Privacy policy

Who is responsible

K3O Labs is the data controller for enquiries sent through this site. Contact us at contact@k3olabs.com for privacy questions or requests.

What we collect and why

The enquiry form collects your name, email address and project message. Phone number and website are optional. We also receive the area of work you select in the form. We use this information to respond, assess the project and discuss possible work with you.

Where you ask us to take steps towards a contract, the legal basis is Article 6(1)(b) GDPR. For other business enquiries, the legal basis is our legitimate interest in responding to people who contact us (Article 6(1)(f)). You can leave the optional fields blank, but we need your name, email and message to respond through the form.

Our hosting infrastructure may process standard technical request data, such as an IP address, to operate and protect the site. Its legal basis is our legitimate interest in keeping the site secure.

Who receives your data

Enquiries are sent through Resend to our contact mailbox. Our hosting and email providers may process data as needed to deliver and secure those services. We do not sell enquiry data.

Resend may process email data in the United States. Its data processing addendum includes EU Standard Contractual Clauses for those transfers.

How long we keep it

We delete enquiries that do not become client work within 12 months of the last meaningful contact. If we work together, relevant correspondence may become part of our client records and follow the retention rules for those records. Resend’s own delivery and log retention is described in its GDPR information.

Your choices and rights

You can ask to access, correct or delete your personal data, or to restrict or object to its use. Data portability may apply in some cases. Email contact@k3olabs.com and we’ll respond in line with GDPR requirements. You can also complain to an EU/EEA data protection authority; the European Data Protection Board lists them here.

Site preferences and analytics

The light or dark theme you choose is saved in your browser’s local storage. We use OpenPanel to understand which pages, offers and examples visitors explore, and which lead to an enquiry. OpenPanel receives page views and fixed choices such as the selected service, example, enquiry entry point and whether an enquiry was sent. It also provides traffic-source reports. We do not send names, email addresses, phone numbers, website addresses or project messages to OpenPanel, and we do not use session replay or identify individual visitors.

Our OpenPanel installation receives events at analytics.ovie.dev and does not set analytics cookies. It uses technical request information, including an IP address and browser information, to produce visit statistics and a visitor identifier that changes daily. We send the page path, not query strings or fragments, and reduce referrers to their site origin. Our legal basis is our legitimate interest in understanding and improving the site and how we describe our services (Article 6(1)(f) GDPR). Our analytics hosting provider may process request data to deliver the service.

Our analytics installation retains events until we delete them. We review the need for this data at least once a year and remove it when it is no longer needed. We do not use enquiry data for automated decisions or profiling.