Privacy Policy

Finnstar Co is a consulting and advisory practice operated by Henry Finn from 5432 Geary Blvd, Unit 330, San Francisco, CA 94121, United States. For any privacy question, write to henry@finnstar.co.

Finnstar Co is the controller of the personal information described in this policy.

Information you send us. When you use the contact form or write to the firm, you provide your name, email address, organization, and whatever you choose to include in your message. The contact form opens your own email client — no form data is transmitted to or stored by this website.

Engagement information. During an engagement we hold the business contact details, materials, and correspondence necessary to perform the work.

Billing information. Invoicing is handled by Stripe. The firm receives transaction records — amount, date, status, and the billing name and email — but never full payment card numbers.

Technical information. The site is static and sets no first-party cookies. Standard server logs at the hosting provider may record IP address, user agent, and requested URL for security and reliability.

To respond to inquiries, to scope and perform engagements, to issue invoices and keep accounting records, and to comply with legal obligations. We do not use your information to build advertising profiles.

Where the GDPR applies, we process on the basis of performance of a contract (engagement delivery and billing), legitimate interests (responding to inquiries, securing the site), and legal obligation (tax and accounting records).

We do not sell, rent, or trade personal information. We share it only with service providers acting on our instructions — principally Stripe for payment processing, an email provider for correspondence, and a static hosting provider — and where required by law or to establish or defend legal claims.

This site sets no first-party cookies and runs no advertising trackers. Typography is served by Google Fonts, which receives a request from your browser as a technical consequence of loading the fonts. If privacy-respecting aggregate analytics are introduced, this policy will be updated before they are enabled.

Inquiry correspondence is kept while a prospective engagement is live and for a reasonable period afterward. Engagement records and invoices are retained for the period required by tax and accounting law — generally seven years — then deleted.

The site is served over HTTPS. Correspondence and engagement materials are held in access-controlled accounts. No system is perfectly secure; please do not send confidential material before a non-disclosure agreement is in place.

Depending on where you live, you may have the right to access, correct, delete, or port your personal information, to object to or restrict processing, and to withdraw consent. California residents may request disclosure of the categories of personal information collected and request deletion; we do not sell or share personal information as those terms are defined by the CCPA, and we will not discriminate against you for exercising any right.

To exercise a right, write to henry@finnstar.co. We respond within the time the applicable law allows and may need to verify your identity first.

The firm operates from the United States; information you send is processed there. This site is not directed to children under 16 and the firm does not knowingly collect their information.

Material changes will be reflected in the “last updated” date above. Contact: Henry Finn d/b/a Finnstar Co, 5432 Geary Blvd, Unit 330, San Francisco, CA 94121, United States — henry@finnstar.co.