Privacy Policy

We collect personal data in one place only: the project inquiry form on our homepage. When you submit it, we receive:

• Your name
• Your email address
• Your company or brand name, if you provide one
• The project type, budget range and timeline you select
• The project description you write

We do not use cookies, we do not run advertising or social-media tracking pixels, and we do not build profiles of visitors.

Solely to read your inquiry and reply to it, and — if we go on to work together — to carry out that engagement. We do not use your details for marketing unless you separately ask us to.

Our lawful basis is your consent, given by ticking the consent box when you submit the form. You may withdraw it at any time by emailing us; withdrawal does not affect processing already carried out.

This site is hosted by Netlify, and form submissions are stored on Netlify's infrastructure before reaching us. Netlify acts as our data processor and may process data in the United States under standard contractual clauses. Their privacy notice is published at netlify.com/privacy.

Netlify's servers also record standard request logs, including IP addresses, for security and abuse prevention. We do not have a way to disable this, and we do not use those logs ourselves.

Beyond that, nobody. We do not sell, rent or trade personal data, and we do not share it with advertisers.

If we use analytics on this site, it is a privacy-first tool that sets no cookies, stores no personal data and does not track you between websites. That is why you are not being asked to accept cookies — there are none to accept.

We do not use Google Analytics. We also self-host our fonts rather than loading them from Google, so visiting this site does not disclose your IP address to Google.

Inquiries that do not lead to a project are deleted within 24 months. Records relating to actual engagements are kept for as long as needed to deliver the work and to meet tax and accounting obligations, typically seven years.

Depending on where you live, you may have the right to:

• Ask for a copy of the personal data we hold about you
• Have inaccurate data corrected
• Have your data deleted
• Object to or restrict how we use it
• Receive your data in a portable format
• Withdraw consent at any time
• Complain to your local data protection authority

To exercise any of these, email hello@kioo.space. We will respond within 30 days. There is no charge.

The site is served over HTTPS only, with HTTP Strict Transport Security enabled. It loads no third-party scripts and has no database or login of its own. Inquiry data is protected by the access controls on our hosting and email accounts, both of which use two-factor authentication.

If you believe you have found a security issue with this site, please tell us at hello@kioo.space. See also our security.txt.

If this policy changes we will update the "last updated" date above. Material changes affecting how we use data already collected will be communicated directly where we hold a contact address for you.