HEY KAY complies with all applicable national and EU legal regulations regarding data protection, privacy, and information security.

Under its Personal Data Protection and Information Security System, HEY KAY seeks to ensure legal compliance and demonstrate institutional accountability by implementing all necessary technical and organizational measures required by the current legal framework.

Within this scope, HEY KAY also assumes a commitment to the confidentiality and secrecy of the personal data for which it is the data controller, ensuring compliance with all applicable confidentiality regulations, and requiring the same from its employees and service providers. This includes adopting behaviors and measures that ensure compliance and that persons authorized to process personal data are bound by confidentiality agreements or appropriate legal obligations.

Personal Data: Information related to an identified or identifiable natural person (data subject). A person is identifiable if they can be identified, directly or indirectly, by reference to an identifier such as a name, ID number, location data, electronic identifier, or characteristics of their identity (physical, physiological, genetic, mental, economic, cultural, or social).

Processing: Any operation or set of operations performed on personal data, whether automated or not, such as collection, recording, organization, structuring, storage, adaptation, retrieval, consultation, use, disclosure, dissemination, interconnection, restriction, erasure, or destruction.

Cookies: Small text files with relevant information stored on the user’s device (computer, phone, or tablet) through the internet browser when visiting a website.

AQUELA KOMBUCHA UNIPESSOAL LDA, headquartered at R. Dona Amélia Moutinho Alves 775, 4425-642 Pedrouços, Portugal, registered under tax number 515.030.384, and hereinafter referred to as HEY KAY, is the controller for the website www.drinkheykay.com and other online channels or applications through which users or customers access its products.

To exercise rights or submit inquiries, users may contact HEY KAY at hi@drinkheykay.com, stating the request and providing an email address, phone number, or mailing address for response.

HEY KAY processes only the personal data strictly necessary to provide information and operate its channels, as per user interaction.

Such data is collected directly from users or customers when registering or requesting information.

Some features may require processing personal identifiers (name, address, contacts, device IP, or location), subject to the user's express consent.

Data is processed digitally, sometimes automatically (e.g., profiling), under pre-contractual, contractual, or post-contractual relationships in compliance with EU and national laws.

Data may include: full name, tax number, civil ID, birthdate, address, zip code, country, phone number, and email address, among others necessary for access to certain functionalities.

All processing activities respect the principles of lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, and confidentiality. HEY KAY is committed to demonstrating accountability to data subjects and relevant authorities.

Processing is always based on a legal basis, including:

Consent of the data subject;

Contractual necessity or pre-contractual steps;

Legal obligation;

Legitimate interest of HEY KAY or third parties

Personal data is used for:

Providing information;

Delivering contracted services;

Managing customer relationships;

Statistical purposes;

Marketing and promotional campaigns (with prior consent)

Users can opt out of data use for marketing at any time by emailing HEY KAY.

Personal data is retained only as long as necessary for the stated purposes, in compliance with legal requirements.

HEY KAY uses cookies in accordance with its Cookie Policy available at www.drinkheykay.com.

Data may be processed by third-party processors, including non-EU entities, only when they offer sufficient guarantees of security and compliance, formalized via contract.

Unless required by law, data will not be shared with any third parties other than legitimate subcontractors.

Data transfers outside the EU are made only under strict compliance with legal frameworks ensuring protection.

HEY KAY applies technical and organizational security measures based on:

Risk assessment;

Advanced technologies;

Data sensitivity;

Cost effectiveness;

Measures include protections against unauthorized access, data breaches, loss, or misuse.

Users are responsible for keeping access credentials secure and following best practices regarding device and application safety.

Subcontractors must also adopt adequate organizational and technical security measures.

Users can exercise their rights to:

Access;

Rectify;

Erase;

Restrict;

Portability;

Object to processing

Requests should be submitted in writing to HEY KAY, using the contact below.

Users may file:

Complaints via the Complaints Book or with the relevant authority;

Suggestions by email to hi@drinkheykay.com;

In case of a personal data breach, users should contact HEY KAY at the same email.

HEY KAY may update this policy at any time. Updates will be published in its official channels to ensure transparency.

Submitting personal data implies full awareness and acceptance of this policy and serves as express consent for processing as described herein.

For any privacy-related issues or to exercise your rights, contact HEY KAY at:
📧 hi@drinkheykay.com