Privacy Policy

We process personal data that you actively provide to us or that is technically required to operate this website and handle enquiries.

• Contact and briefing data such as name, email address, company, message or project description.
• Lead and booking metadata such as source page, language, CTA, booking intent, Calendly entry point and lead magnet interest.
• Technical data such as IP address, user agent, timestamps, server logs and necessary session or security cookies.
• Usage data from Vercel Analytics, including page views, referrers, device data and performance metrics in aggregated form.

When you submit a contact form, briefing form or lead magnet form, we store the submitted data in Supabase. Supabase is used as our backend and database provider so that we can reliably capture enquiries, avoid duplicates and track processing status.

We use Resend for notifications about new enquiries. Resend processes the required content and recipient data so that HARWAY Experience can be notified by email when contact requests are submitted.

The legal basis is Art. 6(1)(b) GDPR where processing is required for pre-contractual measures, and Art. 6(1)(f) GDPR for our legitimate interest in efficient handling and documentation of enquiries.

This website is hosted on Vercel. Vercel processes technical access data, server logs and security-related information to deliver the website, detect attacks and maintain performance.

Vercel Analytics is enabled. We use the collected data for technical reach and performance analysis of the website. The analysis is not used to create personal advertising profiles.

For discovery calls, we link to Calendly. If you book an appointment, Calendly processes the appointment, contact and calendar data you provide under its own responsibility or under the privacy terms that apply there.

For workshop bookings, we use Stripe Payment Links. If you open a payment link or make a payment, Stripe processes payment, billing, device and fraud prevention data under Stripe’s privacy terms.

Recipients of personal data are only the responsible people at HARWAY Experience and the technical service providers named above, where this is necessary for operation, communication, analysis, appointment booking or payment processing.

Some providers may process data outside the EU or EEA. Where required, we rely on appropriate safeguards, especially standard contractual clauses or equivalent protection mechanisms.

We retain personal data only for as long as necessary for the relevant purpose or as required by statutory retention duties. Contact and project enquiries are deleted when they are no longer needed for processing, unless contractual or documentation obligations require retention.

Under the GDPR, you have the right to access, rectification, erasure, restriction of processing, data portability and objection to certain processing activities. Where processing is based on consent, you may withdraw that consent at any time with effect for the future.

You also have the right to lodge a complaint with a competent data protection supervisory authority. For questions or requests, contact us at info@harwayexperience.com.

This privacy policy reflects the current state of the website, including Supabase, Resend, Vercel Analytics, Stripe Payment Links and Calendly. Last updated: April 2026.