Privacy Policy

Kef Sensei ("we", "our", or "us") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website kefsensei.com or contact us through any means.

Please read this policy carefully. If you disagree with its terms, please discontinue use of the site. For questions or requests related to this policy, contact us at info@kefsensei.com.

1. Information We Collect

1.1 Information You Provide Directly

When you submit the contact form on our website, we collect the following information you voluntarily provide:

• Full name
• Email address
• Project or business description (free-text message)
• Service interest category (optional dropdown selection)
• Project stage (optional radio selection)

We do not collect payment information, government identifiers, or sensitive personal categories of data through our website.

1.2 Information Collected Automatically

When you visit our site, certain technical information may be collected automatically by our hosting infrastructure, including:

• IP address (anonymized where technically feasible)
• Browser type and version
• Operating system
• Referring URL
• Pages visited and timestamps

We use Google Analytics 4 (GA4) to understand how visitors find and use this site. GA4 is loaded only after you explicitly accept our cookie consent banner. If you decline, no analytics scripts are loaded and no cookies are set.

When GA4 is active, Google may additionally collect:

• Pages visited and time spent on each page
• Traffic source (search engine, direct, referral)
• Device category and screen resolution

GA4 sets two first-party cookies: _ga (expires 2 years) and _ga_* (session). These do not identify you personally. IP anonymisation is enabled — your full IP is never stored by Google on our behalf.

To opt out: decline our consent banner, install the Google Analytics Opt-out Browser Add-on, or use your browser's private/incognito mode. See the Google Privacy Policy for details on how Google processes this data.

We use no advertising cookies, tracking pixels, or third-party marketing scripts.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To respond to your inquiry — We use your name, email, and message to contact you about your project, answer questions, and propose next steps.
• To assess project fit — We use your stated service interest and project stage to route your inquiry to the right team member and provide relevant information.
• To improve our communications — We may review inquiry patterns in aggregate (no individual attribution) to improve our service offerings and website copy.
• To comply with legal obligations — We may process and retain data as required by applicable law.

We do not sell, rent, or share your personal information with third parties for marketing purposes. We do not use your contact data to send unsolicited commercial email.

3. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, our legal basis for processing your personal data is:

• Legitimate interests (Article 6(1)(f) GDPR) — Responding to business inquiries you have proactively submitted, which you would reasonably expect and which does not override your fundamental rights.
• Performance of a pre-contractual relationship (Article 6(1)(b) GDPR) — Where your inquiry is the first step toward a potential contractual engagement.
• Legal obligation (Article 6(1)(c) GDPR) — Where we are required to retain certain records by applicable law.

4. Third-Party Services

4.1 Form Processing (Formspree)

Our contact form is processed by Formspree, Inc. (a U.S.-based form backend service). When you submit the form, your submission data is transmitted to Formspree's servers and then forwarded to our email inbox. Formspree acts as a data processor on our behalf. Their processing is governed by their own Privacy Policy. Formspree is certified under the EU-U.S. Data Privacy Framework where applicable.

4.2 Web Hosting (Vercel)

Our website is hosted by Vercel, Inc. Vercel may process technical access logs as part of serving web requests. These logs are subject to Vercel's Privacy Policy.

4.3 Fonts (Google Fonts)

Our website loads fonts from Google Fonts. When your browser requests a font file, Google may collect your IP address and browser information. Google Fonts requests are subject to Google's Privacy Policy. If you prefer to prevent this, you may block font requests via your browser settings; the site will fall back to system fonts.

5. Data Retention

We retain personal data submitted through contact forms for as long as is reasonably necessary to:

• Respond to and manage your inquiry (typically up to 12 months from last contact);
• Fulfil any resulting contractual or pre-contractual obligations; or
• Comply with our legal and regulatory obligations.

Data associated with active client engagements is retained in accordance with applicable commercial and tax record-keeping requirements (typically 7 years).

6. Your Rights

6.1 EEA / UK Residents (GDPR / UK GDPR)

You have the right to:

• Access — Request a copy of the personal data we hold about you.
• Rectification — Request correction of inaccurate or incomplete data.
• Erasure — Request deletion of your data ("right to be forgotten"), subject to legal retention obligations.
• Restriction — Request that we limit our processing of your data in certain circumstances.
• Portability — Receive your data in a structured, machine-readable format.
• Objection — Object to processing based on legitimate interests.
• Lodge a complaint — File a complaint with your national data protection authority (e.g., the ICO in the UK, your local EU supervisory authority).

6.2 California Residents (CCPA / CPRA)

Under the California Consumer Privacy Act, California residents have the right to:

• Know what personal information we collect and how it is used;
• Delete personal information we have collected;
• Correct inaccurate personal information;
• Opt out of the sale or sharing of personal information (we do not sell or share personal data);
• Non-discrimination for exercising privacy rights.

We do not sell or share personal information as defined by the CCPA/CPRA and do not use sensitive personal information for purposes beyond those disclosed here.

6.3 Canadian Residents (PIPEDA / Provincial Laws)

Individuals in Canada have rights under PIPEDA (Personal Information Protection and Electronic Documents Act) and applicable provincial privacy laws, including the right to access personal information held about them and request corrections. Submit requests to info@kefsensei.com.

6.4 Exercising Your Rights

To exercise any of the above rights, email us at info@kefsensei.com with the subject line "Privacy Request". We will respond within 30 days (or as required by applicable law). We may need to verify your identity before fulfilling your request.

7. International Data Transfers

We are based in the Americas. If you contact us from the EEA, UK, or another jurisdiction with data transfer restrictions, please be aware that your data may be processed in countries that do not have the same data protection laws as your jurisdiction. Where required by GDPR, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) or adequacy decisions. For specifics about safeguards applicable to Formspree or Vercel, please refer to their respective privacy policies.

8. Security

We implement reasonable technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These include encrypted transmission (HTTPS/TLS), access controls, and regular review of data-handling practices. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

9. Children's Privacy

Our website is not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have inadvertently collected such data, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable law. The "Last updated" date at the top of this page will be revised accordingly. Material changes will be communicated by posting a notice on our website.

11. Contact Us

For questions, concerns, or requests related to this Privacy Policy, contact us at:

Kef Sensei
info@kefsensei.com