Cookies and Tracking
We use cookies to enhance site functionality and analyze usage. You can manage cookie preferences through your browser settings or via our cookie banner when visiting the site.

Types of cookies we use:

Essential: required for login and core functionality
Analytics: help us understand how users interact with the platform
Marketing (optional): used to deliver relevant content or ads

7. Data Retention

We retain personal data only as long as necessary:

Account and billing data: up to 7 years (for legal compliance)
Employee feedback data: as directed by our customers
Website usage data: typically 12–24 months

Customers may request deletion of platform data at any time.

8. Your Rights

As a data subject, you have the right to:

Access your personal data
Request correction or deletion
Object to or restrict processing
Withdraw consent (where applicable)
Data portability (in some cases)

To exercise your rights, contact us at legal@hejj.io.

You also have the right to lodge a complaint with your local data protection authority.

9. International Transfers

We primarily store data in the EU/EEA. If we transfer data outside the EU, we ensure adequate safeguards are in place (such as Standard Contractual Clauses or adequacy decisions).

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through our platform.

Privacy Policy

​