Site privacy policy

1) This policy applies to the Service operating at the URL: hikarimarketing.com.

2) The operator of the Service and the Controller of personal data is: KAZE SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, al. Jerozolimskie 109/70, 02-011 Warsaw. KRS: 0001184216, NIP: 7011269821, REGON: 542256205.

3) Operator contact: email hello@hikarimarketing.com, phone +48 662 956 152 (voice calls: Polish and English only).

4) The Operator is the Controller of your personal data in relation to data voluntarily provided in the Service.

5) The Service uses personal data for the following purposes:

a) Handling inquiries via the contact form, b) Performance of ordered services and presentation of the offer, c) Technical communication related to project delivery.

6) The Service collects user information in the following ways:

a) Through data voluntarily entered in forms, b) Through cookies stored on end-user devices, c) Through automatic server technical logs (Vercel/Cloudflare).

1) Transmission encryption: Personal data entry points are protected by SSL certificate.

2) Data validation (Zod): All data submitted through forms undergoes rigorous server-side validation to prevent injection of malicious code.

3) XSS protection: The Service uses data sanitisation mechanisms (escapeHtml) to prevent execution of dangerous scripts in the browser.

4) Rate limiting: We apply request limits per IP address to protect infrastructure from bots and form abuse.

5) Two-factor authentication (2FA): Access to administrative panels (Vercel, Resend, Cloudflare) is secured with two-step verification.

6) Password security: Where passwords are used in the Service, they are stored in hashed form (one-way), in accordance with current standards.

1) The Service uses a modern distributed architecture, which involves entrusting data processing to the following entities:

a) Vercel Inc. (USA): Primary provider of hosting and server infrastructure, and Vercel Web Analytics and Speed Insights (aggregated traffic and performance metrics), b) Resend Labs Inc. (USA): Provider of email delivery technology and form notification handling, c) Cloudflare, Inc. (USA): Provider of security services (WAF), traffic optimisation and DNS management, d) Hostido (Poland): Domain registrar and entity handling incoming email.

2) The above providers may record technical logs (IP address, URL, request time, browser information) to ensure Service stability and security.

1) Due to the use of services provided by entities such as Vercel, Resend and Cloudflare, your data may be transferred to third countries, in particular to the USA.

2) The Controller ensures the security of such data through:

a) Use of Standard Contractual Clauses (SCC) approved by the European Commission, b) Cooperation with entities certified under the Data Privacy Framework (DPF), c) Encryption of data in transit and at rest.

1) You have the right to request from the Controller:

a) Access to your personal data and a copy thereof, b) Rectification (correction) of your data, c) Erasure of data ("right to be forgotten"), d) Restriction of processing or objection to processing, e) Data portability to another controller.

2) To exercise your rights, contact us at: hello@hikarimarketing.com.

3) You also have the right to lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw).

1) The Service collects information voluntarily provided by the user (name, email address, company name, inquiry content).

2) This data is processed solely for the purpose of handling the inquiry or performing the service.

3) Providing data is voluntary but necessary to receive a response to your inquiry.

1) Cookie consent: Before optional tracking runs, we show a consent banner. You can accept all categories, reject optional cookies, or choose analytics and marketing separately. Your choice is stored locally (localStorage, key hikari-cookie-consent-v2) and can be changed via “Cookie settings” in the footer.

2) Essential mechanisms: Keeping your selected language (NEXT_LOCALE cookie) and storing your cookie choice are required for the Service to work.

3) Analytics and marketing (only after consent): Google Tag Manager with Google Consent Mode v2. Until you consent, analytics_storage, ad_storage, ad_user_data and ad_personalization remain denied by default. After consent, Google tools (e.g. Google Analytics 4) and — if you enable marketing — ad/remarketing tags configured in GTM may run.

4) Microsoft Clarity (analytics cookies only): If you enable analytics cookies, we load Microsoft Clarity to anonymously analyze how users interact with the Service (session recordings and heatmaps) to improve usability. Clarity is not loaded until you have consented to analytics cookies.

5) Infrastructure metrics: Vercel Web Analytics and Speed Insights collect aggregated first-party traffic and performance data to keep the Service stable.

6) Refusing optional cookies does not block use of the Service content or the contact form.

1) You can open “Cookie settings” (footer link) at any time to change your previous choice.

2) If the user does not wish to receive cookies, they may change their browser settings.

3) Disabling cookies essential for security, user preferences, or language storage may hinder, and in extreme cases prevent, use of the website.

4) To manage cookie settings, select the web browser you use from the list below and follow the instructions.