Your data during a project

A practical commitment · White Hawk Kft. · August 2026

By the nature of this work I end up with access to your most sensitive material: transaction records, invoices, contracts, partner lists. It is entirely reasonable to think that through before you send the first file. This page answers the questions people usually ask at that point.

This is not the website privacy notice — that one covers the few details you submit through the contact form (privacy notice). This page is about working together.

I only ask for what the work needs

I do not ask for blanket access to everything "just in case". Each time I request data, I tell you exactly what I need and why. If a sample is enough — ten rows instead of fifty thousand, three invoices instead of the monthly two hundred — I ask for a sample.

Where it is stored and who can access it

  • Files live on my own machine, protected by a password and two-factor authentication. If the work also needs cloud storage, I name the specific service at the start of the project.
  • I am the only person with access. I do not bring in subcontractors; if that ever became necessary, I would tell you in advance and ask for your separate consent.
  • I never ask for passwords or access keys by email, and I do not store them in plain text files — we agree on a secure way to hand over access.

What I do with the data — and what I do not

  • I do not pass your data to third parties, do not use it for any other purpose, and do not reuse it in another client's work.
  • Whatever can be done locally is done locally: reviewing the structure of your files — how they are built, what formulas and errors they contain — runs on my own machine.

Artificial intelligence: I use it, and here is how

This part needs to be straight, because some of the speed comes from it: analysing your material with AI tools is part of my method, and I then work the result further using my own approach. What would be a week of manual review becomes a matter of days. I would rather not create the impression that this does not happen — so here are the terms it happens under.

  • I tell you before it happens: what I send, to which provider, and why. I name the provider at the start of the project, not afterwards.
  • Where personal data is involved, through business access. If the task requires data from which a natural person can be identified — a name, an address, an identifier — I use business (API) access with a data processing agreement behind it. Most process analysis does not need this: the structure of the files and a few sample rows are enough, without personal data.
  • Only as much as needed. Where the structure or a sample is enough, live data does not go at all; where the task allows it, I strip or replace names and identifiers first.
  • AI analysis is part of the method, not an optional extra — without it the work cannot be done in this form. If that is not acceptable to you, I respect that; in that case we do not enter into a contract. Better to settle it at the start.
  • Where processing involves personal data, the provider counts as a data processor — this is set out by name in the contractual annex.

How long I keep it, and what happens at the end

  • When the project closes, we account for every file and access handed over: whatever can be returned, I return; whatever I have no reason to keep, I delete.
  • Documents required for contractual accounting are kept for the statutory retention period; working files are not affected by this.
  • On request I confirm in writing, at any time, what I still hold.

How I refer to the work

I refer to completed work anonymously only — for example "invoice preparation for a vehicle trading company" — without your company name, data or figures. A named reference happens only if we agree on it separately. The case studies on the home page were written this way.

In writing, not just here

This page is the public summary of the commitment. Every project also comes with a one-page annex setting out the same points in detail for your project specifically: what I received, where it is, and for how long. I sign a non-disclosure agreement on request — before the work starts, not afterwards. It is mutual: it protects your data and my methods alike. If you would like to read it first, ask and I will send it over.

Any questions about these points? Ask before you hand anything over: [email protected]. This page is deliberately short so that it actually gets read.

← Back to the home page