Privacy Policy

Heaven Eco Hub (Bodhisla LTD) · Last updated: 3 May 2026

This Privacy Policy describes how Heaven Eco Hub (operated by Bodhisla LTD, Saint George's, Grenada) collects, uses, stores, and protects information when you visit www.heavenecohub.com, use the Heaven Eco Hub mobile application, or engage with any related Heaven platforms and services (collectively, the "Services").

Summary of what we collect and what we do not:

• What IS collected — Passive visitor behaviour analytics via Google Analytics (anonymised and aggregated), technical server log data (IP address, browser type, pages visited, timestamps), and any information you voluntarily send to us by email.
• What is NOT collected — We do not collect account registration data, login credentials, or payment information through this website. There is no server-side registration, login system, or payment processing on heavenecohub.com.

We are committed to protecting your privacy and handling your data transparently and responsibly. If you have any questions or concerns about this policy, please contact us at support@heavenecohub.com.

1. Who We Are

The data controller for the purposes of applicable data protection legislation is:

Bodhisla LTD
Saint George's, Grenada
Email: support@heavenecohub.com
Website: www.heavenecohub.com

2. Information We Collect

Website (heavenecohub.com) — no direct account or registration data collected. We do not operate server-side login, registration, or payment processing on this website. We do not knowingly collect names, account credentials, or financial information through the website itself. Visitor behaviour is tracked via Google Analytics in anonymised, aggregated form as described below.

The following data may be collected automatically when you use our Services:

• Technical log data — IP address, browser type and version, operating system, referring URL, pages visited, and timestamps. Used for security monitoring and performance optimisation only.
• Analytics data — Aggregate, anonymised visitor behaviour collected via Google Analytics (where enabled), including session duration, page views, and general geographic region.
• Cookie data — Identifiers set by first- and third-party cookies as described in Section 4.
• Device information (mobile app) — If you use the Heaven Eco Hub mobile application, we may collect device identifiers, operating system version, app usage metrics, and crash reports to improve app stability and user experience.
• Communications — If you contact us directly (e.g. by email), we retain the content of that communication and your contact details in order to respond to your enquiry.

3. Legal Basis for Processing

Where data protection law requires a legal basis, we rely on the following:

• Legitimate interests — Security monitoring, fraud prevention, and improving our Services, where those interests are not overridden by your rights.
• Consent — Analytics and non-essential cookies, where we obtain your consent via cookie controls.
• Legal obligation — Compliance with applicable laws and regulatory requirements.
• Contract performance — Where you engage with Heaven products or the $HEAVEN token ecosystem and we need to process data to fulfil that relationship.

4. Cookies

We use the following categories of cookies on this website:

• Strictly necessary cookies — Essential for the website to function correctly. These cannot be disabled.
• Analytics cookies — Google Analytics collects anonymised, aggregated data about how visitors use our site. You may opt out at any time via your browser settings or by installing the Google Analytics Opt-out Browser Add-on.
• Performance & font cookies — Set by Google Fonts CDN to cache typeface assets and improve load times.

You can manage or disable cookies through your browser's privacy settings at any time. Disabling strictly necessary cookies may impair site functionality.

Cookie Consent. Analytics cookies require your consent before they are set. If you visit this website without having given explicit consent (for example, by dismissing or ignoring any cookie notice), only strictly necessary cookies required for the site to function will be active. No analytics or non-essential tracking cookies will be placed until you have provided consent. You may withdraw consent at any time by adjusting your browser settings or using the Google Analytics Opt-out Browser Add-on linked above.

5. How We Use Your Information

• To operate, maintain, and improve the website and mobile application
• To monitor site security and detect or prevent fraudulent or malicious activity
• To analyse aggregate visitor behaviour and optimise user experience
• To respond to enquiries or support requests you send to us
• To comply with applicable legal and regulatory obligations
• To communicate important updates about Heaven Eco Hub products and the $HEAVEN token (where you have opted in)

We do not sell, rent, or share your personal information with third parties for their own marketing purposes.

6. Third-Party Services

Heaven Eco Hub uses the following third-party services. Each is governed by its own privacy policy — we encourage you to review them:

• Google Analytics — website usage analytics (anonymised)
• Google Fonts — web typography delivery
• Firebase Hosting (Google) — website hosting and content delivery
• Telegram — community communication channel (t.me/HeavenEcoHub). Messages sent in public channels are publicly visible.
• BNB Smart Chain — public blockchain for $HEAVEN token transactions (see Section 7)
• Apple App Store / Google Play — mobile app distribution. Their respective privacy policies govern any data collected during download or installation.

7. Blockchain Transactions

All $HEAVEN token transactions take place on the BNB Smart Chain, a public blockchain. By design, wallet addresses, transaction amounts, and timestamps are permanently and publicly visible to anyone on the network. We do not control, store, or have access to your private keys or seed phrases.

