🔒 Summary: HY Solutions collects only the data necessary to provide our services. We do not sell your personal data to third parties. We use cookies with your consent. You have full rights over your data and can request deletion at any time.
1. Who We Are
HY Solutions ("we", "our", "us") is a digital marketing agency. We operate the website at this domain and provide social media marketing, content creation, advertising and related services.
Data Controller: HY Solutions
Contact Email: hysolutions07@gmail.com
2. Data We Collect
2.1 Information You Provide
- Contact Form: Name, email address, phone number, selected service, and your message.
- Newsletter: Email address.
2.2 Data Collected Automatically
- IP Address: Logged for rate-limiting and security purposes.
- Session Data: A session cookie (hy_sid) is set to maintain your session state during a visit.
- Browser/Device Info: Via server access logs (browser type, OS, referring URL).
- Cookie Consent Preferences: Your cookie choices are stored in our database linked to your session.
2.3 Data We Do NOT Collect
- Payment or financial information (we do not process payments on this site).
- Sensitive personal data (health, biometric, ethnic origin, etc.).
- Government ID numbers.
3. How We Use Your Data
- To respond to your enquiries submitted through our contact form.
- To send you service-related emails (auto-reply confirmations, responses to your message).
- To send our newsletter (only if you opted in).
- To maintain website security by rate-limiting requests and detecting abuse via IP addresses.
- To improve our website using aggregated, anonymised analytics data (only if you consented).
- To comply with legal obligations.
4. Legal Basis for Processing
We rely on the following legal bases to process your personal data:
- Consent – for optional cookies (analytics, marketing) and newsletter subscriptions.
- Legitimate Interests – for security logging (IP addresses, rate limiting) and responding to enquiries.
- Contractual Necessity – when your enquiry leads to a service agreement.
- Legal Obligation – when required by applicable law.
5. Sharing Your Data
We do not sell your personal data. We may share data only in these limited circumstances:
- Email Service Providers: We use Gmail (Google) SMTP to send emails. Your email is processed by Google's servers in accordance with their Privacy Policy.
- Hosting & Infrastructure: Our server infrastructure may be hosted on third-party cloud providers. Data is stored on our secured SQLite database.
- Legal Requirements: If required by law, court order or government authority.
6. Cookies & Tracking
We use the following cookies:
- hy_sid (Necessary) – Session cookie. Required for the website to function. Expires in 24 hours.
- hy_cookie_consent (Necessary) – Stores your cookie consent preferences in localStorage.
- Analytics Cookies (Optional, with consent) – Used to understand how visitors interact with our site.
- Marketing Cookies (Optional, with consent) – Used to display relevant advertising.
You can manage your cookie preferences at any time via our Cookie Policy page or the cookie banner.
7. Data Retention
- Contact form submissions: Retained for 2 years, then securely deleted.
- Newsletter subscriptions: Retained until you unsubscribe.
- Session data: Automatically expired and deleted after 24 hours of inactivity.
- Cookie consent records: Retained for 1 year.
- IP address logs: Retained for 90 days for security purposes.
8. Your Rights
Depending on your location, you may have the following rights:
- Access – Request a copy of the personal data we hold about you.
- Rectification – Request correction of inaccurate data.
- Erasure – Request deletion of your personal data ("right to be forgotten").
- Restriction – Request that we limit how we process your data.
- Portability – Request your data in a structured, machine-readable format.
- Objection – Object to processing based on legitimate interests.
- Withdraw Consent – Withdraw consent at any time where processing is based on consent.
To exercise any of these rights, email us at hysolutions07@gmail.com. We will respond within 30 days.
9. Data Security
We implement reasonable technical and organisational measures to protect your data, including:
- HTTPS encryption for all data in transit.
- Secure session handling with HTTPOnly, SameSite cookies.
- Input validation and rate-limiting to prevent abuse.
- Regular security reviews of our codebase.
- Limited access to production data.
No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
10. Children's Privacy
Our website is not directed to children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has submitted data to us, please contact us immediately and we will delete it.
11. Changes to This Policy
We may update this Privacy Policy periodically. The "Last updated" date at the top of this page will reflect any changes. Significant changes will be communicated via email (where we have your address) or a notice on our website.
For any privacy-related questions, requests or complaints, please contact: