Privacy Policy

The data controller responsible for your personal data is:

Information you give us, when you:

• Email us: your name, your email address and whatever you write.
• Use the form on our contact page: your name, your email address and your message, delivered to us as an email.
• Book a call through Calendly: your name, your email address and any notes you add to the booking.

Information collected automatically:

• Server logs (IP address, browser type, referring URL), kept by our hosting provider for security and deleted automatically after 30 days.
• Analytics: Google Analytics, only after you accept it in the cookie banner, and Ahrefs Web Analytics, which is cookieless and stores no personal data. The site also uses Microsoft Clarity for heatmaps and session recordings of clicks, scrolling and navigation. Clarity uses analytics cookies after you accept and runs in a limited mode without cookies otherwise. Advertising storage stays disabled. The details are in our Cookie Policy.

We process personal data on the following bases:

• Contractual necessity: to answer your enquiry and provide the services you ask for.
• Legitimate interests: to run our business relationship and to understand how the site is used, so we can improve it.
• Consent: where you have given it explicitly, such as accepting analytics cookies.

• To reply to your enquiry
• To prepare and deliver a proposal for your project
• To fulfil a contract for our services
• To communicate project updates and milestones
• To meet our legal obligations

We never sell, rent or share your personal data with third parties for marketing.

We rely on the following services to run the site and the studio:

• Vercel: hosts the website. Standard server logs may be processed by Vercel. Vercel privacy policy
• Resend: delivers the messages sent through our contact form to our inbox. Your name, email address and message pass through Resend to reach us. Resend privacy policy
• Calendly: handles call bookings. The details you enter when booking are processed by Calendly. Calendly privacy notice
• Google Analytics: measures how the site is used, only with your consent. Google privacy policy
• Ahrefs Web Analytics: aggregate, cookieless traffic measurement. Ahrefs privacy policy
• Microsoft Clarity: heatmaps and session recordings to improve the site, with analytics cookie storage controlled by your banner choice. Microsoft privacy statement

We keep enquiries and the correspondence around them for 3 years from the last contact. If a project goes ahead, we keep project-related data for 7 years to meet legal and accounting obligations. You can ask us to delete your data at any time (see section 7).

If you are in the European Economic Area, you have the right to:

• Access: ask for a copy of the personal data we hold about you.
• Rectification: have inaccurate or incomplete data corrected.
• Erasure: have your data deleted where there is no compelling reason to keep processing it.
• Restriction: ask us to limit how we process your data.
• Portability: receive your data in a structured, machine-readable format.
• Objection: object to processing based on legitimate interests.
• Withdraw consent: at any time, as easily as you gave it. For analytics cookies, use the control on the Cookie Policy page.

To exercise any of these, email info@kona-verse.com. We reply within 30 days.

You can also lodge a complaint with the Office of the Commissioner for Personal Data Protection, the Cyprus supervisory authority: dataprotection.gov.cy

The site sets analytics cookies only after you accept them in the banner shown on your first visit. What they are, how long they last and how to change your choice is in the Cookie Policy.

We use industry-standard measures: HTTPS everywhere, secured credentials, restricted access to data. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.

We may update this policy from time to time. The “last updated” date at the top reflects the current version.

For anything privacy-related: