Privacy Policy

Last updated: June 13, 2025

1. Who I Am / Data controller

This website is a personal portfolio operated by Marimo Honda, a private individual based in Switzerland. The site is intended to showcase my work and support professional opportunities in UX research and design.

Data controller / operator:
Marimo Honda
Contact: please use the contact form on this website.

2. What data is collected

Contact form: When you submit the contact form you provide your name, email address, and message. Those submissions are sent to Formspree and may be stored by them.
Donations (Ko‑fi): If you support me via Ko‑fi, Ko‑fi and its payment providers process any payment information; I do not collect or store payment card data on this site.
Site hosting & resources: The site is hosted on GitHub Pages and loads fonts from Google Fonts. These third parties may receive your IP address and other technical data when you access the site.
Analytics & cookies: At the time of writing this site does not run analytics scripts or set tracking cookies. If analytics are added in future a cookie banner will be provided where required.

3. Purpose & legal basis for processing

Contact form: Purpose — to receive and respond to enquiries. Legal basis — processing is necessary for the legitimate interest of responding to enquiries or based on your consent when provided.
Donations: Purpose — to process and receive donations. Legal basis — contractual/consent as handled by Ko‑fi and their payment processors.
Hosting and technical delivery: Purpose — to deliver website content to visitors. Legal basis — legitimate interest in operating the website.

4. Recipients and international transfers

Formspree, Inc. processes contact form submissions. See Formspree’s Privacy Policy for details. Where Formspree or other subprocessors transfer data outside the EU/EEA/Switzerland, they should rely on appropriate safeguards (e.g., Standard Contractual Clauses) — check their DPA and documentation.
Ko‑fi Ltd processes donations; see Ko‑fi’s Privacy Policy. Payment processing may be handled by third parties (e.g., Stripe, PayPal).
GitHub, Inc. hosts the site (GitHub Pages). Google Fonts may be served from Google servers. These parties are listed here for transparency; consult their privacy pages for transfer/safeguard details.

5. Retention

Contact form submissions are retained by Formspree and may be available to me for up to 12 months by default (please confirm retention with Formspree if required). If you wish your data to be deleted sooner, contact me via the contact form or email and I will request deletion where possible.

6. Your rights

You have the right to access, correct, or delete personal data we hold about you.
You have the right to object to or restrict certain processing, and to request data portability where applicable.
To exercise these rights, please use the contact form on this website.
If you are in the EU you may lodge a complaint with your local supervisory authority. In Switzerland you may contact the Federal Data Protection and Information Commissioner (FDPIC): https://www.edoeb.admin.ch/edoeb/en/home.html.

7. Hosting and publication

This website is published using GitHub Pages and uses GitHub’s infrastructure to serve static files. For details about GitHub’s processing and transfers see GitHub's privacy statement: https://docs.github.com/en/site-policy/privacy-policies/github-privacy-statement.

8. External resources (fonts, embeds)

Google Fonts may be loaded from Google’s servers. Loading fonts from Google may involve transferring your IP address to Google. If you prefer to avoid this, consider self‑hosting the fonts.

9. Changes to this policy

I may update this privacy policy from time to time. The "Last updated" date at the top of this page indicates when changes were last made.

10. Contact

If you have questions about this privacy policy or wish to exercise your rights, please contact me via the contact form.