Legal
Privacy
and terms.
Applies to horizonpmo.io. Last updated 25 August 2026.
Privacy notice
What happens to your data when you visit horizonpmo.io. It is short because this site does very little.
This site sets no cookies and has no cross-site trackers. We count page views using our host's own privacy-friendly analytics: it stores nothing on your device, sets no identifier, and cannot tell us who you are. There is no sign-up, no contact form and no account. Fonts are served from this domain, not a third-party service, so simply reading these pages sends your data to nobody beyond the provider that already delivers it. We do not build a profile of you, and we do not sell or share data for advertising.
Who is responsible
MONO 360 LIMITED (trading as MONO360; “we”), a private company limited by shares incorporated in the Hong Kong SAR under Business Registration and Unique Business Identifier 80262113, registered office Unit B, 11/F, Yam Tze Commercial Building, 23 Thomson Road, Wan Chai, Hong Kong. Horizon PMO is a product of MONO360, not a company in its own right — any similarly named entity in another jurisdiction is unrelated to it. For anything in this notice, write to business@mono360.io.
What we collect on this site
Nothing that identifies you, directly. Three things involve data leaving your browser, and all three are listed below.
| What | Data involved | Why | Where it goes |
|---|---|---|---|
| Server logs | IP address, browser and device type, page requested, date and time | Serving the page and protecting it from abuse. This is standard web-server behaviour, not tracking. | Our hosting provider, Vercel Inc. (440 N Barranca Avenue #4133, Covina, CA 91723, USA), which serves this site from its global edge network. Vercel keeps request logs for one day, after which they are deleted. We do not export them anywhere else. |
| Page analytics | Page requested, referring site, country, browser and device type — all derived from the request itself. No cookies, no identifier, nothing written to your device. | To see which pages are read and whether the walkthrough link is used. Counts only; there is no profile behind them. | Vercel Inc. — the same provider that serves this site. Reported to us in aggregate, and we cannot identify you from it. |
| Booking a walkthrough | Name, email address, timezone, and anything you type into the booking form | To schedule and hold the meeting. | Cal.com, Inc. Their privacy notice governs that page — you leave this site to reach it. |
If you email us, we keep the email and your address for as long as we need to answer you and to keep a record of the exchange. Our mailbox is hosted by Zoho — see below.
Where the data goes, and who else sees it
Three companies process data on our behalf, and no others:
- Vercel Inc. (United States) — hosting this website and providing its page analytics. Vercel is certified under the EU–U.S. Data Privacy Framework, its UK Extension and the Swiss–U.S. Data Privacy Framework, and additionally relies on Standard Contractual Clauses for international transfers.
- Cal.com, Inc. (United States) — the booking page, and only if you choose to open it.
- Zoho Corporation B.V. (Beneluxlaan 4B, 3527 HT Utrecht, Netherlands) — email. Anything you send to us is stored in our Zoho mailbox. Zoho relies on Standard Contractual Clauses for international transfers.
We do not sell data, share it with advertisers, or pass it to anyone else unless the law requires it.
Why we are allowed to do this
Server logs rest on our legitimate interest in running a secure, working website. Booking a walkthrough and emailing us rest on your own request — you choose to start the contact.
Which law applies
We are established in Hong Kong and handle personal data under the Personal Data (Privacy) Ordinance (Cap. 486). Where we offer services to people in the United Kingdom or the European Economic Area, UK GDPR and the EU GDPR may also apply to that processing, and the rights below are available to you either way.
Your rights
You can ask us what personal data we hold about you, ask us to correct or delete it, object to how we use it, or ask for a copy. Write to business@mono360.io and we will respond within 30 days. You can also complain to your data protection regulator.
Because the only data this site holds about a visitor is a server log entry, we may not be able to identify you from an IP address alone — if that is the case, we will tell you so rather than guess.
Changes
If this notice changes, the date at the top of the page changes with it. We do not make changes retroactively.
