Privacy Policy
Last updated: March 7, 2026. This policy explains how Hunhu collects, uses, stores, and protects your personal information.
1. Who We Are
Hunhu ("we," "us," or "our") operates the website hunhu.us and related services (collectively, the "Platform"). Hunhu provides a white-labeled directory platform for organizations ("Agencies"), service providers ("Providers"), and end users ("Clients").
For the purposes of the EU General Data Protection Regulation (GDPR), UK GDPR, and other applicable data protection laws, Hunhu is the data controller for personal data collected through the Platform. For questions about this policy, contact us at support@hunhu.us.
2. Information We Collect
2.1 Information You Provide
- Account information: name, email address, phone number, business name, and professional credentials when you register or apply.
- Profile information: biography, photos, service descriptions, certifications, location, and other details you add to your directory listing.
- Communications: messages you send through our contact forms, support inquiries, or feedback submissions.
- Payment information: billing details processed through our third-party payment processors (we do not store full payment card numbers).
2.2 Information Collected Automatically
- Usage data: pages visited, features used, search queries, click patterns, and session duration.
- Device and technical data: IP address, browser type and version, operating system, device identifiers, screen resolution, and language preferences.
- Cookies and similar technologies: we use cookies, pixels, and local storage to recognize returning visitors, analyze traffic, and improve functionality. See Section 9 for details.
- Location data: approximate geographic location inferred from your IP address. We do not collect precise GPS location unless you grant explicit permission.
2.3 Information from Third Parties
We may receive information from identity verification services, analytics providers, advertising partners, and social media platforms when you connect your accounts or interact with our ads.
3. How We Use Your Information
| Purpose | Legal Basis (GDPR) |
|---|---|
| Providing and operating the Platform, including directory listings and booking | Performance of contract |
| Account creation, authentication, and customer support | Performance of contract |
| Sending transactional emails (account confirmations, booking updates, security alerts) | Performance of contract |
| Analytics and service improvement, A/B testing, and performance monitoring | Legitimate interest |
| Marketing communications (with opt-in) | Consent |
| Fraud prevention, security, and abuse detection | Legitimate interest / Legal obligation |
| Compliance with applicable laws, regulations, and legal processes | Legal obligation |
4. How We Share Your Information
We do not sell your personal data. We may share information in the following circumstances:
- With Agencies and Providers: your directory profile information is shared with the organizations and providers in your network as necessary to operate the Platform.
- Service providers: we share data with third-party vendors who help us operate the Platform (hosting, email delivery, analytics, payment processing). These vendors are bound by data processing agreements.
- Legal requirements: we may disclose information when required by law, subpoena, court order, or government regulation, or to protect our rights, property, or safety.
- Business transfers: in the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you of any change in controller.
- With your consent: we may share data for purposes you have specifically agreed to.
5. International Data Transfers
Hunhu operates globally and may transfer your personal data to countries outside your country of residence, including the United States. When we transfer data outside the European Economic Area (EEA), United Kingdom, or Switzerland, we rely on appropriate safeguards such as:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Adequacy decisions by the relevant data protection authority
- Binding corporate rules or other legally recognized mechanisms
6. Data Retention
We retain your personal data only as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required by law. Specifically:
- Active accounts: data is retained for the duration of your account plus 30 days after deletion request.
- Inactive accounts: we may delete or anonymize data for accounts inactive for more than 24 months after providing notice.
- Legal and compliance records: certain records may be retained for up to 7 years as required by tax, financial, or regulatory obligations.
- Anonymized/aggregated data: may be retained indefinitely for analytics and research purposes.
7. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Access: request a copy of the personal data we hold about you.
- Rectification: request correction of inaccurate or incomplete data.
- Erasure: request deletion of your personal data ("right to be forgotten").
- Restriction: request that we limit how we process your data.
- Data portability: receive your data in a structured, machine-readable format.
- Objection: object to processing based on legitimate interests or for direct marketing.
- Withdraw consent: where processing is based on consent, you may withdraw it at any time.
- Non-discrimination: exercising your privacy rights will not result in discriminatory treatment.
To exercise any of these rights, contact us at support@hunhu.us. We will respond within 30 days (or the period required by applicable law). We may ask you to verify your identity before fulfilling your request.
8. Jurisdiction-Specific Disclosures
8.1 European Economic Area, United Kingdom & Switzerland (GDPR / UK GDPR)
If you are located in the EEA, UK, or Switzerland, you have the rights described in Section 7 above. You also have the right to lodge a complaint with your local data protection authority. Our legal bases for processing are described in Section 3.
8.2 California Residents (CCPA / CPRA)
California residents have the right to know what personal information we collect, disclose, and sell (we do not sell personal information). You may request access, deletion, and correction of your data. You may also opt out of "sharing" personal information for cross-context behavioral advertising. To make a request, email support@hunhu.us or use the contact form on our website.
8.3 Brazil (LGPD)
If you are located in Brazil, you have the right to confirmation of processing, access, correction, anonymization, portability, deletion, information about sharing, and the right to revoke consent.
8.4 Canada (PIPEDA)
Canadian users may access and challenge the accuracy of their personal information held by Hunhu. We obtain meaningful consent for the collection, use, and disclosure of personal information.
8.5 Australia (Privacy Act 1988)
Australian users have the right to access and correct their personal information. We comply with the Australian Privacy Principles (APPs).
8.6 Other Jurisdictions
We are committed to complying with applicable privacy laws worldwide. If you have questions about how your local laws apply, please contact us at support@hunhu.us.
9. Cookies & Tracking Technologies
We use the following types of cookies:
- Strictly necessary: required for core functionality (authentication, security, load balancing). Cannot be disabled.
- Functional: remember your preferences and settings (language, region).
- Analytics: help us understand usage patterns and improve the Platform (e.g., Google Analytics with IP anonymization enabled).
- Marketing: used to deliver relevant advertisements and measure campaign effectiveness. Only set with your consent.
You can manage cookie preferences through your browser settings. Disabling certain cookies may affect Platform functionality.
10. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including:
- Encryption of data in transit (TLS 1.2+) and at rest
- Regular security assessments and penetration testing
- Role-based access controls and least-privilege principles
- Incident response procedures and breach notification processes
- Employee training on data protection and security practices
While no method of transmission or storage is 100% secure, we are committed to protecting your data and will notify you of any breach that affects your rights, as required by applicable law.
11. Children's Privacy
The Platform is not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If we learn that we have collected data from a child under 16, we will take steps to delete it promptly. If you believe a child has provided us with personal data, please contact us at support@hunhu.us.
12. Third-Party Links
The Platform may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any personal data.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the revised policy on this page with an updated "Last updated" date. For significant changes, we may also provide notice via email or a prominent banner on the Platform. Your continued use of the Platform after changes take effect constitutes acceptance of the revised policy.
14. Contact Us
If you have questions, concerns, or requests related to this Privacy Policy or your personal data, please contact us:
- Email: support@hunhu.us
- Website: www.hunhu.us
We will acknowledge your inquiry within 5 business days and provide a substantive response within 30 days (or the period required by applicable law).