Last updated: June 2, 2026

Privacy Policy

HDM Business Consulting One Member PLC (trading as HDM Xperts) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our platform at hdmxperts.com and use our training, consulting, and research services.

1.Information We Collect

We collect information you provide directly when you create an account, submit a service request, communicate with our team, or otherwise interact with the platform. This includes your full name, email address, phone number, billing address, company name and title, payment information (processed by our PCI-compliant third-party processor — we do not store full card numbers), uploaded documents and files, and any communications you send us. We also automatically collect technical data such as your IP address, browser type and version, operating system, device identifiers, referring URLs, pages visited, and time spent on pages.

2.How We Use Your Information

We use your information to: (a) provide, maintain, and improve our training, consulting, and research services; (b) process transactions, send invoices, and deliver service-related communications; (c) match your requests with qualified experts and manage the full engagement lifecycle; (d) verify your identity, prevent fraud, and ensure platform security; (e) communicate with you about account activity, policy changes, and support inquiries; (f) analyze usage trends to improve user experience; and (g) send marketing communications where you have opted in. You may opt out of marketing at any time.

3.Lawful Basis for Processing (EEA Users)

If you are located in the European Economic Area, we process your personal information under the following lawful bases: (a) contract performance — to fulfill our service obligations to you; (b) legitimate interests — to improve our platform, prevent fraud, and ensure security; (c) consent — where you have explicitly agreed, such as for marketing cookies; and (d) legal obligation — where required by applicable law.

4.Data Sharing and Disclosure

We do not sell your personal information to third parties. We may share your data with: (a) service providers who assist in operating the platform, including cloud infrastructure providers, payment processors, email delivery services, and analytics providers — all bound by data processing agreements; (b) experts and consultants engaged to fulfill your service requests, limited to information necessary for the engagement; (c) professional advisors including lawyers, auditors, and insurers where necessary; and (d) law enforcement or regulatory authorities where required by Ethiopian law or other applicable law, or to protect our legal rights.

5.Data Security

We implement industry-standard technical and organizational security measures, including: encryption of data in transit using TLS 1.3; encryption of data at rest using AES-256; role-based access controls with least-privilege principles; regular security audits and penetration testing; intrusion detection and monitoring systems; employee security training; and incident response procedures. While we take these precautions seriously, no method of electronic storage or transmission is 100% secure.

6.Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with services. Following account closure or termination of services, we retain your data for the following periods: (a) account and transactional data — 7 years to comply with tax and legal obligations; (b) communications and support records — 3 years; (c) usage analytics — 26 months in aggregated form; (d) deleted accounts — data is anonymized or securely destroyed within 90 days of your deletion request.

7.International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. When we transfer data across borders, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission and Data Processing Agreements (DPAs) with all sub-processors. Our primary infrastructure is hosted in the United States and Germany.

8.Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal data: (a) right to access — request a copy of the data we hold about you; (b) right to rectification — correct inaccurate or incomplete data; (c) right to erasure — request deletion of your data, subject to legal retention obligations; (d) right to restrict processing — limit how we use your data; (e) right to data portability — receive your data in a structured, machine-readable format; (f) right to object — object to processing for direct marketing or legitimate interests; (g) right to withdraw consent — where processing is based on consent. To exercise these rights, contact our Data Protection Officer at dpo@hdmxperts.com. We will respond within 30 days.

9.Cookies and Tracking Technologies

We use the following categories of cookies: (a) essential cookies — required for platform functionality, authentication, and security; (b) functional cookies — remember your preferences and settings; (c) analytics cookies — help us understand how users interact with the platform; (d) marketing cookies — used to deliver relevant advertisements and measure campaign effectiveness (only with your consent). You can manage cookie preferences through your browser settings. Disabling certain cookies may affect platform performance.

10.California Privacy Rights (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you additional rights: (a) right to know — request disclosure of the categories and specific pieces of personal information we have collected; (b) right to delete — request deletion of personal information we have collected, subject to exceptions; (c) right to opt out — direct us not to sell your personal information (we do not sell personal information); (d) right to non-discrimination — we will not discriminate against you for exercising your CCPA rights. To exercise your CCPA rights, email dpo@hdmxperts.com.

11.Changes to This Policy

We may update this privacy policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last Updated" date and sending an email notification to the address associated with your account for significant changes.

Contact Us

If you have questions or requests regarding this Privacy Policy or our data practices, please contact us:

  • Entity: HDM Business Consulting One Member PLC
  • TIN: 0041144076
  • Address: Kirkos Subcity Wereda 10, Ras Mekonnen Ave, Leghar, Addis Ababa, Ethiopia
  • Phone: +251 967 88 31 83
  • Email: info@hdmxperts.com
  • DPO Contact: dpo@hdmxperts.com

This Privacy Policy is governed by applicable data protection laws, including the General Data Protection Regulation (GDPR) for EEA users and the California Consumer Privacy Act (CCPA) for California residents.