Privacy policy
This policy explains how personal data is processed when you visit thehakugroup.com or contact us. It is written to meet the Swiss Federal Act on Data Protection (FADP) and, where it applies, the EU General Data Protection Regulation (GDPR).
1. Controller
Loic Shin Dutoit, Lausanne, Switzerland — shin@thehakugroup.com. The Haku Group is a company in formation; until its incorporation, Loic Shin Dutoit is responsible for the processing described here.
2. Data processed
When you visit the website: technical data such as your IP address, browser and device type, operating system, pages viewed, referring page, and date and time of access. This data is collected by our hosting provider through server logs and cookies.
When you contact us by email: your name, email address and the content of your message, plus any information you choose to share.
We do not ask for or knowingly process sensitive personal data through this website.
3. Purposes and legal basis
We process this data to operate, secure and improve the website, to produce anonymised visitor statistics, and to answer your messages. Under the GDPR, the legal basis is our legitimate interest in running a secure, functioning website and in communicating with you (Art. 6(1)(f) GDPR), and, where you contact us about a possible business relationship, steps taken at your request before entering into an agreement (Art. 6(1)(b) GDPR).
4. Cookies
The website is hosted on Squarespace, which sets cookies that are necessary for the site to work and, where enabled, analytics cookies used to compile visitor statistics. You can block or delete cookies in your browser settings; some features of the site may then not work as intended. We do not use advertising or tracking cookies for marketing purposes.
5. Service providers and transfers abroad
We use the following providers, who process data on our behalf:
Squarespace, Inc. (USA) and Squarespace Ireland Limited — website hosting, analytics and cookies.
Google LLC (USA) and Google Ireland Limited — email (Google Workspace).
Personal data may therefore be processed in the United States or other countries. Where those countries do not provide an adequate level of data protection, transfers rely on appropriate safeguards, such as certification under the Swiss–U.S. or EU–U.S. Data Privacy Framework or standard contractual clauses.
We do not sell or rent personal data and do not share it with third parties for their own marketing.
6. Retention
Personal data is kept only as long as needed for the purposes above or as required by law. Emails are kept as long as needed to handle your request and any resulting business relationship.
7. Your rights
Subject to applicable law, you may request access to your personal data, its correction or deletion, restriction of or objection to its processing, and a copy of data you provided in a portable format. Where processing relies on your consent, you may withdraw it at any time. To exercise these rights, write to shin@thehakugroup.com.
You may also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, if you are in the EU or EEA, with your local data protection authority.
8. Changes
This policy may be updated, for example when The Haku Group is incorporated. The current version is always published on this page.
Last updated: 16 October 2026