Regulatory Alignment

1. Data Controller. The data controller responsible for the processing of personal data collected through this website is HarborMatrixForge, registered at 03002, Rambla Mendez Nunez 12, Alicante, Spain. For any privacy-related inquiries, you may contact our designated data protection officer at [email protected].

2. Personal Data We Collect. When you interact with our platform — whether by submitting a contact form, subscribing to communications, or engaging our services — we may collect the following categories of personal data: full name, email address, telephone number, physical address, company affiliation, job title, IP address, browser metadata, cookies and usage analytics, and any information voluntarily provided through correspondence.

3. Legal Basis for Processing. We process personal data under the following legal bases as defined by Article 6 of the EU General Data Protection Regulation (GDPR): (a) Consent — where you have explicitly agreed to data processing for specific purposes; (b) Contractual Necessity — where processing is required to fulfill a contractual obligation or pre-contractual measures; (c) Legitimate Interest — where processing is necessary for our legitimate business interests, including service improvement, fraud prevention, and marketing optimization, provided such interests do not override your fundamental rights.

4. Purpose of Data Processing. Personal data is collected and processed for the following purposes: responding to inquiries and providing requested services; sending transactional communications related to ongoing engagements; delivering marketing and promotional materials where consent has been obtained; analyzing website usage patterns to improve user experience; complying with legal obligations and regulatory requirements; and preventing fraudulent activity and ensuring platform security.

5. Data Retention. Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Contact form submissions are retained for a maximum of 24 months. Contract-related data is retained for the duration of the contractual relationship plus 6 years in compliance with Spanish commercial record-keeping obligations. Analytics data is anonymized after 13 months.

6. Data Sharing and Third Parties. We do not sell personal data to third parties. Personal data may be shared with: hosting infrastructure providers (data processed within the EU/EEA); payment processing partners (Stripe Inc.) for transaction facilitation; analytics service providers for anonymized usage data; and legal authorities when required by law or court order. All third-party processors are bound by data processing agreements ensuring GDPR-compliant handling.

7. International Data Transfers. Where personal data is transferred outside the European Economic Area (EEA), we ensure adequate protection through Standard Contractual Clauses (SCCs) approved by the European Commission, or through adequacy decisions for the destination country, in compliance with Chapter V of the GDPR.

8. Your Rights. Under the GDPR, you have the following rights: the right of access (Article 15) — to obtain confirmation of whether your data is being processed and to receive a copy; the right to rectification (Article 16) — to correct inaccurate personal data; the right to erasure (Article 17) — to request deletion of your data ("right to be forgotten"); the right to restriction (Article 18) — to limit processing in certain circumstances; the right to data portability (Article 20) — to receive your data in a structured, machine-readable format; the right to object (Article 21) — to object to processing based on legitimate interests or direct marketing; and the right to withdraw consent at any time without affecting the lawfulness of prior processing.

9. Data Security. We implement appropriate technical and organizational measures to protect personal data, including encryption of data in transit (TLS 1.3), encrypted storage at rest, access controls with role-based permissions, regular security assessments, and employee training on data protection obligations.

10. Supervisory Authority. If you believe your data protection rights have been infringed, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es or with your local supervisory authority within the EU.

1. What Are Cookies. Cookies are small text files placed on your device when you visit our website. They serve various functions, from enabling core site functionality to collecting anonymized analytics data about how visitors interact with our platform.

2. Categories of Cookies We Deploy. (a) Strictly Necessary Cookies — essential for the operation of this website, including session management, security tokens, and load balancing identifiers. These cannot be disabled. (b) Functional Cookies — enable personalized features such as language preference, cookie consent state, and form pre-population. (c) Analytics Cookies — collect anonymized data about website usage patterns, page views, navigation paths, and performance metrics. We use these to continuously improve our platform. (d) Marketing Cookies — used to deliver relevant promotional content and measure the effectiveness of marketing campaigns. These are only deployed with your explicit consent.

3. Consent Mechanism. Upon your first visit, a cookie consent banner is presented allowing you to accept or decline optional cookies. Your choice is stored in local storage and respected across sessions. You may modify your cookie preferences at any time by clearing your browser's local storage for this domain.

4. Third-Party Cookies. Certain cookies are placed by third-party services integrated into our platform: Google Analytics (analytics), Stripe (payment processing), and Google Maps (geolocation display). Each third-party service operates under its own privacy policy, and we encourage you to review their respective data handling practices.

5. Managing Cookies. You can control and manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling strictly necessary cookies may impair the functionality of this website. For detailed instructions on managing cookies in your browser, consult your browser's help documentation.

6. Cookie Retention. Session cookies are deleted when you close your browser. Persistent cookies remain on your device for the period specified in the cookie table above, or until you delete them manually. Consent preference cookies are retained for 12 months.

1. General Refund Principles. HarborMatrixForge is committed to delivering services that meet or exceed the specifications outlined in our service agreements. All refund requests are evaluated on a case-by-case basis, considering the nature of the service, the stage of delivery, and the specific circumstances of the engagement.

