Cookie Policy

1. What cookies are

Cookies are small text files that a website places on your device. Similar technologies — such as pixels, SDKs and local storage — work in a comparable way. We refer to all of them as "cookies" in this policy.

Cookies can be placed by us (first-party) or by a provider we use (third-party). They can last only for your visit (session cookies) or stay on your device until they expire or you delete them (persistent cookies).

2. Which cookies we use

We keep our cookie use to a minimum. Today, Harvex uses only strictly necessary cookies and storage:

• Website, strictly necessary: set by our hosting provider to route requests, balance load and protect the site against abuse. Session-based, or up to 12 months.
• Platform, strictly necessary: set to keep you signed in, secure your session and protect against cross-site request forgery. Session-based, or up to 12 months for a persistent login.
• Platform, functional storage: local storage that remembers practical settings such as your language and interface preferences. Kept on your device until you clear it.

Because these cookies are strictly necessary to deliver the service you asked for, they are exempt from the consent requirement under the ePrivacy rules; for the limited personal data involved we rely on our legitimate interest (Article 6(1)(f) GDPR). They cannot be switched off without breaking the website or the platform.

3. Cookies we do not use

• Analytics and performance cookies — we currently do not measure website usage with cookie-based analytics tools.
• Marketing and advertising cookies — we do not use advertising networks or social media tracking pixels on our website.
• Cross-site tracking — we do not follow you across other websites and we do not share or sell data for advertising.

This is why our website does not show a cookie banner. If we ever introduce analytics, marketing or other non-essential cookies, we will first update this policy and ask for your prior consent through a banner that lets you accept, reject or configure each category separately, presented neutrally and without pre-ticked boxes. No non-essential cookie will be set before you have given consent.

4. Third-party cookies and providers

The only third parties that can place cookies today are the providers that host and secure our services:

• Vercel — hosting of our website and platform (European Union); strictly necessary cookies for routing and security.
• Supabase — authentication and database for the platform (European Union); strictly necessary cookies and storage for your session.

Some of these providers are US-based companies whose staff may access data from outside the EEA for support purposes. Such transfers are covered by appropriate safeguards, in particular the European Commission's Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework. We review the list of providers regularly. Links on our website, for example to LinkedIn, lead to third-party sites that place their own cookies under their own policies.

5. How to control cookies

• Browser settings: every major browser lets you block or delete cookies and clear local storage. Blocking strictly necessary cookies will stop you from signing in to the platform and may break parts of the website.
• Consent settings: as long as we use only strictly necessary cookies there is nothing to consent to, so no settings panel is shown. Once we introduce non-essential cookies, you will be able to change or withdraw your consent at any time through a link in the website footer.
• Tracking signals: we do not track you across websites, so there is nothing for a Do Not Track or Global Privacy Control signal to switch off.

Withdrawing your consent does not affect the lawfulness of processing that took place before the withdrawal.

6. Retention and review

Cookies are stored only for as long as needed for their purpose, as set out in section 2. We review our cookie use and this policy at least once a year, and whenever we add or change a tracking technology. The date at the top of this page shows the last review.

7. Your rights and contact

You have the right to withdraw your consent at any time, to be informed about and access the personal data processed through cookies, to have them corrected or erased, and to lodge a complaint with a supervisory authority. Our Privacy Policy explains these rights in full.

For questions about cookies or tracking technologies, contact us at info@harvextrading.com. You can also lodge a complaint with the Belgian Data Protection Authority: Gegevensbeschermingsautoriteit, Drukpersstraat 35, 1000 Brussels, +32 (0)2 274 48 00, contact@apd-gba.be.

Read our Privacy Policy