Data Protection Policy

Last updated: October 10, 2026

1. Introduction

HHmetrics, operated by Maquila360, S. de R.L. de C.V., is committed to protecting the personal data of all users of our Service. This Data Protection Policy outlines our principles for handling personal data and explains your rights in detail.

For information about what specific data we collect and why, please refer to our Privacy Policy. This page focuses on how we protect your data and how you can exercise your rights.

2. Data Protection Principles

We adhere to the following principles when processing personal data:

Lawfulness, fairness and transparency — We process personal data lawfully, fairly, and in a transparent manner. We clearly inform you about how your data is used.

Purpose limitation — We collect personal data only for specific, explicit, and legitimate purposes. We do not process data in ways incompatible with those purposes.

Data minimization — We collect only the personal data that is necessary for the stated purposes. We do not collect excessive or unnecessary information.

Accuracy — We take reasonable steps to ensure that personal data is accurate and kept up to date. You may request correction of inaccurate data at any time.

Storage limitation — We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law.

Integrity and confidentiality — We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or destruction. For Hand Lab, each user’s data is isolated from other users.

Accountability — We are responsible for demonstrating compliance with these principles and applicable data protection laws.

3. Your Rights

Depending on your location, you may have the following rights regarding your personal data. We honor these rights for all users regardless of jurisdiction.

3.1 Right of Access

You have the right to request a copy of all personal data we hold about you. We will provide this information in a clear and understandable format.

3.2 Right to Rectification

You have the right to request that we correct any personal data that is inaccurate or incomplete. We will make corrections without undue delay.

3.3 Right to Erasure

You have the right to request the deletion of your personal data when it is no longer necessary for the purpose for which it was collected, or when you withdraw your consent. Upon receiving a valid erasure request, we will delete your data without undue delay.

For Hand Lab users: you may delete individual databases at any time through the platform. Your databases are deleted 90 days after cancellation. On a Free account, your databases are deleted after 90 days without activity.

Please note that we may be required to retain certain data to comply with legal obligations, such as tax and accounting requirements, or to defend against legal claims.

3.4 Right to Restrict Processing

You have the right to request that we limit how we use your data in certain circumstances, for example if you contest the accuracy of the data or if you have objected to processing pending verification of our legitimate grounds.

3.5 Right to Data Portability

You have the right to receive the personal data you provided to us in a structured, commonly used, and machine-readable format. You may also request that we transmit this data directly to another service provider, where technically feasible.

3.6 Right to Object

You have the right to object to the processing of your personal data where the processing is based on our legitimate interest. Upon receiving your objection, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

3.7 Right to Withdraw Consent

Where processing is based on your consent (for example, signing up for our waitlist), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

4. How to Exercise Your Rights

To exercise any of the rights described above, please contact us at contact@hhmetrics.com. In your request, please clearly state which right you wish to exercise and provide sufficient information for us to verify your identity.

— We will verify your identity before processing any request

— We will respond to your request within 30 days of receipt

— All requests are free of charge, unless manifestly unfounded or excessive

— If we cannot fulfill your request, we will explain the reason

5. Data Breach Procedures

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify affected users without undue delay. We will also take immediate steps to contain, assess, and remediate the breach.

Where required by applicable law, we will report the breach to the relevant data protection authority within the legally mandated timeframe.

6. Children

HHmetrics is not intended for individuals under 18 years of age. We do not knowingly collect or process personal data from minors. If we become aware that we have collected data from a person under 18, we will take immediate steps to delete that data.

7. Complaints

If you are not satisfied with how we handle your personal data or respond to a request, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. We encourage you to contact us first at contact@hhmetrics.com so we can attempt to resolve your concern directly.

8. Changes to This Policy

We may update this Data Protection Policy from time to time. The “Last updated” date at the top of this page indicates the most recent revision. We encourage you to review this page periodically.

9. Contact

For any data protection inquiries or to exercise your rights, please contact us:

— Email: contact@hhmetrics.com

— Entity: Maquila360, S. de R.L. de C.V., Mexico