2. Pre-Engagement Deposits. An initial deposit is required to commence any service engagement. This deposit is fully refundable if the engagement is cancelled before the commencement of Phase 2 (Core Engineering & Algorithmic Integration). Once Phase 2 has begun, the deposit becomes non-refundable as it covers the initial discovery and structural mapping work already performed.

3. Milestone-Based Payments. For engagements structured around milestone payments, each milestone payment becomes non-refundable upon approval and delivery of the corresponding phase deliverable. If a milestone deliverable does not meet the agreed-upon specifications, you must notify us in writing within 14 calendar days of delivery. We will rectify the deliverable at no additional cost or, if rectification is not feasible, issue a proportional refund for the affected milestone.

4. Service Cancellation. You may cancel an ongoing engagement at any time by providing written notice. Upon cancellation: deliverables completed and approved prior to the cancellation date remain your property; you are invoiced for all work completed up to the cancellation date, calculated proportionally based on the agreed project timeline; and any advance payments exceeding the proportional work completed will be refunded within 30 business days.

5. Non-Refundable Items. The following are non-refundable: third-party licensing fees or subscription costs incurred on your behalf; domain registration or transfer fees; dedicated infrastructure setup costs once provisioned; and consulting or advisory sessions that have been delivered.

6. Refund Process. To request a refund, contact [email protected] with your engagement reference, the specific reason for the refund request, and supporting documentation. We will acknowledge receipt within 2 business days and provide a resolution within 14 business days. Approved refunds are processed via the original payment method unless an alternative arrangement is agreed upon.

7. Dispute Resolution. In the event of a refund dispute that cannot be resolved through direct communication, both parties agree to submit to mediation under the rules of the Valencia Mediation Center before pursuing any judicial proceedings. This agreement is governed by Spanish law.

1. Acceptance of Terms. By accessing this website or engaging the services of HarborMatrixForge, you acknowledge and agree to be bound by these Terms of Service. If you do not agree to these terms, you must not use this website or engage our services. These terms constitute a legally binding agreement between you (or your organization) and HarborMatrixForge, registered at 03002, Rambla Mendez Nunez 12, Alicante, Spain, Spain.

2. Service Scope and Specifications. All services are provided in accordance with the specifications outlined in individual service agreements, proposals, or statements of work (SOWs) mutually agreed upon prior to engagement commencement. HarborMatrixForge reserves the right to refuse service requests that fall outside our areas of technical competence or that may compromise the quality standards of our existing engagements.

3. Intellectual Property. Upon full payment of all invoices related to a service engagement, you receive a perpetual, non-exclusive license to use all deliverables produced specifically for your engagement. HarborMatrixForge retains ownership of pre-existing frameworks, libraries, methodologies, and tools used in the creation of deliverables. Custom code written exclusively for your project becomes your property upon full payment. We reserve the right to use anonymized case studies, architectural patterns, and technical methodologies derived from your engagement for portfolio and educational purposes.

4. Confidentiality. Both parties agree to maintain the confidentiality of proprietary information shared during the course of an engagement. This includes business strategies, technical architectures, financial data, and any information marked as confidential. Confidentiality obligations survive the termination of the engagement for a period of 3 years, except for trade secrets which remain confidential indefinitely under applicable Spanish law.

5. Limitation of Liability. To the maximum extent permitted by applicable law, HarborMatrixForge's total aggregate liability for any claim arising from or related to our services shall not exceed the total fees paid by you for the specific service giving rise to the claim during the 12 months preceding the claim. HarborMatrixForge shall not be liable for indirect, incidental, consequential, or punitive damages, including loss of profits, data, or business opportunities.

6. Service Level Commitments. Where explicitly stated in a service agreement, HarborMatrixForge commits to the following SLAs: uptime guarantees as specified per engagement (standard: 99.9%); response time commitments for critical incidents (standard: 4 hours during business hours); and delivery milestone adherence within agreed timelines. SLA breaches entitle you to service credits proportional to the duration of the breach, as detailed in the applicable service agreement.

7. Force Majeure. Neither party shall be liable for delays or failures in performance resulting from causes beyond reasonable control, including but not limited to natural disasters, pandemics, government actions, internet infrastructure failures, or cyberattacks. The affected party must provide prompt notification and use commercially reasonable efforts to mitigate the impact.

8. Governing Law and Jurisdiction. These Terms of Service are governed by and construed in accordance with the laws of Spain. Any dispute arising from or relating to these terms shall be subject to the exclusive jurisdiction of the courts of Alicante, Spain. Both parties agree to attempt amicable resolution through negotiation before initiating formal proceedings.

9. Amendments. HarborMatrixForge reserves the right to modify these Terms of Service at any time. Material changes will be communicated via email to registered clients or prominently displayed on this website at least 30 days before taking effect. Continued use of our services after the effective date of any modification constitutes acceptance of the revised terms.

10. Severability. If any provision of these terms is found to be unenforceable or invalid, that provision shall be limited or eliminated to the minimum extent necessary, and the remaining provisions shall remain in full force and effect.