Company & assurance
Who you would be contracting with, what we hold, and what happens if we stop. Written for a security or procurement review.
The entity
| Field | Detail |
|---|---|
| Registered name | MONO 360 LIMITED — note the space. The brand is written MONO360; the legal name is not. |
| Type | Private company limited by shares |
| Jurisdiction | Hong Kong SAR |
| Registration | Business Registration and Unique Business Identifier 80262113 — searchable on the Companies Registry. Hong Kong companies incorporated after 27 December 2023 carry one number, not a separate CR number. |
| Registered office | Unit B, 11/F, Yam Tze Commercial Building, 23 Thomson Road, Wan Chai, Hong Kong |
| Contact | business@mono360.io |
Horizon PMO is a product of MONO 360 LIMITED, not a company in its own right. Any similarly named entity in another jurisdiction is unrelated to it.
Certification
We do not hold SOC 2 or ISO 27001. We would rather state that here than have you find it in a questionnaire. Ask on a walkthrough and you will get the current position and the date we are working to — not a claim.
Continuity
Horizon PMO is built by a small team, so continuity belongs in the contract rather than in a brochure. Three things are open to negotiation before signature, and we will put each of them in writing: source escrow, data residency, and a written exit that returns your data in a usable form if we cease to supply.
How the product handles your data
Row-level security is defined in the database on every table that holds portfolio data, and identity-bound access is enforced by those policies. Server-rendered dashboards and AI-layer reads run on a service connection with an explicit tenant predicate on every query, with the policies as the backstop. Access is by SAML single sign-on against your identity provider, with SCIM provisioning and deprovisioning driven by your directory; when someone leaves it, their tenant membership is removed and new sign-in is blocked. Changes to the risk register, the governance pipeline, governance reviews and budgets are written to an append-only audit log scoped to your tenant.
MAIA, the AI layer, cannot compose SQL. It selects from a fixed catalogue of parameterised read-only statements, each reviewed before it is registered and each scoped to a single tenant.
This section describes the product. This website itself sets no cookies and runs no trackers; see the privacy notice above.
Terms of use
These cover this website only. They are not the agreement for the Horizon PMO product — that is a separate contract, signed separately.
What this site is
horizonpmo.io describes the Horizon PMO product. It is information, not an offer. Nothing on this site forms a contract, a quotation, or a commitment to supply, and browsing it creates no relationship between us beyond the one described in the privacy notice above.
The interface shown is illustrative
Every screen, chart, figure and name on this site is a demonstration built to show how the product presents information. The organisations, programmes, people and amounts are invented. They are not a customer’s data, and they are not a forecast of what your numbers would look like.
Accuracy
We keep this site current and correct as far as we reasonably can, but we do not warrant that it is free of error or that it will be available without interruption. Product capability changes over time; what is described here reflects the product at the date shown at the top of this page.
Ownership
The content of this site — text, layout, design, code, product names and marks — belongs to MONO 360 LIMITED or is used with permission. You may read it, quote it with attribution, and link to it. You may not copy the site or substantial parts of it, or present it as your own.
Third-party product names used on this site (for example SharePoint, Excel, PowerPoint, Smartsheet, Jira, Azure DevOps, SAP, Outlook, Teams) belong to their respective owners and are named to describe interoperability. Their use here implies no endorsement or affiliation.
Links out
This site links to a booking page hosted by Cal.com. We do not control third-party sites and are not responsible for their content or their handling of your data once you leave.
Liability
To the extent the law allows, we are not liable for loss arising from reliance on the information on this site. Nothing here limits liability for fraud, for death or personal injury caused by negligence, or for anything else that cannot lawfully be limited.
Governing law
These terms are governed by the laws of the Hong Kong Special Administrative Region, and the Hong Kong courts have exclusive jurisdiction over any dispute arising from them.
Contact
Questions about these terms: business@mono360.io.