Privacy
Last updated 2026-08-24
Who is responsible
This booking site is operated by Hextech Logistic, LLC, trading as MARS Music Services, 1800 Coral Way #450053, Miami FL 33145, United States. Hextech Logistic, LLC decides how the information described here is used and is the party you contract with when you book.
What is collected, and why
Only what a booking actually needs. Nothing here is bought from anyone or built from browsing you did elsewhere.
| Information | Why | Legal basis |
|---|---|---|
| Name, email, phone | To identify you, confirm the session and send reminders | Performing our agreement |
| Timezone, chosen time, guests | To schedule the session and show it in your own hours | Performing our agreement |
| Your answers on the booking form | To prepare for the session you paid for | Performing our agreement |
| Payment status and amount | To confirm the booking. Card numbers are handled by Stripe and never reach MARS | Performing our agreement |
| Consent record: time, IP, wording shown | To evidence the terms you accepted and any marketing permission | Legal obligation |
| Marketing preference | Only if you opted in. Withdrawable at any time | Your consent |
| How you reached the site | To know which channels bring real bookings | Legitimate interest |
Who else sees it
These providers process information on our behalf to run the service. They are not permitted to use it for their own purposes.
| Provider | What they handle | Where |
|---|---|---|
| Stripe | Payments and card data. MARS never receives your card number | United States |
| Microsoft 365 | Calendar entry and the Teams meeting for your session | United States |
| Resend | Sending confirmations and reminders | United States |
| Supabase | The database holding your booking | United States |
| Netlify | Hosting this site | United States |
| Anthropic | Drafting your written summary. Only if you agreed to recording: the session transcript is sent to Anthropic to produce the first draft, which Hector then reviews before you see it. It is not used to train their models, and is deleted from their systems within 30 days, unless they are required to keep it longer to investigate a breach of their usage policy or to comply with the law | United States |
| Twilio | SMS reminders, only if you gave a phone number | United States |
Data is stored in the United States. If you are in the EEA, the UK, or Switzerland, that is an international transfer — see below for how it is covered.
Whether you have to give it
The name, email and session details are needed to form and carry out the booking contract — without them a session cannot be scheduled, billed, or a calendar invitation sent, so a booking cannot go ahead. Everything else, including a phone number and anything you write in a free-text field, is optional and a booking works without it. Marketing consent is always optional and never a condition of booking.
How long it is kept
Booking and payment records are kept for seven years, which is what tax and accounting rules require. Marketing preferences are kept until you withdraw them. If you ask to be erased, identifying details are removed and only the minimum needed to honour that request and meet those obligations remains.
Your rights
You can ask for a copy of what is held about you, ask for corrections, ask for erasure, withdraw marketing consent, or object to a use. Email us and we will respond within one month. Marketing consent can also be withdrawn from the link at the bottom of any marketing email, with no need to contact anyone. The section below sets these out in full — they are offered to everyone, not only to clients in Europe.
If you are in the EEA, the UK or Switzerland
The GDPR and UK GDPR apply to you, and MARS applies the same standard to everyone regardless of where they book — it is simpler to run and there is no good reason to offer a client in Bogotá less than one in Madrid. Hextech Logistic, LLC is the controller for this processing.
Your rights in full
- Access — a copy of the personal data held about you
- Rectification — correction of anything inaccurate or incomplete
- Erasure — deletion, where no legal duty requires us to keep it
- Restriction — pause our use of it while a dispute is resolved
- Portability — the data you gave us, in a structured machine-readable file, sent to you or directly to another provider
- Objection — to any processing based on legitimate interest, and to direct marketing at any time, with no reason required
- Withdrawal — take back consent at any time, without affecting anything done before you did
- Complaint — to your national supervisory authority, without going through us first
These are free. We answer within one month, and will tell you if a request is genuinely complex enough to need longer.
How the transfer to the United States is covered
Personal data reaches processors in the United States. Those transfers rely on the European Commission’s Standard Contractual Clauses, together with the UK Addendum where UK data is involved. Several of the providers listed above are additionally certified under the EU-US Data Privacy Framework, but the Clauses are the mechanism relied on here, because they remain valid independently of the Framework’s adequacy decision.
The Framework’s adequacy decision was upheld by the EU General Court in September 2025 and is under appeal to the Court of Justice. Relying on the Clauses means a change in that decision would not, on its own, leave these transfers without a legal basis.
Automated decisions
None are made about you. Nothing here profiles you or decides anything automatically that produces a legal or similarly significant effect. Bookings are accepted on availability, not on any assessment of you.
If something goes wrong
A personal data breach that presents a risk to you is reported to the relevant supervisory authority within 72 hours of us becoming aware of it, and you are told directly, without undue delay, where the risk to you is high.
Our representative in the European Union
Under Article 27 of the GDPR we have designated the following representative in the Union. You may contact them on any matter relating to how your personal data is handled, and supervisory authorities may address them in addition to, or instead of, us.
Natasha Paulette Idrovo Palacios
Santander, Cantabria, España
eu-rep@marsmusic.pro
Contacting us
Write to privacy@marsmusic.pro, or to Hextech Logistic, LLC, 1800 Coral Way #450053, Miami FL 33145, United States. There is no separate data protection officer; requests go to the same address and are handled by the company directly.
Cookies
What is stored on your device is covered separately. Cookie policy
Questions about any of this, or to exercise a right below: privacy@marsmusic.pro