Legal document
Privacy Policy
Last updated: March 2025 · KAZE Sp. z o.o.
1. General Information
1) This policy applies to the Service operating at the URL: hikarimarketing.com.
2) The operator of the Service and the Controller of personal data is: KAZE SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, al. Jerozolimskie 109/70, 02-011 Warsaw. KRS: 0001184216, NIP: 7011269821, REGON: 542256205.
3) Operator contact email: hello@hikarimarketing.com.
4) The Operator is the Controller of your personal data in relation to data voluntarily provided in the Service.
5) The Service uses personal data for the following purposes:
a) Handling inquiries via the contact form, b) Performance of ordered services and presentation of the offer, c) Technical communication related to project delivery.
6) The Service collects user information in the following ways:
a) Through data voluntarily entered in forms, b) Through cookies stored on end-user devices, c) Through automatic server technical logs (Vercel/Cloudflare).
2. Selected Data Protection Methods Used by the Operator
1) Transmission encryption: Personal data entry points are protected by SSL certificate.
2) Data validation (Zod): All data submitted through forms undergoes rigorous server-side validation to prevent injection of malicious code.
3) XSS protection: The Service uses data sanitisation mechanisms (escapeHtml) to prevent execution of dangerous scripts in the browser.
4) Rate limiting: We apply request limits per IP address to protect infrastructure from bots and form abuse.
5) Two-factor authentication (2FA): Access to administrative panels (Vercel, Resend, Cloudflare) is secured with two-step verification.
6) Password security: Where passwords are used in the Service, they are stored in hashed form (one-way), in accordance with current standards.
3. Hosting and Technical Infrastructure
1) The Service uses a modern distributed architecture, which involves entrusting data processing to the following entities:
a) Vercel Inc. (USA): Primary provider of hosting and server infrastructure, b) Resend Labs Inc. (USA): Provider of email delivery technology and form notification handling, c) Cloudflare, Inc. (USA): Provider of security services (WAF), traffic optimisation and DNS management, d) Hostido (Poland): Domain registrar and entity handling incoming email.
2) The above providers may record technical logs (IP address, URL, request time, browser information) to ensure Service stability and security.
4. Transfer of Data Outside the EEA (European Economic Area)
1) Due to the use of services provided by entities such as Vercel, Resend and Cloudflare, your data may be transferred to third countries, in particular to the USA.
2) The Controller ensures the security of such data through:
a) Use of Standard Contractual Clauses (SCC) approved by the European Commission, b) Cooperation with entities certified under the Data Privacy Framework (DPF), c) Encryption of data in transit and at rest.
5. Your Rights
1) You have the right to request from the Controller:
a) Access to your personal data and a copy thereof, b) Rectification (correction) of your data, c) Erasure of data ("right to be forgotten"), d) Restriction of processing or objection to processing, e) Data portability to another controller.
2) To exercise your rights, contact us at: hello@hikarimarketing.com.
3) You also have the right to lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw).
6. Information in Forms
1) The Service collects information voluntarily provided by the user (name, email address, company name, inquiry content).
2) This data is processed solely for the purpose of handling the inquiry or performing the service.
3) Providing data is voluntary but necessary to receive a response to your inquiry.
7. Marketing Techniques and Cookies
1) Cookies: The Service uses cookies to maintain sessions and for statistical purposes. You can manage them in your browser settings.
2) Facebook Pixel / Google Analytics: The Operator may use analytical and remarketing tools provided by Meta (Facebook) and Google to tailor advertising content. These tools rely on anonymous technical data and cookies.
3) Automated decision-making: Data may be used for marketing profiling to display content best suited to your interests within HIKARI Marketing premium services.
8. Cookie Settings Management
1) If the user does not wish to receive cookies, they may change their browser settings.
2) We reserve the right to state that disabling cookies essential for authentication, security, or maintaining user preferences may hinder, and in extreme cases prevent, the use of the website.
3) To manage cookie settings, select the web browser you use from the list below and follow the instructions.