Privacy Policy

Personal information you disclose to us

We collect personal information that you voluntarily provide to us when you express an interest in obtaining information about us or our Services, when you participate in activities on the Services, or otherwise when you contact us. The personal information we collect may include the following:

• Names
• Email addresses
• Project budget ranges you choose to share
• The contents of any message, brief, or files you send us through our contact form or by email

Sensitive Information. We do not process sensitive personal information such as data concerning your racial or ethnic origin, sexual orientation, religious or philosophical beliefs, health data, or biometric data.

Information automatically collected

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information. This information is primarily needed to maintain the security and operation of our Services, and for our internal analytics and reporting purposes.

Like many businesses, we also collect information through cookies and similar technologies, and through the security and anti-bot services we use to protect our forms (such as Cloudflare Turnstile).

We process your personal information for a variety of reasons, depending on how you interact with our Services, including:

• To respond to your inquiries and offer support. We process your information to respond to messages you send us through our contact form or by email and to manage our communications with you.
• To deliver and facilitate our Services. We process your information to provide you with the requested Services and to fulfil the terms of any agreement we have with you.
• To send administrative information. We may process your information to send you details about our Services, changes to our terms and policies, and other similar information.
• To protect our Services. We may process your information as part of our efforts to keep our Services safe and secure, including fraud monitoring and prevention.
• To improve our Services. We may process information about how you use our Services to better understand how they are being used so we can improve them.
• To comply with our legal obligations. We may process your information to comply with applicable laws, respond to lawful requests, and exercise or defend legal claims.

The General Data Protection Regulation (GDPR) and UK GDPR require us to explain the valid legal bases we rely on in order to process your personal information. As such, we may rely on the following legal bases:

• Consent. We may process your information if you have given us permission (consent) to use your personal information for a specific purpose. You can withdraw your consent at any time.
• Performance of a Contract. We may process your personal information when we believe it is necessary to fulfil our contractual obligations to you, including providing our Services or at your request prior to entering into a contract with you.
• Legitimate Interests. We may process your information when we believe it is reasonably necessary to achieve our legitimate business interests and those interests do not outweigh your interests and fundamental rights and freedoms — for example, to respond to your inquiries, improve our Services, and keep them secure.
• Legal Obligations. We may process your information where we are legally required to do so in order to comply with applicable law.
• Vital Interests. We may process your information where we believe it is necessary to protect your vital interests or the vital interests of a third party.

We may share your information with third-party vendors, service providers, contractors, or agents ("third parties") who perform services for us or on our behalf and require access to such information to do that work. We have contracts in place with our third parties, which are designed to help safeguard your personal information. The categories of third parties we may share personal information with include:

• Communication & email delivery providers (e.g. Resend), used to transmit and respond to messages you send us.
• Cloud hosting and infrastructure providers (Vercel Inc.), used to host and operate our website and Services.
• Security and anti-abuse providers (e.g. Cloudflare), used to protect our forms and infrastructure from spam, bots, and attacks.
• Analytics and tag management providers (Google Analytics and Google Tag Manager, provided by Google LLC), used to understand and improve how our Services are used. Google Analytics may set cookies and collect information such as your IP address, device and browser data, and interactions with our Services. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.
• Search and webmaster tools(Google Search Console, provided by Google LLC), used to monitor and maintain our site's presence in search results. Search Console reports on aggregated, non-identifying search data.

International transfers.Some of our providers (including Google LLC and Vercel Inc.) are based in the United States, so your information may be transferred to and processed there. Where this happens, we rely on appropriate safeguards such as the EU–US Data Privacy Framework and the European Commission's Standard Contractual Clauses to protect your information.

We may also share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company. We do not sell your personal information.

We may use cookies and similar tracking technologies (like web beacons and pixels) to gather information when you interact with our Services. Some online tracking technologies help us maintain the security of our Services and your account, prevent crashes, fix bugs, save your preferences, and assist with basic site functions.

We also permit third parties and service providers to use online tracking technologies for analytics and security. In particular, we use Google Analytics and Google Tag Manager to measure and analyse traffic to our Services, and Google Tag Manager to manage the tags and scripts that load on our pages. Where required by law (for example, in the European Economic Area and the United Kingdom), these analytics cookies are only set after you give your consent, and you can change or withdraw your consent at any time through our cookie banner or your browser settings. Specific information about how we use such technologies and how you can refuse certain cookies may also be set out in a separate cookie notice.

