Privacy Policy

This website collects as little as possible. It sets no cookies, runs no third-party scripts, and does not sell or share data for advertising.

Who is responsible

Kitti Kovacs Design Ltd is responsible for the personal data described on this page. The company is registered in England and Wales under number 13396179, with its registered office at Crail, Loxwood Road, Alfold, Cranleigh, GU6 8HN. Questions about your data can go to the contact address or the telephone number given on this site.

What this site collects

No analytics code, no advertising pixel and no embedded widget from another company runs on this website, and nothing is stored on your device. Like any web server, the hosting records each request it answers, and visitor statistics are made from those records, which is described under “Server logs” below. Beyond that, the site only holds what you send yourself.

When you get in touch

If you write by email, call, or send the enquiry form, the details you give are used to answer you and to plan the work. They are not sold, shared for marketing or used for advertising. The legal basis is that you asked us to take steps before a possible contract.

The enquiry form

The form asks for your name, email address and telephone number, and optionally your town or postcode, the size of your garden, your budget, your timing and a message. It also records which page you sent it from.

It is sent to Kitti by email. A copy is kept in the site’s hosting, together with the network address it was sent from, so that no enquiry is lost if an email goes astray. That copy is deleted automatically after twelve months.

To stop the form being used for spam, the network address is also counted for ten minutes, so that the same address cannot send it many times in a row. The legal basis for the copy and the count is our legitimate interest in receiving every enquiry and in keeping the form usable.

Server logs

Each request to this website is recorded by its hosting: the time, the page requested, the network address it came from, the browser’s identification, the page you came from, and the approximate country, derived from the network address. These records are used to keep the site running and secure, to find faults, and to count visits: how many people come, which pages they read, and roughly from which countries. They are not used to build a profile of anyone, are not combined with other data, and are not used for advertising.

The records in the site’s own hosting are deleted automatically after 180 days. K-I-Soft receives a copy to produce the visitor statistics: it keeps the copy as it arrived for 90 days and the prepared records, which still contain the network address, for 400 days. What remains after that are counts, which say nothing about any one person.

The legal basis is our legitimate interest in a working and secure website and in knowing how it is used.

Who handles the data for us

• Amazon Web Services hosts the website, receives the enquiry form and delivers its email. Data is stored in the AWS region in London. Pages are delivered through the AWS CloudFront network, whose servers may answer a request from outside the United Kingdom.
• K-I-Soft IT&Holding GmbH in Switzerland built the website, runs its hosting on our behalf and prepares the visitor statistics from the server logs, on AWS in Zurich. The United Kingdom recognises Switzerland as giving data an adequate level of protection.
• Google holds the mailbox in which enquiries arrive (Google Workspace). Google may process data outside the United Kingdom, under its data processing terms for Google Workspace.

How long data is kept

• The copy of an enquiry in the site’s hosting: twelve months.
• Server logs in the site’s hosting: 180 days.
• Server logs prepared for the visitor statistics: 90 days as received, 400 days as prepared. The counts made from them contain no personal data.
• Enquiries in our mailbox that do not lead to work: five years.
• If you become a client, our correspondence and the records of the work are kept for as long as UK law requires business records to be kept, which is six years.

Your rights

You can ask what data is held about you and for a copy of it, ask for it to be corrected or deleted, ask for its use to be restricted, and object to its use where it rests on our legitimate interest. Write to the contact address given on this site, and you will have an answer within one month.

If you are not satisfied with the answer, you can complain to the Information Commissioner’s Office, the UK’s supervisory authority, at ico.org.uk.

Cookies

This website sets no cookies. The cookie policy says the same in more detail.