Privacy Policy

1. Introduction

Hanami Enterprises, LLC, doing business as Hanami Social ("we," "us," or "our"), respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, and safeguard information when you visit hanamisocial.com and hanamisocial.jp (collectively, the "Site").

2. Information We Collect

Information you provide directly:

• Name and email address when you book a strategy call through our scheduling partner (Cal.com)
• Email address when you contact us via email
• Name, work email, company, message, and any website, planned investment, currency or timing you provide through our inquiry form
• Any information you voluntarily share during consultations

Information collected automatically:

• Browser type, version, and operating system
• Pages visited, time spent on each page, and scroll depth
• Referring URL and UTM campaign parameters (stored in your browser's local storage)
• Device type, screen resolution, and viewport dimensions
• Approximate geographic location (country level, derived from IP address)
• IP address and browser information recorded in server event logs
• Interactions with site features such as button clicks, link clicks, searches, and content copies
• Page load performance metrics (Core Web Vitals: LCP, INP, CLS)

3. Legal Basis for Processing

We process your personal information on the following legal bases:

• Consent, when you voluntarily provide information (e.g., booking a call, contacting us)
• Legitimate interest, to analyze site usage, improve our services, and ensure site security. We balance our interests against your rights and only collect data proportional to our needs.
• Contract performance, to deliver services you have requested

4. How We Use Your Information

• To schedule and conduct strategy consultations
• To respond to your inquiries
• To understand how visitors use the Site so we can improve content, navigation, and performance
• To attribute marketing efforts through UTM parameter tracking
• To analyze which resources (e.g., hook templates) are most useful to visitors
• To monitor site performance and fix technical issues

5. Analytics and Tracking

We use the following analytics technologies:

• Cloudflare Web Analytics, provided by Cloudflare, Inc. Collects page views, performance metrics (Core Web Vitals), and aggregate visitor data. Cloudflare Web Analytics is privacy-first: it does not use cookies, does not track individual users across sites, and does not collect personal information. See Cloudflare's Privacy Policy.
• First-party event analytics: our Cloudflare-hosted endpoint records interactions with the Site, a temporary browser-session identifier, IP address, browser information and country. The English homepage sends page paths, referring-site origins and fixed interaction labels; it does not send inquiry-field contents to this endpoint.
• Microsoft Clarity and PostHog: we use these services across the English and Japanese Site to understand page visits, fixed interaction events, and usability. We mask inquiry fields in Clarity replay and use event tracking without replay on tools that handle private media or quiz responses. We do not send form answers, pasted scripts, uploaded media or filenames as analytics events. This event and replay tracking is disabled in local previews and when supported browser privacy signals request it. See Microsoft's Privacy Statement and PostHog's Privacy Policy.
• LINE Tag (Japanese-language pages only), provided by LY Corporation. Uses cookies and a tracking pixel to measure conversions such as LINE friend-add clicks. You can opt out at LINE's opt-out page.

6. Third-Party Services

The Site uses the following third-party services:

• Cal.com, for scheduling consultations. See Cal.com's Privacy Policy.
• Cloudflare, for hosting, CDN, DNS, and analytics. See Cloudflare's Privacy Policy.
• Google Fonts, for web typography. See Google's Privacy Policy.
• Notion: stores inquiries in our customer relationship database so we can review and respond to them. The inquiry includes the details you submit and available campaign attribution. See Notion's Privacy Policy.
• Slack: receives an internal notification with a link to the saved inquiry. The form does not include your message or contact details in that notification. See Slack's Privacy Policy.
• Tally: some other pages link to our external inquiry form. See Tally's Privacy Policy.
• LINE / LY Corporation, if you connect with us via LINE or visit our Japanese-language pages. See LINE's Privacy Policy.

7. Cookies and Local Storage

Cookies: the Site uses browser storage as described below. Microsoft Clarity is configured with analytics and advertising cookie storage denied by default. PostHog uses browser-session storage with cookies disabled. LINE Tag (on Japanese-language pages only) uses cookies for conversion tracking. You can opt out via LINE's opt-out page or adjust your browser's cookie settings.

Local storage: We use your browser's local storage to remember your language preference and UTM campaign parameters. Session storage holds a temporary session identifier for analytics that is automatically cleared when you close your browser. You can clear all stored data at any time through your browser settings.

8. International Data Transfers

Hanami Enterprises, LLC is based in the United States. Your data may be processed in the United States and other countries where the service providers listed above operate. These transfers are necessary to provide our services and are protected by the service providers' data protection commitments, including Standard Contractual Clauses where applicable.

9. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share information only as necessary to provide our services (e.g., scheduling through Cal.com), to comply with legal obligations, or to protect our rights.

10. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected. Analytics data is retained in aggregate form. Session-level analytics data is retained for up to 90 days. You may request deletion of your data at any time.

11. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including encryption in transit (TLS/HTTPS), secure hosting via Cloudflare, and access controls. However, no method of transmission over the Internet is 100% secure.

12. Your Rights

Depending on your location, you may have the right to:

• Access, correct, or delete your personal information
• Object to or restrict processing of your information
• Request a copy of your data in a portable format
• Withdraw consent at any time
• Lodge a complaint with a supervisory authority

For residents of Japan: Under the Act on the Protection of Personal Information (APPI), you have the right to request disclosure, correction, deletion, or cessation of use of your personal information.

To exercise any of these rights, contact us at contact@hanamisocial.com. We will respond within 30 days.

13. Data Breach Notification

In the event of a data breach that poses a risk to your rights, we will notify affected individuals and relevant authorities within 72 hours of becoming aware of the breach, as required by applicable law.

14. Children's Privacy

The Site is not directed at individuals under 18 years of age. We do not knowingly collect personal information from children.

15. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Material changes will be highlighted for 30 days following the update.

16. Contact Us

If you have any questions about this Privacy Policy, please contact us at contact@hanamisocial.com.

Hanami Enterprises, LLC (d/b/a Hanami Social)