1. Overview of This Policy
This Privacy Policy explains how the services described on this website are developed and operated by the developer HKFinance, a practice operating under the full corporate name HK Financial Holdings, LLC, with a registered place of business at 134 W 13100 S Ste 200, Draper - 84020-9248, United States (US). The policy describes the categories of personal information we may collect, the purposes for which we process that information, the circumstances under which we may share it, and the rights and choices available to you.
We design systems for financial institutions and supporting organizations, and we hold ourselves to the same discipline we recommend to our clients. That discipline begins with transparency. We want you to understand exactly what happens to any information that reaches us, whether you are a visitor reading this policy, a representative of a client institution, or an individual whose records are touched by systems we design and operate.
Please read this policy carefully and in full. If you have questions that this document does not answer, you are welcome to reach us at note@hkfinance.hair or by telephone at +14259306711. We respond to every inquiry from a human being, usually within two business days.
2. Scope of This Policy
This Privacy Policy applies to the website located at www.hkfinance.hair, to all of its subpages, and to any related services, communications, and systems that we operate and that link to this policy. It also applies, where stated, to the design and operational services we deliver under written agreements with our clients.
The policy does not apply to websites operated by third parties, even where we provide links to them from our pages. When you leave our website for another destination, the privacy practices of that destination apply instead, and we encourage you to review them.
If you are a client of our managed care or systems services, the primary terms governing your engagement are set out in your signed agreement and in our Terms of Service. This Privacy Policy supplements those documents by describing in plain terms how we handle personal information in the course of our work.
3. Information We Collect
We collect information that falls into three broad categories: information you provide directly, information we collect automatically when you use our website, and information we receive from third parties in the course of our business. We limit collection to what is reasonably necessary for the purposes described in this policy.
We do not collect sensitive information such as government identifiers, financial account credentials, or health records through this website. Should such information be required in connection with a client engagement, it is gathered under the controls of a signed service agreement and handled in accordance with that agreement and applicable law.
The degree of information we collect depends on how you interact with us. A casual visitor who reads our pages provides very little. A prospective client who completes our contact form provides the details in that form. A retained client may provide substantially more information over the life of an engagement.
4. Information You Provide Directly
When you use the contact form on our website, you provide your name, your email address, an optional subject line, and the content of your message. You might also choose to include additional details in the body of your message, and you control what those details are.
If you correspond with us by email, telephone, or postal mail, we keep a record of that correspondence so that we can respond coherently and so that our teams can continue the conversation without asking you to repeat yourself. This includes voice call notes, written summaries, and the email threads themselves.
If you enter into a service agreement with us, we collect the business contact details of the individuals named in that agreement, including names, titles, professional email addresses, telephone numbers, and the postal address of the client organization. We also maintain billing records as required for lawful invoicing and tax compliance.
We ask only for the information we genuinely need. Optional fields are marked optional, and you may decline to provide nonessential information without any effect on the quality of our service.
5. Information Collected Automatically
Like most websites, we automatically record certain technical information when you visit. This includes your internet protocol address, the type of browser you use, the operating system of your device, the pages you view, the time of your visit, and the website that referred you to us.
This technical information is used to keep the site secure, to diagnose faults, to understand which sections are most useful to visitors, and to improve the general performance of the website. It is collected in aggregate and is not used to build profiles of individual visitors.
We may combine automatically collected information with other information described in this policy only where necessary to protect the security of our systems or to respond to a demonstrated legal requirement. We do not sell this data and we do not permit third parties to collect it from our site for advertising purposes.
6. Information From Third Parties
In the course of our work we may receive information about individuals from third parties. This most commonly occurs when a client organization introduces us to its personnel so that we can provide onboarding, training, or support, or when a public registry or business directory provides the official contact details of an organization we serve.
We also receive information from our service providers, such as payment processors that confirm completed transactions, and from our professional advisors where relevant to an engagement. In each case we only use such information for the purpose for which it was shared with us.
Where we receive information about individuals who are not our own contacts, we treat that information with the same care as information provided directly to us, and we apply the same retention and security standards.
7. How We Use Your Information
We use the information we collect for the following purposes: to respond to your inquiries and provide the information or services you request; to evaluate whether our services are a good fit for your organization; to deliver, operate, and improve the services we provide under agreement; to invoice you and manage our accounts; to maintain the security and integrity of our systems; to comply with legal obligations; and to protect our rights and the rights of others.
We may also use your information to send you service-related notices, such as confirmations, operational updates, and changes to this policy or our Terms of Service. These messages are part of the service relationship, and we do not require you to opt in to receive them.
We do not use your information for marketing purposes without your consent, and we do not sell, rent, or trade personal information to any third party. Any communications we send for promotional reasons will always identify us clearly and will include instructions on how to stop receiving them.
Where we process information on behalf of a client as part of a managed service, we process it only for the purposes documented in the service agreement, and we follow the client instructions associated with that agreement.
8. Legal Bases for Processing
We rely on several lawful bases for processing personal information, depending on the circumstances. Where we respond to a direct inquiry, the processing is necessary to take steps at your request prior to entering into a contract. Where we deliver services under agreement, the processing is necessary for the performance of that contract.
Where we secure our systems, maintain records, or make improvements to our website, the processing is based on our legitimate interests, which are the safe and effective operation of our business. We balance those interests against your rights and freedoms, and we do not process more information than the purpose requires.
Where we are required to retain records for tax, accounting, or regulatory purposes, the processing is based on a legal obligation to which we are subject. Where we rely on consent for a particular activity, we obtain that consent clearly and we honor any withdrawal of consent promptly.
