Privacy Policy

Pacific Solutions ("we", "us", "our") respects your privacy. This policy explains what personal data we collect through this website, why we collect it, and the rights you have over it under the EU General Data Protection Regulation (GDPR) and applicable Finnish data protection law.

1. Who is responsible for your data

The data controller is:

Prashanta Paudel, trading as Pacific Solutions (sole proprietorship / toiminimi)
Helsinki, Finland
Email: prashant@prashantapaudel.com.np

2. What data we collect

We only collect personal data that you actively provide to us. We do not use analytics trackers, advertising pixels, or third-party tracking cookies on this website.

• Contact form submissions: name, email address, company name, service of interest, indicative budget, and any message content you provide.
• Direct email correspondence: your email address and the content of your messages, if you contact us directly.
• Client engagement data: if you become a client, we may collect additional data necessary to deliver the agreed services (e.g. billing details, technical access credentials scoped to the engagement) under a separate written agreement.

3. Why we collect it & our legal basis

• Responding to inquiries — legal basis: your consent, given by submitting the form (Art. 6(1)(a) GDPR).
• Preparing and delivering a service you requested — legal basis: performance of a contract or steps prior to entering one (Art. 6(1)(b) GDPR).
• Meeting accounting and tax obligations for client invoices — legal basis: legal obligation (Art. 6(1)(c) GDPR).
• Improving this website's accuracy and content — legal basis: legitimate interest (Art. 6(1)(f) GDPR), balanced against your rights.

4. Who we share data with

We do not sell or rent your personal data. Limited, necessary sharing occurs with:

• FormSubmit.co — a third-party form-processing service used to deliver contact form submissions to our email inbox. Submissions pass through their infrastructure in transit; see FormSubmit's privacy policy for details.
• Hosting provider (Vercel Inc.) — hosts the static website files; standard server access logs (IP address, browser type, requested page) may be processed as part of normal web hosting operation.
• Accounting/invoicing tools — for confirmed client engagements only, to meet Finnish bookkeeping and tax law requirements.
• Authorities, where disclosure is required by law.

5. How long we keep it

• Contact form and email inquiries that do not result in an engagement: retained for up to 12 months, then deleted.
• Client contract and invoicing records: retained for at least 6 years, as required by Finnish accounting law (Kirjanpitolaki).
• You may request earlier deletion of non-statutory data at any time (see Section 8).

6. Cookies & tracking

This website does not set analytics, advertising or third-party tracking cookies. Your browser may store a single, strictly-necessary local preference (your light/dark theme choice) using localStorage; this data stays on your device, is never transmitted to us, and is not personal data under the GDPR.

7. How we protect your data

We apply reasonable technical and organizational measures appropriate to a small consultancy: encrypted transport (HTTPS) for all website traffic, least-privilege access to any client systems, and no unnecessary retention of sensitive data. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Your rights under the GDPR

If you are located in the European Economic Area (or otherwise protected by the GDPR), you have the right to:

• Access the personal data we hold about you;
• Rectify inaccurate or incomplete data;
• Request erasure of your data ("right to be forgotten"), subject to legal retention obligations;
• Restrict or object to certain processing;
• Receive your data in a portable format;
• Withdraw consent at any time, without affecting prior lawful processing;
• Lodge a complaint with a supervisory authority — in Finland, the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto, tietosuoja.fi).

To exercise any of these rights, contact prashant@prashantapaudel.com.np. We will respond within one month, as required by the GDPR.

9. International data transfers

Our hosting and form-processing providers may process data on servers located outside the EEA. Where this occurs, we rely on providers that maintain appropriate safeguards, such as the EU Standard Contractual Clauses or an adequacy decision.

10. Children's data

This website and our services are intended for businesses and professionals. We do not knowingly collect personal data from individuals under 16.

11. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page will always reflect the most recent revision. Material changes will be reflected here; we encourage you to review this page periodically.

12. Contact

Questions about this policy or how your data is handled can be sent to prashant@prashantapaudel.com.np.