LEGAL

PRIVACY POLICY

How EXOTIC collects, uses and protects personal data, wherever in the world you use the platform.

LAST UPDATED: FEBRUARY 2026

01DATA CONTROLLER

EXOTIC, established in Spain, is the controller of the personal data processed through this platform. Contact for data matters: privacy@exoticgalactic.com.

02DATA WE COLLECT

Account details (name, email, account type), profile content you upload, booking and contract records, payment metadata, support messages, and technical data such as IP address, device and pages visited.

03WHY WE USE IT

To run your account, match talent with clients, execute bookings and payments, prevent fraud and abuse, comply with tax and accounting duties, and — only with your consent — send marketing.

04LEGAL BASIS

Performance of a contract for bookings and accounts; legal obligation for invoicing and tax records; legitimate interest for security and fraud prevention; and consent for marketing and non-essential cookies.

05WHO WE SHARE IT WITH

Payment processors, hosting and email providers, and the counterparty in a booking (a client sees the professional's working profile, and vice versa). We do not sell personal data.

06INTERNATIONAL TRANSFERS

We operate worldwide, so data may be processed outside the European Economic Area. Where that happens we rely on adequacy decisions or the European Commission's Standard Contractual Clauses, with supplementary measures where required.

07HOW LONG WE KEEP IT

Account data for as long as the account is active. Contract and invoicing records for the period required by Spanish commercial and tax law. Everything else is deleted or anonymised once its purpose ends.

08YOUR RIGHTS

Access, rectification, erasure, restriction, portability, objection, and withdrawal of consent at any time. Write to privacy@exoticgalactic.com. You may also complain to the Spanish supervisory authority (AEPD) or your local one.

09MINORS

The platform is for adults only. We do not knowingly process data of anyone under 18 and we delete such accounts as soon as we detect them.

10SECURITY

Data is encrypted in transit, access is restricted by role, and credentials are stored hashed. We keep a record of processing activities and notify breaches to the authority and to affected users where the law requires it.

11CONTACT

For any privacy question or to exercise your rights: privacy@exoticgalactic.com.

QUESTIONS ABOUT THIS DOCUMENT

Write to legal@exoticgalactic.com. We answer every request in Spanish or English, and we respond to data-protection requests within one month as required by the GDPR.