HQ Recovery

HQ RECOVERY — FULL GDPR PRIVACY POLICY

G-Castle Recovery Ltd t/a HQ Recovery

Company No. 764903

Email: team@hqrecovery.com

Website: www.hqrecovery.com

Last Updated: 19/11/2025

  1. Introduction

This Privacy Policy explains how G-Castle Recovery Ltd t/a HQ Recovery (“HQ Recovery”, “we”, “us”, “our”) collects, uses, stores and protects your personal data when you use our services.

  1. Data Controller

G-Castle Recovery Ltd t/a HQ Recovery

Company No. 764903

Email: team@hqrecovery.com

  1. What Personal Data We Collect
  2. Information You Provide:

– Name, Email, Phone, DOB (18+ verification), Emergency Contact, Waiver Consent, Booking Info, Communications.

  1. Payment Information:

Processed via Stripe (we do not store full card numbers).

  1. Automatically Collected Data:

IP, browser, device, cookies, analytics data (GA4, Meta Pixel, Hotjar, GHL/Hexona tracking).

  1. Special Category Data:

Confirmation of acceptance of Health Commitment Statement only.

  1. Legal Bases for Processing

Contract, Consent, Legitimate Interests, Legal Obligation.

  1. Special Category Data Basis

Explicit Consent — Article 9(2)(a).

  1. How We Use Your Data

Bookings, payments, confirmations, safety, support, marketing (consented), analytics.

  1. Automated Decision Making

We do not use automated decision-making.


8. Data Sharing & Processors

GoDaddy, WordPress, Hexona/GHL, Stripe, Google Analytics, Meta, Hotjar, SMS/Email providers.

 

9. International Transfers

Protected via DPF, SCCs, and supplementary measures.

 

10. Data Retention

Booking records, waivers — retained until deletion requested.

Payments — 6 years.

Marketing — until unsubscribed.

 

11. Age Policy

Services restricted to individuals aged 18+.

 

12. Your GDPR Rights

Access, rectification, deletion, restriction, objection, portability, withdraw consent.

 

13. Security Measures

SSL, 2FA, encrypted payments, controlled access, audits.

 

14. Cookies & Tracking

Used for analytics, advertising, UX. Cookie banner provided.

 

15. Data Subject Requests

Email team@hqrecovery.com. Response within 30 days.

 

16. Updates

We may update this policy periodically.

 

17. Contact

team@hqrecovery.com

G-Castle Recovery Ltd t/a HQ Recovery

Company No. 764903