Privacy Policy

1. Executive Summary & Commitment

At HL GROUP ("Company", "we", "us", or "our"), respecting user privacy and securing personal data is a foundational pillar of our corporate operations. This Privacy Policy governs the collection, storage, processing, and protection of information obtained from clients, platform visitors, and users ("you" or "User") who interact with our official digital ecosystem, including hlgroupco.com, digital product checkout links, and educational platforms.

Our policies strictly comply with global data governance standards, including the United States Privacy Acts (including California Consumer Privacy Act - CCPA / CPRA, Virginia Consumer Data Protection Act - VCDPA), the European General Data Protection Regulation (GDPR), and Brazilian General Data Protection Law (LGPD - Law No. 13.709/2018).

2. Corporate Identity & Data Controller

3. Information We Collect

We collect personal and technical data through direct interactions and automated system metrics:

• Identifiable Personal Information: Name, billing address, e-mail address, contact telephone number, and tax identification (where required for invoice issuance and digital product access authorization).
• Commercial Transaction Details: Purchase history, digital product licenses acquired, subscription status, and payment transaction metadata processed via authorized gateways (e.g., credit card processors, instant digital payments). Note: HL GROUP does not store full credit card numbers or raw payment CVV security codes on internal servers.
• Technical & Usage Metrics: IP addresses, browser specifications, operating system details, device descriptors, referral URLs, page view session times, and interaction logs.

4. Legal Bases & Purpose of Processing

HL GROUP processes personal data under explicit legal grounds to fulfill operational and institutional purposes:

5. Payment Processing & Gateway Integrations

Commercial transactions for HL GROUP digital products and educational programs are executed through accredited, PCI-DSS Level 1 compliant payment gateway providers and primary international credit card processors.

Payment gateways handle payment authorization under their respective encryption and privacy frameworks. HL GROUP receives only transactional outcome notifications (success, pending, or authorization refusal), transactional tokens, and customer contact data necessary to grant digital access.

6. Security Standards & Data Retention

We employ enterprise-grade security protocols, including 256-bit SSL/TLS encryption for all data in transit, strict access control permissions, continuous vulnerability assessments, and isolated database storage.

Personal data is retained only for as long as required to fulfill the purposes set out in this policy, satisfy contractual obligations, or meet statutory financial retention periods. When no longer required, data is permanently erased or anonymized.

7. International Data Transfers

Because HL GROUP operates globally, personal data may be stored or processed on cloud servers located in the United States, South America, or the European Economic Area (EEA). We ensure all cross-border transfers adhere to recognized standard contractual clauses and rigorous international data privacy safeguards.

8. User Rights & Privacy Controls

Regardless of your geographical location, you retain the right to exercise statutory control over your personal information:

• Right of Access & Confirmation: Request confirmation regarding whether your personal data is being processed and receive a clear copy.
• Right to Rectification: Request prompt correction of inaccurate, outdated, or incomplete personal data.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal information, subject to mandatory legal data retention obligations.
• Right to Opt-Out: Unsubscribe from marketing communications at any time via the "unsubscribe" link or by contacting corporate support.

To exercise any privacy rights, submit a written inquiry to contact@hlgroupco.com with the subject header "Data Privacy Inquiry".