10. Service Providers and Subprocessors
We engage a small number of service providers to support our operations. These include providers of website hosting, email and communication services, accounting and payment processing, and data backup. Each provider is selected with attention to its security posture and its compliance with applicable law.
Before engaging a provider, we review the provider agreement to confirm that personal information will be processed only for the purposes we specify, that it will be protected with appropriate technical and organizational measures, and that it will not be used for any independent purpose of the provider.
We maintain a current list of the categories of subprocessors we use. If you would like details about the providers engaged for a particular service, please contact us at note@hkfinance.hair and we will provide a summary of the relevant arrangements.
We remain responsible for the processing activities of our service providers under applicable privacy law, and we review our provider relationships on a regular basis to confirm they remain appropriate.
12. Data Retention
We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, to comply with legal and accounting obligations, to resolve disputes, and to enforce our agreements.
Contact form submissions are retained for a limited period, typically no more than twelve months, after which they are deleted unless the conversation leads to an active engagement. Correspondence related to an active agreement is retained for the life of the agreement and for a reasonable period afterward.
Financial and tax records are retained for the periods required by applicable law, which may be several years. Where we process data on behalf of a client, the retention period is governed by the service agreement and by the client instructions, and we return or delete such data at the end of the engagement as agreed.
When retention is no longer required, we delete or anonymize the information using commercially reasonable procedures designed to prevent unauthorized recovery.
13. Data Security
We apply a range of technical and organizational measures to protect personal information against unauthorized access, alteration, disclosure, and destruction. These measures are aligned with the security practices we design for our own clients.
Our controls include encryption in transit and at rest where appropriate, access controls that limit information to personnel with a legitimate need, logging and monitoring of access to sensitive systems, regular patching of our infrastructure, and mandatory security awareness training for our staff.
We test our controls on a regular basis and we maintain an incident response plan so that any suspected breach can be contained, investigated, and reported in accordance with applicable law. We will notify affected individuals and relevant regulators promptly where we have a legal duty to do so.
No method of transmission or storage is completely secure, and we cannot guarantee absolute protection. We commit to using reasonable and industry accepted measures, and to being candid with you about the safeguards we apply.
14. Privacy for Children
Our website and services are directed to business organizations and professional audiences. They are not intended for children, and we do not knowingly collect personal information from children under the age of thirteen.
If you believe that a child has provided personal information to us without the consent of a parent or guardian, please contact us at note@hkfinance.hair and we will take steps to remove that information from our systems and to stop any further collection from that child.
We do not condition the participation of a child in any activity on the disclosure of more information than is reasonably necessary. Because our services target regulated institutions and their personnel, contact with children through our systems is neither expected nor facilitated.
15. Your Privacy Rights and Choices
Depending on your jurisdiction, you may have the right to access the personal information we hold about you, to request correction of inaccurate information, to request deletion of your information, to restrict or object to certain processing, to request a copy of your information in a portable format, and to withdraw consent where processing is based on consent.
To exercise any of these rights, contact us at note@hkfinance.hair. We will respond to a verified request within the time required by applicable law, usually within thirty days. We may ask you to confirm your identity before acting on a request, to protect your information from unauthorized access.
You also have the right to lodge a complaint with a supervisory authority in the jurisdiction where you reside or where we operate, if you believe we have not handled your information in accordance with the law. We ask that you give us the opportunity to resolve your concern first.
We will not discriminate against you for exercising any of your privacy rights. Declining to share information or making a privacy request will not affect the quality of the services we provide.
16. International Data Transfers
Our principal place of business is in the United States, and our systems and records are primarily hosted in the United States. If you are located outside the United States, your information may be transferred to and processed in the United States, where data protection laws may differ from those in your country.
Where we transfer personal information across borders, we take steps designed to ensure that the information receives an appropriate level of protection, whether through the legal frameworks recognized in your jurisdiction, standard contractual clauses, or other safeguards accepted under applicable law.
If you have questions about the specific safeguards applied to an international transfer, please contact us and we will provide information about the measures in place for your particular situation.
17. Third Party Links
Our website may contain links to websites or services operated by third parties, such as industry publications, regulatory bodies, or our clients. These links are provided for convenience and do not mean that we endorse or control the content or practices of those destinations.
This Privacy Policy does not apply to third party websites. When you follow a link away from our site, the privacy practices of the destination site apply, and we encourage you to review the policy of any site you visit before providing personal information.
We are not responsible for the content, accuracy, or practices of third party sites, and we do not accept liability for their treatment of your information.
18. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, in technology, or in the law. When we make a material change, we will revise the effective date at the top of this page and take reasonable steps to bring the change to your attention.
Material changes may be announced on our website or communicated directly to clients. If the changes affect how we use information you have already provided, we will give you the opportunity to review the revised policy and, where required, to consent to the new terms.
Your continued use of our website or services after a revised policy takes effect constitutes your acceptance of the revised policy, to the extent permitted by law. We encourage you to review this page periodically.
19. How to Contact Us
If you have questions, concerns, or requests relating to this Privacy Policy or to the way we handle personal information, please contact us through any of the channels below.
Organization: HK Financial Holdings, LLC
Address: 134 W 13100 S Ste 200, Draper - 84020-9248, United States (US)
Email: note@hkfinance.hair
Telephone: +14259306711
Website: www.hkfinance.hair
We review every message personally. If your inquiry concerns a specific piece of information, please tell us enough detail for us to locate the relevant records, and we will handle your request with care and speed.
We will never ask you for your passwords or other credentials by email. If you receive a message that appears to come from us and requests such information, treat it as suspicious and contact us directly.