Last updated
Privacy policy
This is a small website for a small business, and we collect as little about you as we can. This page explains what we do collect, why, who helps us handle it, and the choices you have.
Who we are
Kura Podi, based in Surrey, UK, is the data controller for the personal data described in this policy. That means we decide how and why it is used, and we are responsible for looking after it.
If you have a question about this policy or about your personal data, please get in touch using our contact form.
What we collect and why
You can read this website without telling us who you are. We only handle personal data in the five situations below.
- When you send us a message
- Our contact form asks for your name, your email address and your message. It is sent to us as an email and we use it only to read and reply to your enquiry. We do not store form submissions in a website database, and we do not add you to a mailing list or newsletter.
- Analytics, if you agree to it
- If you choose Accept on the cookie banner, we use Mixpanel to count page views and interactions on the site and to recognise a returning browser. This tells us which pages are useful. We do not send your name, your email address or anything you type into the contact form to Mixpanel. If you choose Decline, the analytics script is never loaded.
- Visitor statistics
- We use Vercel Web Analytics to count how many people visit each page. It does not use cookies and stores nothing in your browser, so it runs without asking. It records the address of the page (without any search terms or other parameters), the referring website, your browser, operating system and device type, and the country your connection comes from. Visits are counted with a temporary identifier that Vercel derives from the request and discards after 24 hours; it cannot be used to recognise you on a later day or on other websites.
- Error monitoring
- When something on the site breaks, we use Sentry to record technical details of the error: the type of browser and operating system, the address of the page, and the technical trace of what went wrong. Your IP address is processed briefly by the provider in order to receive the report. Error monitoring does not use cookies, does not record your screen or session, and the contents of the contact form are removed from error reports before they are sent.
- Hosting and security logs
- Like almost every website, ours is served by a hosting provider that keeps standard server logs. These include your IP address, your browser's user agent and the address of the page you requested. They are used to deliver the site, keep it secure and diagnose faults.
We do not run accounts, take payments or show advertising on this website, and we do not make decisions about you by automated means. The site is not aimed at children and we do not knowingly collect children's personal data. We never sell personal data.
Our lawful bases
UK data protection law requires us to have a lawful basis for each use of personal data. Ours are:
- Consent
- For analytics cookies and the analytics data collected through them. We only use them if you opt in, and you can withdraw your consent at any time in the cookies section below.
- Legitimate interests
- For reading and replying to enquiries you send us, for counting page visits, for error monitoring, and for hosting and security logs. Our interest is in answering the people who contact us and in keeping the website working and secure. We have considered the effect on you and believe these uses are limited, expected and do not override your rights. You can object at any time (see your rights).
The record of your cookie choice is stored without asking because it is strictly necessary to provide the cookie banner you have used.
Who we share it with
We do not sell or rent personal data, and we do not share it for anyone else's marketing. We use a small number of service providers to run the website. They act on our instructions and may only use the data to provide their service to us.
- Resend
- Email delivery. Resend sends the message you write in the contact form to our inbox.
- Mixpanel
- Website analytics, only if you accept analytics cookies. Our Mixpanel project is set to store its data in the EU.
- Sentry
- Error monitoring. Sentry receives the technical error reports described above. Our Sentry project is hosted in its EU region.
- Vercel
- Website hosting and visitor statistics. Vercel serves the pages of this site, processes the standard server logs described above and provides the cookieless visitor statistics.
We may also disclose personal data where the law requires us to, for example to a court or a regulator.
International transfers
Some of our service providers are based outside the UK, or use systems and support staff outside the UK, so your personal data may be processed in other countries. Where that happens we rely on the safeguards UK data protection law provides for international transfers, such as UK adequacy regulations for the country concerned or approved contractual clauses with the provider.
If you would like to know more about the safeguards that apply to a particular provider, ask us through the contact form.
How long we keep it
- Enquiries: we keep the email you send us, and our reply, only for as long as we need to deal with your enquiry, and then delete it.
- Analytics data: kept only for as long as it is useful for understanding how the site is used, and collected only while your consent is in place.
- Error reports and server logs: kept for a limited period set by the providers that collect them.
We may keep a message for longer if we need it to handle a complaint or to meet a legal obligation.
Cookies and similar technologies
Cookies are small files a website stores in your browser. Local storage is a similar technology, and the same rules apply to both. This website does not set any analytics cookies unless you opt in, and it does not use advertising cookies or embed content from social networks.
Necessary
Your cookie choice
- Set by
- Kura Podi (this website)
- What it is for
- Remembers whether you accepted or declined analytics, so we do not ask you again on every visit. It is kept in your browser's local storage and is not used to identify you.
- When it is set
- When you choose Accept or Decline on the cookie banner.
- How long it lasts
- Until you change your choice or clear your browser's site data.
Analytics — only if you accept
Mixpanel analytics
- Set by
- Mixpanel
- What it is for
- Counts page views and interactions, and recognises a returning browser, so we can see which parts of the site are useful. It uses cookies and local storage.
- When it is set
- Only after you choose Accept on the cookie banner. If you decline, Mixpanel is never loaded.
- How long it lasts
- Until you withdraw your consent, clear your browser's site data, or the cookie expires.
You can change your mind at any time. Use the button below to reopen your cookie choice. Declining does not affect how the site works for you.
Analytics is not active on this site, so no cookies are set.
You can also remove cookies and site data at any time in your browser's settings.
Your rights
Under UK data protection law you have the right to:
- Access: ask for a copy of the personal data we hold about you.
- Rectification: ask us to correct anything that is inaccurate or incomplete.
- Erasure: ask us to delete your personal data.
- Restriction: ask us to limit how we use your personal data.
- Objection: object to our use of your personal data where we rely on legitimate interests.
- Portability: ask for the personal data you gave us in a format you can reuse or pass to someone else, where this right applies.
- Withdraw consent: change your mind about analytics at any time. Withdrawing consent does not affect anything done before you withdrew it.
To use any of these rights, send us a message through the contact form. It is free, and we will reply within one month. We may need to ask you for information to confirm who you are before we act on a request. These rights are not absolute, and if we cannot do what you ask we will explain why.
How to complain
If you are unhappy with how we have handled your personal data, please tell us first using the contact form so we can try to put it right.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator. You can make a complaint on the ICO website (ico.org.uk).
Changes to this policy
We will update this page when what we do with personal data changes, for example when our online shop opens. The date at the top of the page shows when it was last revised. If a change is significant we will make it clear on the website.