Privacy Policy

1. Introduction

HMD Corp. (“the Company”, “we”, “our”, or “us”) is committed to safeguarding the privacy of individuals who access our website at hmdcorp.org (the “Website”). This Privacy Policy describes the categories of personal data we collect, the purposes for which such data is processed, the legal bases upon which we rely, and the rights available to data subjects. By accessing or utilising the Website, you acknowledge that you have read and understood this Privacy Policy in its entirety.

2. Data Controller

The data controller responsible for the processing of your personal data is HMD Corp., with its registered office at 2 Emerald Street, London, WC1N 3QA, United Kingdom. All enquiries regarding data protection matters should be directed to contact@hmdcorp.org.

3. Categories of Personal Data Collected

We may collect and process the following categories of personal data:

• •Identity and Contact Data: full name, electronic mail address, company name, and division of interest, as submitted through our contact form
• •Correspondence Data: the content of any communications transmitted to us by electronic means
• •Technical and Usage Data: anonymised analytics data, including page views, referral sources, and device characteristics, collected automatically through cookies and analogous technologies

4. Purposes and Legal Bases for Processing

Your personal data is processed for the following purposes, each underpinned by a lawful basis as prescribed by the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018:

• •Responding to enquiries — legitimate interest in conducting our business
• •Improving and optimising the Website — legitimate interest in enhancing user experience
• •Compliance with legal and regulatory obligations — legal obligation
• •Communicating information regarding our services — your explicit consent

5. Data Protection and Security Measures

The Company implements appropriate technical and organisational measures to ensure a level of security commensurate with the risk to personal data. Such measures include, without limitation, AES-256 encryption for data at rest, TLS 1.3 encryption for data in transit, strict access controls on a need-to-know basis, and comprehensive audit logging of all data access events.

6. Data Subject Rights

Pursuant to the UK GDPR and the Data Protection Act 2018, you are entitled to exercise the following rights in respect of your personal data:

• •The right of access to your personal data
• •The right to rectification of inaccurate or incomplete data
• •The right to erasure (“the right to be forgotten”)
• •The right to restriction of processing
• •The right to data portability
• •The right to object to processing

To exercise any of the aforementioned rights, please submit a written request to contact@hmdcorp.org. We shall endeavour to respond within one calendar month of receipt, in accordance with applicable legislation. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk should you believe your rights have been infringed.

7. Third-Party Processors

The Company engages the following third-party processors in the course of operating the Website: Vercel Inc. (hosting, analytics, and performance monitoring) and Resend Inc. (transactional electronic mail delivery). These processors collect only anonymised or strictly necessary data and do not engage in cross-site tracking of individual users. Each processor is bound by contractual obligations to maintain the confidentiality and security of any data processed on our behalf.

8. International Data Transfers

Where personal data is transferred to processors situated outside the United Kingdom, we ensure that appropriate safeguards are in place, including Standard Contractual Clauses approved by the Information Commissioner's Office or reliance upon an adequacy decision, as applicable.

9. Data Retention

Personal data shall be retained only for so long as is necessary to fulfil the purposes for which it was collected, or as otherwise required by applicable law. Contact form submissions are retained for a period not exceeding twenty-four (24) months from the date of receipt, following which they are securely destroyed.

10. Amendments to This Policy

The Company reserves the right to amend this Privacy Policy at any time. Any material changes shall be reflected by an updated revision date at the head of this document. Your continued use of the Website following such amendments shall constitute acceptance of the revised policy.

11. Contact

All enquiries concerning this Privacy Policy or the processing of your personal data should be addressed to: HMD Corp., 2 Emerald Street, London, WC1N 3QA, United Kingdom, or by electronic mail at contact@hmdcorp.org.