Legal
Privacy Policy
How we handle personal data as a data controller, and your rights under the GDPR.
Last updated: 28 July 2026
1. Who we are
This Privacy Policy explains how HAKKIU ("HAKKIU", "we", "us") processes personal data when you visit https://hakkiu.com, request a demo, or use our brand-protection platform. HAKKIU is the data controller for the processing described here. Our registration and contact details are in our Legal Notice.
For data-protection matters you can contact us at privacy@hakkiu.com.
2. Controller vs. processor — two roles
We wear two hats. This policy covers data for which we are the controller: website visitors, demo/leads, marketing contacts, and customer account data. For personal data contained in the material our customers monitor and push through the platform (for example, data about alleged infringers or sellers), we act as a processor on our customer's behalf — that processing is governed by our Data Processing Agreement and the customer's own privacy notice.
3. Personal data we collect
- Website & analytics data — pages viewed, approximate location, device and browser information, and identifiers set by cookies (see our Cookie Policy).
- Demo / lead data — name, work email, phone, company, role, and the details you provide in the demo form.
- Account & authentication data — email, name, hashed credentials, and organization membership for platform users.
- Support & communications — the content of emails and messages you send us.
- Server logs — IP address, timestamps and technical logs used for security and reliability.
- Data collected indirectly — in delivering the service we process information from public marketplaces and the open web that may include personal data of third parties (e.g. seller or listing contact details). See section 9.
4. Why we process it and our legal basis
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Providing and operating the platform and accounts | Performance of a contract — Art. 6(1)(b) |
| Responding to demo requests and sales enquiries | Steps prior to a contract / legitimate interests — Art. 6(1)(b)/(f) |
| Security, fraud prevention, and service reliability | Legitimate interests — Art. 6(1)(f) |
| Analytics and product improvement | Consent (analytics cookies) / legitimate interests — Art. 6(1)(a)/(f) |
| Marketing emails to business contacts | Consent or legitimate interests — Art. 6(1)(a)/(f) |
| Complying with legal, tax and accounting obligations | Legal obligation — Art. 6(1)(c) |
Where we rely on legitimate interests, those interests are running and securing our business, understanding how our site is used, and protecting brands from online abuse. You can object to processing based on legitimate interests (see section 10).
5. Cookies and tracking
We use cookies and similar technologies, including Google Analytics 4. Non-essential cookies are only set with your consent. Full details, categories and durations are in our Cookie Policy.
6. Who we share data with
We share personal data with vetted service providers (sub-processors) that host our infrastructure, send our email, run AI analysis, and provide analytics. We do not sell your personal data. A current list of sub-processors, their purpose and location is on our Sub-processors page. Where takedowns are filed, we also share relevant information with the marketplaces, registrars or authorities that action them, on our customer's instruction.
7. International transfers
Some of our providers are located outside the European Economic Area (for example in the United States). Where personal data is transferred internationally, we rely on appropriate safeguards — the EU–US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses. You can request a copy of the relevant safeguard by emailing privacy@hakkiu.com.
8. How long we keep data
We keep personal data only as long as necessary for the purposes above: account data for the life of the account and a reasonable period afterwards; lead data for as long as we are in contact plus a limited follow-up window; logs for a short security-retention period; and records required by law (e.g. accounting) for the statutory period. Specific retention periods are available on request.
9. Data we did not collect from you (Art. 14)
To deliver brand protection, we process information from publicly accessible sources — online marketplaces (such as Amazon, Shopify, eBay and Alibaba) and other public websites. This may include personal data of sellers or others associated with potentially infringing listings. We process it on the legal basis of legitimate interests (protecting brands and consumers from counterfeiting and abuse) and, for customer-directed activity, as a processor under our DPA. If you are an individual whose data appears in our systems through this route, you have the rights in section 10, and you can contact us at privacy@hakkiu.com.
10. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased in certain circumstances;
- restrict or object to processing (including profiling);
- data portability;
- withdraw consent at any time, where processing is based on consent; and
- lodge a complaint with a supervisory authority — in our case the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija, VDAI) (https://vdai.lrv.lt/).
To exercise any right, email privacy@hakkiu.com. We respond within one month. If your data was submitted by one of our customers (we act as processor), we will refer you to that customer, who is the controller.
11. Automated decision-making and AI
Our platform uses AI (including image/vision analysis) to score and flag likely infringements. These scores support human review; HAKKIU does not use them to make decisions producing legal or similarly significant effects about individuals without human involvement. Customers remain responsible for verifying results and for any enforcement action they choose to take.
12. Security
We apply technical and organizational measures appropriate to the risk, including encryption in transit, access controls and EU-based hosting. More detail is on our Trust & Security page.
13. Children
Our service is a business tool and is not directed to children. We do not knowingly collect personal data from children.
14. US state privacy rights (e.g. California)
Depending on where you live, you may have additional rights under laws such as the California Consumer Privacy Act (CCPA/CPRA) — including rights to know, delete, correct, and opt out of the "sale" or "sharing" of personal information. We do not sell personal information. To exercise US state rights, contact privacy@hakkiu.com.
15. Changes to this policy
We may update this policy from time to time. We will change the "last updated" date above and, for material changes, provide additional notice. The current version always lives at https://hakkiu.com/legal/privacy.
16. Contact
HAKKIU — privacy@hakkiu.com. Postal and registration details are in our Legal Notice.