Privacy Policy

1. Who this policy covers

This Privacy Policy applies to https://hisolit.com and to personal information submitted through the Website or in communications about HISOLIT services. “HISOLIT”, “we”, “us” and “our” refer to the business operating this Website under the HISOLIT name.

For privacy questions or requests, contact hello@hisolit.com. The full legal name and registered/business address of the entity that operates the Website should be added to this policy before publication.

2. Personal information we collect

When you submit a project enquiry, the Website may collect the information requested in the form: your name, work email address, phone number, company name, company website, the platform you use, the service you are interested in, an indicative project budget and the message or project details you provide. Some fields are optional; required fields are marked on the form.

If you contact us by email or another channel, we may collect the contact details and the contents of your communication. If you become a client, we may also process project, billing, contract, delivery, access and business-contact information needed to administer the engagement. Any client-system or end-customer data accessed during a project should be governed by the relevant SOW and, where required, a separate DPA.

The Website enquiry form is not a payment checkout and does not request payment-card details.

3. Technical and usage information

When you access the Website, our systems and tag-management tools may process technical information such as IP address, browser and device information, referring page, pages visited, timestamps and basic interaction events. Our enquiry endpoint also uses an IP-derived keyed value to rate-limit abusive form submissions; the submitted IP address is not included as a visible field in the enquiry record described in the supplied website build.

The Website loads Google Tag Manager using container ID GTM-MH69XCFX. The front-end code sends interaction events to the tag-management data layer, including successful enquiry submissions and selected form categories (platform, service and budget tier), as well as clicks on certain email, WhatsApp and credential-verification links. The exact analytics or other third-party tags that receive these events depend on the published Google Tag Manager container configuration.

4. Cookies and similar technologies

The enquiry-form pages set a first-party cookie named “hisolit_csrf” to help protect form submissions against cross-site request forgery. In the supplied build, this cookie is configured with an expiry of 24 hours, the HttpOnly and SameSite=Lax attributes, and the Secure attribute when the page is served over HTTPS. It supports website security and form operation.

Google Tag Manager is loaded across the Website and may activate analytics or other tags that use cookies, local storage, pixels or similar technologies. The tags and cookies active in the live container should be checked and described in the final published policy. You can also use your browser settings to manage or delete cookies, although disabling essential cookies may affect some Website functions.

Where applicable law requires prior consent for non-essential cookies or tracking, those tags should be blocked until the required consent is obtained. The supplied website package does not include a visible cookie-consent manager; this should be addressed before serving visitors in jurisdictions that require one.

5. How we use personal information

• To receive, review and respond to enquiries and requests for consultations.
• To understand your business requirements and assess whether our services are relevant.
• To prepare proposals, administer contracts, deliver services and communicate about an engagement.
• To operate, secure, maintain and improve the Website, forms and enquiry process.
• To measure Website performance and understand which content and service areas are useful, subject to applicable cookie and privacy requirements.
• To prevent spam, fraud, abuse and unauthorised access.
• To comply with legal obligations, establish or defend legal claims and maintain appropriate business records.

6. Legal bases for processing

Where a privacy law requires us to identify a legal basis, the relevant basis may include taking steps at your request before entering into a contract, performing a contract, pursuing legitimate interests in operating and securing our business, complying with legal obligations, or consent where consent is required. The appropriate basis depends on the information and purpose involved and the law that applies to you.

7. How information is shared

We may share information with service providers that support Website hosting, infrastructure, database operation, security, analytics/tag management, communications and professional administration. These providers should process information only for authorised purposes and under appropriate contractual and security safeguards.

We may also disclose information where required by law, to protect rights and security, to enforce an agreement, or as part of a business transfer, restructuring or professional-adviser process where permitted by law. We do not publish enquiry details. The active third-party services configured inside Google Tag Manager and the Website hosting/database providers should be listed after the production configuration has been verified.

8. International data transfers

HISOLIT presents its services to organisations in multiple regions. Depending on the location of the Website infrastructure, our service providers and the people involved in an enquiry or engagement, information may be processed in a country other than the one where you are located. Where required, appropriate legal safeguards should be used for international transfers.

9. Retention

We retain enquiry and business-contact information for as long as reasonably necessary to respond to the enquiry, maintain business records, administer a client relationship, resolve disputes and meet legal or accounting requirements. The specific retention period depends on the purpose and applicable obligations.

The current form-processing code creates temporary server-side rate-limit state based on a keyed IP-derived value. Its cleanup and retention period should be configured and documented as part of the Website’s operational retention policy.

10. Security

We use reasonable technical and organisational measures intended to protect information against unauthorised access, alteration, disclosure or loss. The supplied form code includes anti-forgery checks, input validation, a honeypot field, rate limiting and prepared database statements. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Your privacy rights

Depending on your location and the law that applies, you may have rights to request access to personal information, correction, deletion, restriction, objection, portability or withdrawal of consent. You may also have the right to complain to a data-protection authority. To make a request, email hello@hisolit.com with “Privacy Request” in the subject line. We may need to verify your identity and will respond within the period required by applicable law.

12. Third-party websites and services

The Website links to third-party platforms, documentation, social networks and verification services. Those services operate under their own privacy notices and terms. This policy does not cover their independent processing of your information.

13. Children

The Website is designed for business enquiries and professional audiences, and is not directed to children. Please do not submit children’s personal information through the Website.

14. Changes and contact

We may update this policy as the Website, our service providers or applicable requirements change. The “Last updated” date indicates the current version. For questions, requests or concerns, contact hello@hisolit.com.