Privacy Policy

1. Controller

Hanlon Solutions OÜ, registry code 17231637, Pärnu mnt 139b, 11317 Tallinn, Estonia, is the controller. Write to us with privacy requests: ramon@hanlon.world. Text us on WhatsApp or Telegram (no voice calls): +34 690 764 499.

2. Data categories

Depending on use, Ramón processes account and contact details; language and settings; order, subscription, invoice and limited payment data; questions, messages, files, images, case data and outputs; data provided through Telegram, Mini App or an authorised Google Drive connection; support and rights requests; IP address, device/browser, security and storage data; and allowance usage and subscription dates.

Full card details are handled by the payment provider. Ramón receives transaction status and limited transaction information. Users should not submit third-party or special-category data unless necessary and lawfully authorised.

3. Purposes and legal bases

• Contract: accounts, answers, documents, allowances, subscriptions, support and refunds.
• Legal obligation: accounting, tax, consumer and regulatory records.
• Legitimate interests: security, abuse prevention, legal claims and reliability, subject to balancing.
• Consent: optional cookies, marketing or integrations where consent is required.

Data must not be used for third-party model training unless disclosed and supported by an appropriate legal basis. Actual provider settings must be recorded before publication.

4. Recipients and processors

Access is limited to staff and providers who need the data for their task. Categories may include Shopify and payment services, hosting, AI processing, Telegram, Google when Drive is connected, email/support, security and professional advisers.

The approved version must list every actual provider’s legal name, role, country, purpose, privacy or DPA link and transfer mechanism.

5. International transfers

Where data leaves the EEA, an applicable adequacy decision, Standard Contractual Clauses or another lawful safeguard is used, with supplementary measures where necessary. Actual countries and safeguards must be stated after the production architecture is verified.

6. Retention

Data is kept no longer than needed for the contract, support, security and mandatory legal periods. The final policy must give a concrete period or verifiable criterion for accounts, questions and files, Telegram, Google Drive, support, orders and invoices, logs and backups.

7. Your rights

Where GDPR conditions apply, users may request access, correction, deletion, restriction, portability, objection, withdrawal of consent and information on transfer safeguards. Requests go to ramon@hanlon.world; reasonable identity verification may be required.

Complaints may be lodged with the Estonian Data Protection Inspectorate or the authority of the user’s habitual residence, workplace or alleged infringement.

8. AI and automated processing

Ramón uses automated processing to prepare informational outputs. It must not be used by Hanlon Solutions OÜ to make a solely automated decision producing legal or similarly significant effects without separate disclosure, a lawful basis and required safeguards. Users make their own decisions and may contact support.

9. Security, incidents and changes

Proportionate technical and organisational controls are used, including access restrictions, transmission protection, backup and incident response. No method is absolutely secure. Authorities and affected people are notified of a personal-data breach where required by law.

The date and substance of material changes are shown on this page. Active customers receive additional notice where a change materially affects them.