Privacy Policy

1. Who we are

HIMFY Partners is a brand strategy and marketing execution practice based in Budapest, Hungary. We operate the website at himfy.com. For data protection enquiries, contact us at hello@himfy.com.

2. What data we collect

Contact form

When you submit the contact form we collect your name, email address, company name (optional), and message. This data is stored in our database (Supabase) and used solely to respond to your enquiry.

The Origin Story questionnaire

When you participate in The Origin Story positioning exercise, we collect your name, email address, role, and your questionnaire responses. If you initiate a workshop as the primary contact, we also collect your company name and website. This data is stored in our database (Supabase) and used solely by HIMFY Partners to prepare and deliver the positioning workshop. Your responses are visible to the HIMFY team and, in aggregate, to other members of your leadership team who participate in the same exercise. We retain questionnaire data for the duration of our engagement and delete it upon request. IP addresses collected during submission are automatically purged after 30 days.

If you subscribe to our newsletter we collect your email address. This is stored in our database and used to send you updates. You may unsubscribe at any time.

Analytics

With your consent, we use Google Analytics 4 to collect anonymised data about how visitors use our site — including pages visited, time on site, approximate location (country/city), and device type. This data is processed by Google and subject to Google's Privacy Policy. Analytics are only loaded after you accept cookies.

3. How we use your data

To respond to enquiries submitted via the contact form
To prepare and deliver The Origin Story positioning exercise based on questionnaire responses
To send newsletters to subscribers who have opted in
To understand how visitors use our website and improve it (analytics, with consent only)

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Third-party services

We use the following third-party services that may process your data:

Supabase — database and backend infrastructure, used for contact form submissions and Origin Story questionnaire data. Data is stored in EU-region servers. Supabase Privacy Policy.
Resend — transactional email service, used to send notification emails to the HIMFY team when new questionnaire responses are submitted. Only the respondent's name, role, and company name are included in these notifications. Resend Privacy Policy.
Google Analytics 4 — website analytics, loaded only with your consent. Data is processed by Google in accordance with their privacy policy and EU Standard Contractual Clauses.
Cloudflare — we use Cloudflare Turnstile on our contact form to prevent spam. Turnstile processes your IP address to assess whether your interaction is human. No cookies are set. This processing is based on our legitimate interest in preventing abuse. Cloudflare Privacy Policy.
Vercel — website hosting. Vercel may process server access logs including IP addresses. Vercel Privacy Policy.

5. Cookies

We use the following cookies and local storage entries:

himfy_consent — stored in your browser's local storage to remember your cookie preference. Not a cookie; not transmitted to any server.
Google Analytics cookies (_ga, _ga_*) — set only after you accept analytics cookies. Used to distinguish users and sessions.

Cloudflare Turnstile does not set persistent cookies.

6. Your rights under GDPR

If you are in the European Economic Area, you have the following rights regarding your personal data:

Access — request a copy of the data we hold about you
Rectification — request correction of inaccurate data
Erasure — request deletion of your data
Objection — object to processing based on legitimate interests
Portability — request your data in a machine-readable format
Withdraw consent — withdraw analytics consent at any time by clicking "Decline" on the cookie banner (clear site data to see the banner again)

To exercise any of these rights, email hello@himfy.com.

7. Data retention

Contact form submissions are retained until no longer needed for the purpose they were collected. Origin Story questionnaire data is retained for the duration of our engagement and deleted upon request; IP addresses are automatically purged after 30 days. Newsletter subscriptions are retained until you unsubscribe. Google Analytics data retention is set to 14 months by default.

8. Changes to this policy

We may update this policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of the site after changes constitutes acceptance of the updated policy.

9. Contact

For any privacy-related questions or data requests, contact us at hello@himfy.com.