Requests for assistance
When you send a project or community request, we collect your name, email, organization or project name, country if provided, the work requested and an existing website address if relevant. A community request also includes nonprofit status, the organization’s mission and whether it needs a new website or a revamp. We use this information to review the request, contact you and discuss the work. Please do not include sensitive personal information, passwords or payment details.
Requests are stored privately in Supabase and organized in the HMD Operations CRM. Authorized administrators can add internal notes, assign responsibility, record the next action and set a follow-up date. Workflow changes retain a private history. Access is restricted to separately authorized HMD Operations administrators. Sending a form does not create a customer account, guarantee acceptance or commit either party to an engagement. The form shows a reference only after the request has been saved.
Security & technical information
The request service uses validation and submission limits to reduce abuse. It stores a one-way, keyed fingerprint derived from the network address for this purpose; the application does not store the raw network address with the request. Supabase and Vercel may process technical information needed to provide and protect their services.
Accounts
Client and administrator sign-in use Supabase. Passwords are sent directly to Supabase over HTTPS. They are not stored in website source or browser storage. Sessions are held in the current page and cleared on sign-out or when the page closes. Client access and administrator access are separate memberships; signing in does not grant access to other clients’ information or the administrator inbox.
Customer workspaces
When workspace access is arranged, we store the projects, tasks and decisions you enter, including outcomes, requirements, statuses and due dates. Workspace access requires an active, explicit membership for that organization. Owners and editors can create or update work; viewers can read it. Changes record the signed-in actor and a private history. HMD administrator status alone does not grant access to a customer organization’s workspace. Please do not enter passwords, payment details or sensitive personal information in project notes. Workspace activity is excluded from website analytics.
Use & retention
Request information is used to handle the inquiry and any resulting relationship. It is not published on the website. Contact HMD through the request form if you need to correct or remove a request, quoting the reference where available. Requests for removal are reviewed against any obligations connected with an active engagement.
Country, language & analytics
Your country choice may be saved in your browser so it remains available on your next visit. You can change it to Global in the country menu. The choice is used to frame your inquiry; it does not track your location. The hosting provider processes the page, image and video requests needed to display the site.
Optional website analytics
With your permission, we use Google Analytics to understand visits to public pages and completed requests. Google processes cookie identifiers, device and browser information, network information and the public pages visited. Analytics stays off until you choose Allow analytics. Declining does not affect the website or request forms. We do not enable advertising personalization or Google signals.
We exclude client and administrator areas, request contents and contact details from Analytics. Page addresses sent by our integration exclude query strings and fragments; referrers are omitted. A completed-request event carries no form contents or request reference. Google may process data on servers outside your country. See how Google uses information from sites that use its services.
You can change your choice using Analytics settings in the footer. Your choice is saved in this browser for up to six months; Analytics cookies, when allowed, expire after six months. Declining clears this site’s Analytics cookies and stops future collection. Browser controls and blockers may also prevent measurement. We honor the browser’s Global Privacy Control signal by keeping Analytics disabled.
Illustrative media & links
Stock photography and film are illustrative. They do not represent HMD employees, facilities, clients or past engagements unless expressly stated. Third-party links are subject to their own privacy practices.
Notice version: 7 November 2026.