Privacy Policy

Last updated: October 2025

1. Who We Are

This Privacy Policy explains how Oy Hugo Korhonen Creative Ltd (“we,” “us,” “our”) collects, uses, and protects your personal data.
We operate under Finnish law and the EU General Data Protection Regulation (GDPR).

Data Controller
The data controller responsible for your personal data is Oy Hugo Korhonen Creative Ltd, a company registered in Finland.

You can contact us regarding privacy matters by email at support@hugokorhonen.com.

Our registered business details are listed in the Contact section at the end of this policy.

2. Information We Collect

We may collect and process the following categories of personal data:

  • Identification data: name, email address, phone number, social media handle, business name, VAT number

  • Billing and payment data: billing address, purchase history, transaction ID, tax status, VAT location data

  • Communication data: messages via contact forms, email, WhatsApp, or social media DMs

  • Coaching data: information you share in calls or messages, progress updates, screenshots, and materials you provide (consent requested before recordings)

  • Marketing data: newsletter subscriptions, ConvertKit tags and engagement data, testimonials, marketing preferences

  • Technical data: IP address, browser type, device and operating system information, timestamps recorded by our web host

  • Scheduling data: details you provide when booking through Calendly (name, email, country, timezone, and optional answers such as investment readiness)

3. How We Use Your Information

We process personal data only when we have a lawful basis:

  • Contract performance – to deliver the coaching, courses, or products you purchased

  • Legal obligation – to comply with Finnish accounting and tax requirements

  • Legitimate interest – to communicate with clients and improve our services

  • Consent – for marketing emails, testimonials, and recorded sessions

We use data to:

  • Deliver programs and materials you purchase

  • Manage payments and invoices

  • Communicate with clients and leads

  • Send marketing emails (if you subscribed)

  • Comply with legal and financial obligations

4. Email Subscriptions and Marketing

When you subscribe to our newsletter or email list, you consent to receive updates, marketing messages, and educational content related to our services, products, and offers.

We use ConvertKit (Kit) to manage our email communications and track engagement (such as opens and link clicks) to improve the relevance of our content.

We may occasionally share information about third-party offers we believe may be relevant to you. We never share your email address with external partners.

You can unsubscribe at any time by clicking the link at the bottom of any email.

5. Where Your Data Is Stored and Processed

We use secure, reputable services to run our business. Personal data may be processed inside or outside the EU/EEA under approved safeguards.

Main tools and processors

  • Squarespace – website hosting and analytics

  • Fathom – privacy-focused analytics and call recording

  • Stripe & PayPal – payment processing and tax compliance

  • Link – secure Stripe autofill checkout

  • Gumroad – digital sales and delivery platform

  • ConvertKit (Kit) – email marketing and newsletter automation

  • Manychat – Instagram DM automation. Messages and details you send via our Instagram account are processed by Manychat, which provides us with your name, username, and message content as provided through Instagram. Manychat may also automatically tag users or record interactions (for example, when you click a link or reply to a message) to help us respond efficiently and send relevant information.

  • ScoreApp – quizzes and scorecards

  • Senja – testimonial collection

  • Google Forms & Jotform – applications and feedback forms

  • Calendly – call booking and scheduling

  • Zoom & Google Meet – online meetings and coaching

  • WhatsApp – client communication

  • Gmail / Google Workspace – email and documents

  • Airtable – client and lead management

  • Google Drive & Google Sheets – file storage and organization

  • Notion – client dashboards and project management

  • Linktwn – anonymous link tracking

  • Whop – course, community, and membership hosting

  • Skool – community and course platform

  • Accountant – financial reporting and invoicing support

AI tools used for insights
We may occasionally use secure, privacy-protected AI tools to summarize notes, analyze anonymized materials, or generate internal insights. These tools are used strictly for internal purposes. Personal data is not used for AI training, and any identifiable information is treated confidentially.

Cookies and Tracking
Our website does not use cookies or tracking technologies beyond those strictly necessary for security and basic functionality.

6. How Long We Keep Your Data

We retain personal data only as long as necessary for its purpose and to meet legal requirements.

Accounting records are kept according to the Finnish Accounting Act (1336/1997).

When data is no longer needed, it is securely deleted or anonymized.

7. Sharing of Data

We share personal data only with trusted service providers and professionals who assist our operations and are bound by confidentiality.

We never sell or rent personal information.

Data may also be disclosed if required by law or to protect our legal rights.

8. International Transfers

Some processors (e.g., Google, Stripe, and similar vendors) are based outside the EU/EEA.

When data is transferred abroad, we rely on EU Standard Contractual Clauses or other approved safeguards to ensure adequate protection.

9. Your Rights

Under the GDPR and Finnish Tietosuojalaki, you have the right to:

  • Access the personal data we hold about you

  • Request correction of inaccurate data

  • Request deletion of data (where legally possible)

  • Restrict or object to processing

  • Withdraw consent at any time (for example, unsubscribe from emails)

  • Request data portability in a machine-readable format

To exercise any of these rights, contact support@hugokorhonen.com.

We respond within one month as required by law.

If unsatisfied, you may contact the Finnish Data Protection Ombudsman (Tietosuojavaltuutettu).

10. Security

We apply technical and organizational measures to protect your data from loss, misuse, or unauthorized access.

While no method is 100 % secure, we work only with providers using strong encryption and industry-standard safeguards.

11. Children’s Privacy

Our services are not directed to children under 16, and we do not knowingly collect data from them.

12. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our services or legal requirements.

The most recent version will always be posted on this page and take effect immediately upon publication.

13. Governing Law

This Privacy Policy and our processing of personal data are governed by the laws of Finland and the EU General Data Protection Regulation (GDPR).

14. International Users

While our company is based in Finland and subject to Finnish and EU data protection law, we welcome clients worldwide.

Our commitment to privacy and transparency applies equally to all users, regardless of country of residence.

15. Contact

For any privacy-related questions or data requests, please contact:

Oy Hugo Korhonen Creative Ltd
Kanavaharjunkatu 1 A 12, 70840 Kuopio, Finland
Email: support@hugokorhonen.com
Business ID 3555828-2 VAT FI35558282