Privacy Policy

Last updated: 8 July 2026

This website is designed to respect your privacy. We do not use cookies, we do not run advertising trackers, and we do not build profiles about you. This policy explains the limited data we do process, why, and the rights you have under the EU General Data Protection Regulation (GDPR).

The short version: no cookies are stored on your device. Visits are measured with a privacy-focused, cookieless analytics tool (Umami) that does not identify you. Our hosting provider (Cloudflare) keeps standard security logs. If you email us, we use your message only to reply.

1. Who we are

This website, hydrogenoxygenmachines.com, is operated by the official CellPowerX Europe distributor based in Spain ("we", "us", "our"). We are the data controller responsible for the personal data described in this policy.

For any privacy question or to exercise your rights, contact us at: sales@hydrogenoxygenmachines.com.

2. Cookies

We do not store cookies on your device, and we do not use local storage, pixels or similar tracking technologies to identify you or follow you across other websites. Because no non-essential information is stored on or read from your device, no cookie-consent banner is required for this site.

3. What we collect and why

a. Website analytics (Umami)

We use Umami, a privacy-focused, cookieless analytics tool, to understand how the site is used in aggregate — for example which pages are viewed and roughly where our visitors come from. Umami does not set cookies and does not collect information that identifies you personally. The data it records is limited and aggregated, and may include:

the page you viewed and the referring page or source;
your approximate country or region (derived from your IP address, which is not stored);
your browser type, operating system, device type and screen size.

This information cannot reasonably be used to identify you and is used purely to improve the website and our content.

b. Server and security logs (Cloudflare)

The site is delivered through Cloudflare, which provides hosting, content delivery and security. As part of operating and protecting the site, Cloudflare automatically processes standard technical log data, which can include your IP address, the date and time of your request, the page requested and your browser's user-agent string. This data is used to deliver the site securely, prevent abuse and fraud, and maintain the integrity and availability of the service.

c. Email enquiries

If you contact us by email, we process the email address you write from and the content of your message solely to respond to your enquiry and, where relevant, to take steps at your request before entering into a contract. We do not use these details for marketing without your consent.

4. Legal bases for processing

Under Article 6 of the GDPR, we rely on the following legal bases:

Legitimate interests (Art. 6(1)(f)) — for cookieless, aggregated analytics and for security logging, in order to understand, improve, secure and maintain our website. Because our analytics does not store information on your device and does not identify you, it does not require consent under the ePrivacy rules.
Legitimate interests / pre-contractual steps (Art. 6(1)(f) and 6(1)(b)) — to respond to enquiries you send us by email.

5. Who we share your data with

We do not sell your personal data and we do not share it for advertising. We rely on the following service providers (processors) who handle data on our behalf under appropriate agreements:

Cloudflare, Inc. — website hosting, content delivery, DNS and security.
Umami — cookieless website analytics.

Some of these providers may process data outside the European Economic Area. Where that happens, the transfer is protected by appropriate safeguards recognised under the GDPR, such as the European Commission's Standard Contractual Clauses.

6. How long we keep data

Aggregated analytics data is retained only for as long as it is useful for understanding site performance. Security and server logs are kept for a short period as needed for security and troubleshooting, in line with our providers' standard practices. Email correspondence is kept for as long as necessary to handle your enquiry and any resulting relationship.

7. Your rights

If and to the extent we hold personal data about you, the GDPR gives you the right to:

access the data we hold about you;
have inaccurate data corrected;
have your data erased;
restrict or object to how we process it;
request portability of the data you provided; and
lodge a complaint with a supervisory authority.

To exercise any of these rights, email sales@hydrogenoxygenmachines.com. You also have the right to complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es) or to the supervisory authority in your country of residence.

8. External links

Our pages may link to third-party websites, including the manufacturer CellPowerX and purchase or affiliate links. Once you leave this site, this policy no longer applies and we are not responsible for the privacy practices of those websites. We encourage you to read their own privacy policies.

9. Children's privacy

This website and our products are intended for adults. We do not knowingly collect personal data from children.

10. Changes to this policy

We may update this policy from time to time. Any changes will be posted on this page with a revised "last updated" date.

11. Contact

For any question about this policy or your personal data, contact us at sales@hydrogenoxygenmachines.com.