We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymise such information, or, if this is not possible (for example, because your information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

We have implemented appropriate and reasonable technical and organisational security measures designed to protect the security of any personal information we process. These include encryption in transit (HTTPS), input validation and rate limiting on our forms, anti-bot challenges, and a restrictive content security policy. However, despite our safeguards and efforts to secure your information, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorised third parties will not be able to defeat our security. You should only access the Services within a secure environment.

We do not knowingly collect, solicit data from, or market to children under 18 years of age, nor do we knowingly sell such personal information. By using the Services, you represent that you are at least 18 or that you are the parent or guardian of such a minor and consent to such minor's use of the Services. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the relevant records and take reasonable measures to promptly delete such data. If you become aware of any data we may have collected from children under age 18, please contact us at contact@kyrodev.com.

In some regions (like the European Economic Area and the United Kingdom), you have certain rights under applicable data protection laws. These may include the right to:

• request access to and obtain a copy of your personal information;
• request rectification or erasure of your personal information;
• restrict the processing of your personal information;
• where applicable, data portability; and
• object to the processing of your personal information, including the right to opt out of any processing based on legitimate interests.

You can make such a request by contacting us using the details provided in the section "How can you contact us about this notice?" below. We will consider and act upon any request in accordance with applicable data protection laws.

Withdrawing your consent. If we are relying on your consent to process your personal information, you have the right to withdraw your consent at any time. However, this will not affect the lawfulness of the processing before its withdrawal nor, where applicable, processing conducted in reliance on lawful processing grounds other than consent.

If you are located in the EEA or UK and you believe we are unlawfully processing your personal information, you also have the right to complain to your Member State data protection authority or your UK data protection authority.

If you are a resident of California, Virginia, Colorado, Connecticut, Utah, or another US state with a comprehensive consumer privacy law, you may have additional rights regarding your personal information. We are not currently established in the United States and, given our size and the limited personal information we process, we do not meet the applicability thresholds of most US state privacy laws. We nonetheless extend the following rights to US residents as a matter of good practice, to the extent they apply:

• the right to know what personal information we collect and how we use it;
• the right to request access to a copy of your personal information;
• the right to request correction of inaccurate personal information;
• the right to request deletion of your personal information;
• the right to non-discrimination for exercising your rights.

Sale or sharing of personal information. We do not sell your personal information, and we do not share it for cross-context behavioral advertising, within the meaning of the California Consumer Privacy Act (CCPA/CPRA) or similar US state laws. To exercise any of the rights above, please email us at contact@kyrodev.com. We will not discriminate against you for exercising your privacy rights.

If you are a resident of Canada, you may have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA) or applicable provincial privacy legislation. We process your personal information on the basis of your consent, which you may withdraw at any time, subject to legal or contractual restrictions and reasonable notice. You have the right to be informed of the existence, use, and disclosure of your personal information and to be given access to it, and to challenge the accuracy and completeness of the information and have it amended as appropriate.

To exercise these rights, please email us at contact@kyrodev.com. If you are not satisfied with how we handle your request, you have the right to lodge a complaint with the Office of the Privacy Commissioner of Canada.

If you are a resident of Australia, the Privacy Act 1988 and the Australian Privacy Principles (APPs) may apply to the handling of your personal information. As a small overseas business, we may fall outside the direct application of the Privacy Act, but we are committed to handling your personal information consistently with the APPs. You have the right to request access to the personal information we hold about you and to ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant, or misleading.

Where we transfer your personal information overseas (for example, to our hosting, email, or security providers), we take reasonable steps to ensure it is handled in accordance with applicable privacy standards. To make a request or raise a privacy concern, please email us at contact@kyrodev.com. If you believe we have breached the APPs and are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognising and implementing DNT signals has been finalised. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this Privacy Notice.

Yes, we will update this notice as necessary to stay compliant with relevant laws. The updated version will be indicated by an updated "Last updated" date at the top of this Privacy Notice, and the updated version will be effective as soon as it is accessible. If we make material changes to this Privacy Notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this Privacy Notice frequently to be informed of how we are protecting your information.

If you have questions or comments about this notice, you may email us at contact@kyrodev.com or contact us through the form on our website at kyrodev.com.

Based on the applicable laws of your country, you may have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law. To request to review, update, or delete your personal information, please email us at contact@kyrodev.com, and we will respond within a reasonable timeframe.