1. Who we are
Hipnnrefineai (“we”, “us” or “the project”) operates the website at hipnnrefineai.world. We act as the data controller for personal data processed through this website. You can reach us at the postal address Mannerheimintie 14–20, 00100 Helsinki, by telephone on +358 9 5657 4523, or using the contact reference admin@hipnnrefineai.world and the form on our contact page.
As the controller, we determine the purposes and means of processing the limited personal data described below. We take this responsibility seriously and aim to collect only what is genuinely needed to respond to you and to keep the site running.
2. Scope of this notice
This notice applies to personal data collected through this website, including data submitted through the contact form and technical data generated automatically when you browse. It does not apply to third-party websites that we may reference for informational purposes; those sites operate under their own policies.
By using the website, you acknowledge that you have read and understood this notice. If you do not agree with how we handle personal data, please do not submit information through the contact form.
3. Data we collect
We aim to keep data collection to a practical minimum. The categories of personal data we may process are:
- Contact form data: the name, email address and message content you choose to provide, together with your consent record.
- Technical data: information such as your approximate region, browser type, device type, and pages viewed, collected through cookies or similar technologies where you have consented.
- Correspondence: any further messages you exchange with us after an initial enquiry.
We do not knowingly collect special categories of data. Please do not include sensitive details, such as information about your health, in messages sent to us through the form.
4. Purposes and legal bases
We process personal data for clearly defined purposes, each supported by a legal basis under the General Data Protection Regulation (GDPR):
- To respond to enquiries — based on your consent and our legitimate interest in answering messages you send us.
- To operate and secure the website — based on our legitimate interest in providing a stable, safe service.
- To understand general usage — based on your consent, where analytics cookies are enabled.
- To comply with legal obligations — where we are required to retain or disclose information by law.
Where processing relies on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
5. Sharing and recipients
We do not sell personal data, and we do not share it for unrelated commercial purposes. We may share limited data with service providers who help us operate the website, such as hosting and email providers. These providers act on our instructions under appropriate agreements.
We may also disclose data where required to comply with a legal obligation, to establish or defend legal claims, or to protect the rights and safety of users and the public.
6. International transfers
Our service providers may process data within the European Economic Area or in other countries. Where data is transferred outside the EEA, we rely on recognised safeguards, such as adequacy decisions or standard contractual clauses, to maintain an equivalent level of protection.
7. Retention periods
We keep personal data only for as long as necessary for the purpose for which it was collected:
- Contact enquiries: typically retained for up to 24 months after our last correspondence, unless a longer period is required by law.
- Technical and analytics data: retained in aggregated or short-lived form, generally for no longer than 14 months.
- Records required by law: kept for the period mandated by the relevant legislation.
When data is no longer needed, we delete it or anonymise it so that it can no longer be linked to you.
8. Security measures
We apply reasonable technical and organisational measures to protect personal data against loss, misuse and unauthorised access. These include encryption of data in transit through HTTPS, restricted access to systems that hold personal data, and periodic review of our processes.
No method of transmission or storage is completely secure, so while we work to protect your information, we cannot promise absolute security. We encourage you to share only the details necessary for your enquiry.
9. Your rights
Subject to applicable law, you have the following rights regarding your personal data:
- Access — to request a copy of the personal data we hold about you.
- Rectification — to ask us to correct inaccurate or incomplete data.
- Erasure — to request deletion of your data in certain circumstances.
- Restriction — to ask us to limit how we use your data.
- Portability — to receive certain data in a structured, machine-readable format.
- Objection — to object to processing based on legitimate interests.
- Withdraw consent — where processing is based on consent.
To exercise any of these rights, please contact us using the details in section 12. You also have the right to lodge a complaint with your local supervisory authority. In Finland, this is the Office of the Data Protection Ombudsman.
10. Children's privacy
This website is intended for a general adult audience. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so that we can remove it.
11. Changes to this notice
We may update this notice from time to time to reflect changes in our practices or in the law. When we make material changes, we will update the date shown at the top of this page. We encourage you to review this notice periodically.
12. How to contact us
If you have questions about this notice or wish to exercise your rights, you can reach us at Mannerheimintie 14–20, 00100 Helsinki, by telephone on +358 9 5657 4523, or through the form on our contact page using the reference admin@hipnnrefineai.world. We aim to respond to privacy requests within the timeframes required by law.