Privacy Policy
How we collect, use and protect your data.
Introduction
HEYA is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR – EU 2016/679) and the Belgian law of 30 July 2018 on the protection of natural persons with regard to the processing of personal data (Belgian DPA).
This policy describes what data we collect, why and how we use it, and what your rights are.
Data collected
Profile data — Last name, first name, stage name, email address, profile picture, biography, disciplines, skills, location, external links.
User content — Posts (heys), comments, private messages, artistic projects, job applications.
Usage data — Pages visited, actions taken, device and browser used, IP address (anonymized), timestamps.
Analytics cookies — PostHog (anonymized analytics, opt-in only). No third-party advertising cookies.
Purposes of processing
- Providing and improving HEYA services
- Authentication and account security
- Connecting members (messaging, network)
- Sending notifications and transactional emails
- Anonymized usage analysis to improve the platform (opt-in)
- Complying with our legal obligations
Legal basis
Contract performance — processing necessary to provide the services.
Consent — analytics cookies, marketing emails (revocable at any time).
Legitimate interest — security, abuse prevention, service improvement.
Legal obligation — retention of billing data and security logs.
Retention period
Account data: duration of use + 3 years after account closure.
Anonymized analytics data: 13 rolling months.
Security logs: 1 year.
Your rights
Under the GDPR, you have the following rights:
- Access — obtain a copy of your data
- Rectification — correct inaccurate data
- Deletion — request erasure of your data
- Portability — receive your data in a structured format
- Objection — object to certain processing
- Restriction — request restriction of processing
To exercise your rights: privacy@hereyouart.com
Analytics cookies (PostHog)
HEYA uses PostHog (hosted in Europe) to anonymously analyze platform usage and improve it. This service is only enabled with your explicit consent (opt-in via the cookie banner). You can withdraw your consent at any time from the app settings.
DPO contact
Data Protection Officer: privacy@hereyouart.com
You also have the right to lodge a complaint with the Belgian Data Protection Authority (DPA): autoriteprotectiondonnees.be
_Last updated: June 2026_