Privacy Policy
Last updated: July 16, 2025
This privacy policy complies with the EU General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other applicable privacy laws.
1. Data Controller Information
Data Controller: Kief Studio LLC
Address: Massachusetts, United States
Email: [email protected]
Data Protection Officer: [email protected]
For EU residents: We are committed to protecting your rights under GDPR. You can exercise your rights by contacting our DPO.
2. Information We Collect
Automatically Collected Data
- IP address (anonymized where possible)
- Browser type and version
- Operating system
- Pages visited and time spent
- Referring website URLs
- Device information (screen size, device type)
- User interactions (clicks, scrolls, form interactions)
Voluntarily Provided Data
- Contact form submissions (name, email, message)
- Newsletter subscriptions
- Service inquiries and consultation requests
3. Analytics Services
Website Analytics
Privacy-focused analytics on our own infrastructure
- Self-hosted on LTFI Platform
- No cookies used
- No personal data collected
- GDPR compliant by design
4. Legal Basis for Processing (GDPR)
Legitimate Interest (Art. 6(1)(f) GDPR)
- Analyzing website performance and user experience
- Ensuring website security and preventing fraud
- Improving our services and content
Consent (Art. 6(1)(a) GDPR)
- Non-essential analytics and marketing cookies
- Newsletter subscriptions
- Enhanced tracking features
Contract Performance (Art. 6(1)(b) GDPR)
- Processing contact forms for service inquiries
- Delivering requested services or information
5. Data Retention
Analytics Data: Indefinitely (aggregated only, no personal data)
Contact Form Data: 3 years or until you request deletion
Newsletter Data: Until you unsubscribe
Cookie Preferences: Stored locally until you clear browser data
6. Your Rights Under GDPR
Right of Access (Art. 15): Request a copy of your personal data
Right to Rectification (Art. 16): Correct inaccurate personal data
Right to Erasure (Art. 17): Request deletion of your personal data
Right to Restrict Processing (Art. 18): Limit how we process your data
Right to Data Portability (Art. 20): Receive your data in a structured format
Right to Object (Art. 21): Object to processing based on legitimate interests
To exercise these rights, contact us at [email protected].
7. Data Security
We implement appropriate technical and organizational measures to protect your data:
- SSL/TLS encryption for data transmission
- Regular security audits and updates
- Access controls and staff training
- Incident response procedures
8. Changes to This Policy
We may update this Privacy Policy periodically. Material changes will be communicated via email (if you have provided one) or through a prominent notice on our website. The "Last Updated" date will always reflect the most recent version.
9. Contact & Complaints
Privacy Inquiries: [email protected]
Data Protection Officer: [email protected]
General Contact: [email protected]
If you believe we have not handled your data correctly, you have the right to lodge a complaint with your local data protection authority.
Related Policies
Exercise your rights under GDPR and CCPA
How we process your personal data under GDPR Articles 13 & 14
Compliance notice for Brazilian data subjects
Privacy-first analytics with no tracking cookies
Terms and conditions for using our services