Data & Privacy Policy

1. Who We Are

Hoshonto provides technology consulting, software development, and digital marketing services for organizations worldwide. We act as the data controller for information collected through our website, client engagements, and related communication channels.

2. Information We Collect

We may process the following categories of data:

• Contact details such as name, business email, phone number, and social profiles collected through forms or direct outreach.
• Business context including company name, industry, services requested, and project goals provided during consultations.
• Usage information like page views, referrers, and device data captured via privacy-conscious analytics to improve our website.
• Support records from chats, emails, or ticketing systems that document requests and resolutions.

3. How We Use Data

Processing is limited to legitimate business needs:

• Responding to enquiries, proposals, and support tickets you submit.
• Delivering contracted services, project updates, and post-launch optimisation.
• Improving our products, user experience, and security based on aggregated insights.
• Sharing relevant news or marketing communications when you opt in (you may opt out anytime).
• Meeting legal, regulatory, tax, or compliance obligations applicable to our operations.

4. Legal Bases for Processing

Depending on the interaction, we rely on:

• Consent for marketing subscriptions and optional analytics.
• Contractual necessity to deliver services outlined in statements of work or support agreements.
• Legitimate interests to operate, secure, and grow our business while respecting your rights.
• Legal obligations to maintain records, invoices, or other documentation required by applicable law.

5. Sharing & International Transfers

We never sell personal information. Data is shared only with vetted service providers that support our operations (such as hosting, analytics, CRM, payment processing, or communication tools) under contractual confidentiality. When transferring data outside your jurisdiction, we implement safeguards such as Standard Contractual Clauses or rely on providers participating in trusted frameworks.

6. Data Retention & Security

Personal information is retained only as long as needed to fulfil the purposes outlined above or as required by law. Project records are typically stored for five (5) years, while marketing consent is reviewed annually. We employ encryption, access controls, network monitoring, and staff training to prevent unauthorised access, loss, or misuse.

7. Your Rights

Depending on your location (including EU/EEA, UK, and other jurisdictions with privacy legislation), you may have rights to:

• Access, correct, or delete personal data we hold about you.
• Restrict or object to processing, including automated decision-making.
• Withdraw consent where processing is based on consent.
• Request data portability in a machine-readable format.
• Lodge a complaint with your local supervisory authority.

To exercise these rights, please submit a request through our privacy request form. We respond within one calendar month, or sooner where required.

8. Cookies & Analytics

Our website uses lightweight analytics to monitor performance and detect errors. Where legally required, we request your consent before storing non-essential cookies. You can adjust browser settings or opt-out by contacting us.

9. Contacting Us

Questions, data requests, or privacy concerns can be sent through our secure contact form. Use the reveal buttons on that page if you'd prefer to reach us by email or phone. Please include sufficient detail to help us verify your identity and respond effectively.

For details on service-specific responsibilities, please review our Terms of Service.