Before initiating any blockchain transaction, be aware that such records are immutable and cannot be deleted. We are not responsible for any loss of funds resulting from user error, phishing, or compromise of your own wallet credentials.

8. Data Security

We take reasonable technical and organisational measures to protect information against unauthorised access, loss, or disclosure. These measures include encrypted connections (HTTPS/TLS), access controls on our hosting infrastructure, and regular security reviews.

No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

Data Breach Notification. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you and any relevant supervisory authorities as required by applicable law. Where legally required (for example, under GDPR or equivalent legislation), we will endeavour to notify affected individuals within 72 hours of becoming aware of the breach, providing details of the nature of the breach, the categories of data involved, the likely consequences, and the measures taken or proposed to address it.

9. International Data Transfers

Bodhisla LTD is based in Grenada. Some of our third-party service providers (including Google) may process data in countries outside your own, including the United States and European Economic Area member states. Where such transfers occur, we ensure that appropriate safeguards are in place (such as Standard Contractual Clauses or adequacy decisions) in accordance with applicable data protection law.

10. Data Retention

We retain data only for as long as necessary for the purposes described in this policy:

• Server logs — retained for up to 90 days for security and diagnostic purposes, then deleted.
• Analytics data — retained in accordance with Google Analytics' default retention settings (26 months by default), after which it is automatically deleted.
• Support correspondence — retained for as long as reasonably necessary to resolve your enquiry and for up to 3 years thereafter for record-keeping purposes.
• Blockchain records — permanent and immutable by the nature of the BNB Smart Chain; not within our control to delete.

11. Data Deletion

You have the right to request that we delete personal data we hold about you. We take deletion requests seriously and will act on them promptly in accordance with applicable law.

How to submit a deletion request

Email us at support@heavenecohub.com with the subject line "Data Deletion Request". Please include enough information to allow us to identify you (e.g. the email address you used to contact us, or your approximate location and date of contact). We may ask for additional verification to protect against unauthorised deletion requests.

What we will delete

• Any support correspondence or contact records associated with your identity
• Any personal data held in our internal systems that we can reasonably attribute to you
• Analytics identifiers, where technically feasible and where the data has not already been anonymised

Timescales

We will confirm receipt of your request within 5 business days and complete the deletion within 30 days. In complex cases we may extend this by a further 60 days, in which case we will inform you of the reason for the delay.

Exceptions — when we may be unable to delete

Certain data cannot be deleted or is exempt from deletion requests under applicable law:

• Blockchain records — wallet addresses and $HEAVEN token transaction data on the BNB Smart Chain are permanently recorded on a public, immutable ledger. This data is not within our control and cannot be altered or erased by us or anyone else.
• Legal obligations — we may be required by law to retain certain records (e.g. for fraud prevention, regulatory compliance, or legal proceedings) even after a deletion request.
• Anonymised data — data that has been fully anonymised and can no longer be attributed to any individual is not considered personal data and falls outside the scope of deletion rights.
• Third-party systems — data held by third-party providers (e.g. Google Analytics, Telegram) is subject to their own deletion policies. We will provide guidance on how to exercise your rights directly with those providers where relevant.

Where we are unable to fully honour a deletion request, we will explain the specific reason and, where possible, offer partial deletion or restriction of processing as an alternative.

12. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right of access — to request a copy of the personal data we hold about you
• Right to rectification — to request correction of inaccurate or incomplete data
• Right to erasure — to request deletion of your data where it is no longer necessary or lawfully held
• Right to restriction — to request that we limit how we process your data in certain circumstances
• Right to data portability — to receive your data in a structured, machine-readable format
• Right to object — to object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing
• Right to lodge a complaint — with your local data protection supervisory authority

To exercise any of these rights, please contact us at support@heavenecohub.com. We will respond within 30 days. We may need to verify your identity before fulfilling your request.

13. Children's Privacy

Heaven Eco Hub services are not directed at children under the age of 13 (or 16 where applicable under local law). We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at support@heavenecohub.com and we will take steps to delete that information promptly.

14. Links to Third-Party Websites

Our website and communications may contain links to third-party websites and services. This Privacy Policy applies solely to Heaven Eco Hub's own Services. We are not responsible for the privacy practices or content of any third-party sites and encourage you to read their privacy policies before providing any personal information.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page. Where required by law, we will notify you more directly (e.g. by email or prominent notice on the website). Continued use of our Services after any update constitutes your acceptance of the revised policy.

16. Contact Us

For any privacy-related questions, data requests, or concerns, please contact:

Heaven Eco Hub · Bodhisla LTD
Saint George's, Grenada
support@heavenecohub.com

We aim to respond to all privacy enquiries within 5 business days and to resolve all requests within 30 days.