KORMSEN STUDIO

Privacy notice

This notice explains what personal data Kormsen collects through kormsen.com and kormsen.studio, why we collect it, how long we keep it and what your rights are. We keep it short because we collect very little.

Who we are

Kormsen Ltd is the controller of the personal data described here. Kormsen Engineering and Kormsen Studio are trading names of Kormsen Ltd, a company registered in England and Wales (company number 15910477). Our registered office is 84–90 Market Street, Hednesford, Cannock, WS12 1AG.

For any question about this notice or your data, email [email protected]. We are a small company and have not appointed a data protection officer; this address reaches the person responsible.

When you book a call

Our booking pages use Cal.com to schedule calls. When you book, we collect:

  • your name and email address
  • the answers you give in the booking form
  • the time you choose and your time zone

We use this to arrange the call, send you the invitation and any changes, and prepare for the conversation. Cal.com stores the booking and sends the confirmation emails on our behalf, and the call itself takes place on Google Meet.

Lawful basis: taking steps at your request before a possible contract, and our legitimate interest in replying to people who ask to speak to us.

When you email us or send an enquiry

If you email us, or use the enquiry form on kormsen.com, we collect your name, your email address, the budget range if you give one, and your message.

Enquiries reach our email inbox (Google Workspace) through Amazon Simple Email Service, in Frankfurt, Germany. We may also file them in our support inbox (Chatwoot, which we host ourselves). We use your details only to reply and to discuss the work you asked about.

Lawful basis: our legitimate interest in replying to enquiries, and steps at your request before a possible contract.

Analytics without cookies

We count visits with PostHog, hosted in the EU (Frankfurt, Germany), set up so that nothing is stored on your device:

  • no cookies, local storage or other device storage
  • your IP address is used only for a moment, to make an anonymous count that changes every day and to find your approximate location (country and town); the IP address itself is not stored
  • no tracking across other websites, and no advertising

We record which pages are viewed, the site that referred you, general browser and device type, approximate location, and clicks on links such as ‘Book a call’. Events carry no names or email addresses.

Lawful basis: our legitimate interest in understanding how our sites are used, so we can improve them.

Hosting and delivery

Our sites run on servers provided by Hetzner in Germany. Cloudflare provides our domain name service and delivers and protects the sites, which means it processes your IP address and request details to serve pages and block attacks. Our servers keep short technical logs (including IP addresses) for security and troubleshooting. These logs are limited in size and are overwritten automatically, usually within days; we keep no archive of them.

Lawful basis: our legitimate interest in running secure, reliable websites.

Who we share data with

We never sell your data. We share it only with the service providers named above (Cal.com, Google, PostHog, Amazon Web Services, Hetzner and Cloudflare), who process it on our instructions, and with professional advisers or authorities if the law requires it.

International transfers

Cal.com is based in the United States, and Google, Cloudflare and Amazon Web Services may process data outside the UK. Where data leaves the UK, the transfer is protected by the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, or by the UK–US data bridge where the provider is certified under it.

How long we keep it

  • Enquiries and bookings: 24 months after our last contact with you, then deleted. If you become a client, we keep what the work and the law require (for example, accounting records for six years).
  • Analytics events: up to 12 months. They contain no names or email addresses.
  • Technical logs: overwritten automatically, usually within days.

Your rights

Under UK data protection law you have the right to:

  • access the personal data we hold about you
  • have inaccurate data corrected
  • have your data erased
  • object to how we use it
  • restrict how we use it
  • receive your data in a portable format

To use any of these rights, email [email protected]. It is free, and we reply within one month. If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113.

Automated decisions

We do not make decisions about you by automated means, and we do not profile you.

Changes to this notice

If we change how we use personal data, we will update this page and the date below.

Last updated