Privacy Policy

KudoCraft is a sole proprietorship run by its founder, an individual based in Ontario, Canada. This policy explains what personal information we collect through kudocraft.com, why, who helps us handle it, and what you can ask us to do with it. It is written for Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and, where they apply to people in the European Economic Area and the UK, the EU and UK GDPR.

Who is responsible

The founder of KudoCraft is accountable for personal information we hold. Contact: hello@kudocraft.com.

What we collect

• What you send us. Through the project form: your name, email address and project description, plus anything optional you add (company, current website, budget, timing, payment preference, services of interest). If you email us, the contents of your email.
• Spam check. When you use the form, Cloudflare Turnstile collects technical signals such as your IP address and browser characteristics to confirm a person is submitting it.
• Server logs. Our host records basic technical data (IP address, browser type, pages requested) to keep the site secure and working. We also use a form submitter’s IP address briefly to limit repeated submissions.

Cookies and tracking

This site does not use cookies for analytics or advertising and does not track you across other sites. We use Vercel Web Analytics to count page visits, clicks on our “Start a project” and email links, and successful form submissions, and Vercel Speed Insights to measure how fast pages load. They do not use cookies or collect your name, email or form contents. They record the page, referring site, browser, device type and country, and recognise a repeat visit only within the same day, using an identifier that is discarded after 24 hours. If we add other analytics or advertising tools, we will update this page first and ask for consent where the law requires it.

How we use it, and on what basis

• To reply to your inquiry and discuss a possible project (steps you asked us to take before a contract).
• To deliver and support a project you have agreed with us (performance of a contract).
• To keep the site secure and free of spam (our legitimate interest).
• To understand, in aggregate, which pages are visited and how fast they load (our legitimate interest).
• To keep the records we need for accounting and legal obligations (legal obligation).

We do not sell personal information, use it for automated decisions, or share it for anyone else’s marketing. Replying to your inquiry does not sign you up for any newsletter.

Who else handles it

We use a few service providers, who process data only on our instructions:

• Vercel hosts this website and provides the visit counts and page-speed measurements described above.
• Cloudflare provides the Turnstile spam check and our domain’s DNS.
• Microsoft 365 hosts our email; form submissions are delivered to that mailbox.

These providers may store or process data outside Canada, including in the United States, where it can be subject to local law. For data from the European Economic Area or UK, they rely on recognised transfer safeguards such as the EU-US Data Privacy Framework or standard contractual clauses.

How long we keep it

Inquiries that do not lead to a project are deleted within 24 months of our last contact. Project and billing records are kept for as long as Canadian tax law requires (generally six years). Server logs are kept by our host for a short period under its own retention settings.

Your rights

You can ask to access the personal information we hold about you, correct it, or have it deleted (except records we must keep by law). If you are in the European Economic Area or UK, you can also ask us to restrict or stop processing, object to it, or receive your data in a portable format. Email hello@kudocraft.com; we reply within 30 days and may need to confirm your identity first.

If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada, or to the data protection authority where you live.

Security

The site is served over HTTPS with strict security headers, the form is validated and spam-checked on the server, and access to our email and hosting accounts is limited to the founder.

Changes

We will update this page if anything above changes, and change the date at the top.