Privacy Policy

Last Updated on August 2026.

This privacy policy describes how we collect, use, and process your personal information when you visit our website, kommit.co.

  1. Who We Are (Data Controller)

    The Data Controller is the entity that decides how and why your personal data is processed.

    Company Name: HLM Business

    Address: 297 Lake Monterey Cir, Boynton Beach, FL 33426 (USA)

    Contact Email: [email protected]

  2. What Information We Collect

    We believe in data minimization. We only collect information that is strictly necessary to operate our website and communicate with you.

    2.1. Data You Provide to Us
    We collect the data you submit through our forms:

    • Newsletter: your email address.
    • Talent enquiries: your name, email address, company name, the service you are interested in, and any message content.
    • Job applications: your name, email address, phone number, LinkedIn profile, the position you are applying for, any message content, and your CV or résumé if you choose to upload one.

    This data is collected on the basis of pre-contractual steps or our legitimate interest in responding to your enquiry. Job application data is used for recruitment purposes only, and is never shared outside kommit without your explicit consent.

    2.2. Data We Collect Automatically
    When you use our website, our infrastructure and security providers automatically collect standard essential technical information, including your IP address, browser type, and operating system. This is strictly required for security, network management, and delivering the website to your device.

  3. How and Why We Use Your Data

    We use your data for specific purposes and rely on a small number of third-party services to carry out these operations.

    3.1. Analytics
    We do not use Google Analytics, tag managers, marketing pixels, or any analytics product that sets cookies or creates persistent identifiers about you. Our infrastructure provider, Cloudflare, records aggregated, cookieless traffic measurements, which involves processing your IP address for that purpose. No personally identifiable information is stored and no profile is built about you.

    3.2. Managing Contacts and Sending Messages
    To deliver the messages you send through our forms and to manage our email communications, we use Mailgun, a service by Mailgun Technologies, Inc. This service processes your email address and the contents of your submission. The processing for this service occurs in the United States.

    3.3. Infrastructure and Hosting
    Our website is built and hosted on Cloudflare Pages, a platform provided by Cloudflare, Inc. This service processes basic network data, such as IP addresses, solely for the purpose of serving our website securely to your device.

    3.4. Traffic Optimization and Distribution
    To ensure our website is fast and secure globally, we use Cloudflare's content delivery network. It processes essential network data, such as IP addresses, strictly for caching, security, and DDoS protection.

  4. Data Processing, Security, and Retention

    We take appropriate organizational and technical security measures to prevent unauthorized access, disclosure, modification, or destruction of your Data. Our operations are certified against ISO/IEC 27001:2022; our General Information Security Policy covers the controls involved.

    Your Personal Data is retained only as long as necessary to fulfil the purposes for which it was collected — for example, until your enquiry has been answered, or for the duration of a recruitment process in the case of job applications. Where processing is based on your consent, we retain the data until you withdraw it. We may be obliged to retain Personal Data for longer where required to comply with a legal obligation or an order from an authority. Once the retention period expires, your Personal Data is deleted securely.

    Your Data is processed at our operating offices and in any other places where the parties involved in the processing are located. Depending on your location, this may involve transferring your Data to a country other than your own.

  5. Your Privacy Rights (GDPR and CCPA/CPRA)

    Depending on your location, such as the European Union or California, you have rights regarding your personal data. To the extent permitted by law, you have the right to:

    • Withdraw your consent at any time.
    • Object to the processing of your Data.
    • Access your Data to learn if it is being processed and obtain a copy.
    • Verify and seek rectification to update or correct your Data.
    • Restrict the processing of your Data.
    • Have your Personal Data deleted.
    • Receive your Data (portability) in a structured, machine-readable format.
    • Lodge a complaint with your competent data protection authority.

    Sale and Sharing of Data: We do not sell your personal information. Because we do not use tracking cookies or third-party marketing pixels, we do not "share" your personal data for cross-context behavioral advertising as those terms are defined under California law.

    To exercise any of your privacy rights, please contact us at [email protected]. These requests are free of charge and will be addressed within one month. We will not discriminate against you for exercising them.

  6. Cookie Policy

    We respect your privacy and have built this website to operate without invasive tracking.

    • No analytics or marketing cookies: we do not use any analytical, marketing, or tracking cookies. You will therefore not see a cookie consent banner on our website, because there is no non-essential storage to consent to.
    • Strictly necessary technical configurations only: we rely only on what is required to deliver the site securely, such as the network routing and security protocols managed by our CDN, Cloudflare. These cannot be disabled without breaking the website, and they do not track your behaviour across the internet.

    Most web browsers also allow you to manage or refuse cookies directly. Note that blocking strictly necessary items may prevent the website from functioning correctly.

  7. Additional Information

    Your Personal Data may be used for legal purposes in Court or in the stages leading to possible legal action arising from improper use of this website or related services.

    For operation and maintenance purposes, this website and any third-party services it relies on may collect files that record interaction with it (system logs) or use other Personal Data, such as your IP address, for that purpose.

    We reserve the right to make changes to this policy at any time, and we recommend checking this page, referring to the date of last modification above. If changes affect processing activities based on consent, we will collect new consent where required.

See also our Terms and Conditions and our General Information Security Policy.