Privacy

Last updated 2026-08-24

Who is responsible

This booking site is operated by Hextech Logistic, LLC, trading as MARS Music Services, 1800 Coral Way #450053, Miami FL 33145, United States. Hextech Logistic, LLC decides how the information described here is used and is the party you contract with when you book.

What is collected, and why

Only what a booking actually needs. Nothing here is bought from anyone or built from browsing you did elsewhere.

InformationWhyLegal basis
Name, email, phoneTo identify you, confirm the session and send remindersPerforming our agreement
Timezone, chosen time, guestsTo schedule the session and show it in your own hoursPerforming our agreement
Your answers on the booking formTo prepare for the session you paid forPerforming our agreement
Payment status and amountTo confirm the booking. Card numbers are handled by Stripe and never reach MARSPerforming our agreement
Consent record: time, IP, wording shownTo evidence the terms you accepted and any marketing permissionLegal obligation
Marketing preferenceOnly if you opted in. Withdrawable at any timeYour consent
How you reached the siteTo know which channels bring real bookingsLegitimate interest

Who else sees it

These providers process information on our behalf to run the service. They are not permitted to use it for their own purposes.

ProviderWhat they handleWhere
StripePayments and card data. MARS never receives your card numberUnited States
Microsoft 365Calendar entry and the Teams meeting for your sessionUnited States
ResendSending confirmations and remindersUnited States
SupabaseThe database holding your bookingUnited States
NetlifyHosting this siteUnited States
AnthropicDrafting your written summary. Only if you agreed to recording: the session transcript is sent to Anthropic to produce the first draft, which Hector then reviews before you see it. It is not used to train their models, and is deleted from their systems within 30 days, unless they are required to keep it longer to investigate a breach of their usage policy or to comply with the lawUnited States
TwilioSMS reminders, only if you gave a phone numberUnited States

Data is stored in the United States. If you are in the EEA, the UK, or Switzerland, that is an international transfer — see below for how it is covered.

Whether you have to give it

The name, email and session details are needed to form and carry out the booking contract — without them a session cannot be scheduled, billed, or a calendar invitation sent, so a booking cannot go ahead. Everything else, including a phone number and anything you write in a free-text field, is optional and a booking works without it. Marketing consent is always optional and never a condition of booking.

How long it is kept

Booking and payment records are kept for seven years, which is what tax and accounting rules require. Marketing preferences are kept until you withdraw them. If you ask to be erased, identifying details are removed and only the minimum needed to honour that request and meet those obligations remains.

Your rights

You can ask for a copy of what is held about you, ask for corrections, ask for erasure, withdraw marketing consent, or object to a use. Email us and we will respond within one month. Marketing consent can also be withdrawn from the link at the bottom of any marketing email, with no need to contact anyone. The section below sets these out in full — they are offered to everyone, not only to clients in Europe.

If you are in the EEA, the UK or Switzerland

The GDPR and UK GDPR apply to you, and MARS applies the same standard to everyone regardless of where they book — it is simpler to run and there is no good reason to offer a client in Bogotá less than one in Madrid. Hextech Logistic, LLC is the controller for this processing.

Your rights in full

  • Access — a copy of the personal data held about you
  • Rectification — correction of anything inaccurate or incomplete
  • Erasure — deletion, where no legal duty requires us to keep it
  • Restriction — pause our use of it while a dispute is resolved
  • Portability — the data you gave us, in a structured machine-readable file, sent to you or directly to another provider
  • Objection — to any processing based on legitimate interest, and to direct marketing at any time, with no reason required
  • Withdrawal — take back consent at any time, without affecting anything done before you did
  • Complaint — to your national supervisory authority, without going through us first

These are free. We answer within one month, and will tell you if a request is genuinely complex enough to need longer.

How the transfer to the United States is covered

Personal data reaches processors in the United States. Those transfers rely on the European Commission’s Standard Contractual Clauses, together with the UK Addendum where UK data is involved. Several of the providers listed above are additionally certified under the EU-US Data Privacy Framework, but the Clauses are the mechanism relied on here, because they remain valid independently of the Framework’s adequacy decision.

The Framework’s adequacy decision was upheld by the EU General Court in September 2025 and is under appeal to the Court of Justice. Relying on the Clauses means a change in that decision would not, on its own, leave these transfers without a legal basis.

Automated decisions

None are made about you. Nothing here profiles you or decides anything automatically that produces a legal or similarly significant effect. Bookings are accepted on availability, not on any assessment of you.

If something goes wrong

A personal data breach that presents a risk to you is reported to the relevant supervisory authority within 72 hours of us becoming aware of it, and you are told directly, without undue delay, where the risk to you is high.

Our representative in the European Union

Under Article 27 of the GDPR we have designated the following representative in the Union. You may contact them on any matter relating to how your personal data is handled, and supervisory authorities may address them in addition to, or instead of, us.

Natasha Paulette Idrovo Palacios
Santander, Cantabria, España
eu-rep@marsmusic.pro

Contacting us

Write to privacy@marsmusic.pro, or to Hextech Logistic, LLC, 1800 Coral Way #450053, Miami FL 33145, United States. There is no separate data protection officer; requests go to the same address and are handled by the company directly.

Cookies

What is stored on your device is covered separately. Cookie policy

Questions about any of this, or to exercise a right below: privacy@marsmusic.pro