Privacy Policy

Kernyard (Kernyard) operates this website at kernyard.com. We are based in the United Kingdom and work with clients internationally.

For questions about this policy or how we handle personal information, contact us at hello@kernyard.com.

For the purposes of UK data protection law, Kernyard is the data controller for personal information collected through this website.

This policy applies to personal information we collect when you visit this website, use the contact form, or email us through the addresses published on the site. It does not cover software products or client services that may have their own terms and privacy information.

If you submit the contact form, we collect:

• Your name
• Your email address
• Your company name, if you choose to provide it
• The type of project or enquiry
• Your budget and timeline preferences
• Your message

If you email us directly, we collect the information you include in your message and your email address.

When you use this website, our hosting infrastructure may automatically process technical information such as your IP address, browser type, device information, referring URL, and the date and time of your request. This is common to most websites and helps us keep the site secure and working properly.

We do not currently use analytics, advertising, or social media tracking on this website.

We use personal information to:

• Read and respond to enquiries submitted through the contact form or by email
• Understand the type of work you are interested in before we reply
• Operate, secure, and maintain this website
• Protect the contact form against spam and misuse

We do not use enquiry information for unrelated marketing unless you separately agree to that.

Under UK GDPR, we rely on the following legal bases:

• Legitimate interests — to respond to enquiries, operate the website, and protect it from abuse, where those interests are not overridden by your rights
• Steps at your request before entering into a contract — when you contact us about potential consulting or development work
• Consent — only where we ask for it explicitly, such as if we later add optional marketing communications

We do not sell your personal information. We share it only where necessary to run this website and handle enquiries:

• Email delivery providers used to send enquiry notifications to us — for example, Google if Gmail SMTP is configured
• Our website hosting provider, which processes technical request data to deliver the site
• A webhook endpoint, if configured as an alternative way to deliver enquiries

These providers process information on our instructions and only as needed to provide their services. Some providers may process data outside the UK. Where that happens, we rely on appropriate safeguards such as UK adequacy regulations or contractual protections.

Enquiries that do not lead to a project are usually deleted within 24 months, unless we need to keep them longer to handle a complaint, resolve a dispute, or comply with law.

If we begin working with you, we keep relevant correspondence for as long as needed for the engagement and our legitimate business records.

Server logs kept by our hosting provider are retained according to their own policies, typically for a limited period.

This website does not currently set non-essential cookies for analytics or advertising. Your browser may store essential technical information needed to deliver the site securely.

If we add analytics or similar tools in future, we will update this policy and, where required, ask for your consent before using non-essential cookies.

Under UK data protection law, you may have the right to:

• Request access to the personal information we hold about you
• Ask us to correct inaccurate information
• Ask us to delete information in certain circumstances
• Object to or restrict certain processing
• Withdraw consent where processing is based on consent
• Complain to the UK Information Commissioner's Office (ICO) at ico.org.uk

To exercise these rights, email hello@kernyard.com. We may need to verify your identity before responding.

We take reasonable technical and organisational measures to protect personal information, including server-side validation of form submissions and limiting access to enquiry inboxes. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

This website is not directed at children, and we do not knowingly collect personal information from anyone under 18.

We may update this policy from time to time. The date at the top of this page shows when it was last revised. Material changes will be reflected here.