LEGAL / PRIVACY
Privacy &
Biscuits.
This notice explains what happens to personal information when you visit this website, request a free website review or contact Kira about a project. “Biscuits” is simply By Kira’s name for the site’s cookie and browser-storage information. Last updated 13 September 2026.
Who is responsible
Kira is the controller of personal information handled through this website and project enquiries. Kira is an independent website developer based in Manchester, England, working with clients internationally.
For privacy questions or to exercise your rights, use the protected enquiry form.
Information used and why
Project enquiries and website review requests
If you submit the enquiry form, the information you include—such as your name, email address, organisation, budget, timing and project details—is used to reply, discuss your requirements and take steps you request before entering a contract. If a project proceeds, relevant correspondence may also be used to perform the contract, keep business records and establish or defend legal claims. If you request a free website review, your details and the website address you provide are used only to prepare and reply to that request. They are not added to a marketing list.
Email delivery and abuse protection
Enquiries pass through a Cloudflare Worker and Cloudflare Turnstile for security and bot prevention, then Resend delivers the message to Kira. These providers process the form contents and limited technical data needed to deliver and protect the service. Please do not include sensitive personal information unless it is necessary and agreed in advance.
Website technical data
The hosting provider may process limited technical information, such as IP address, browser details, requested page, date and time, to deliver and secure the site. This is based on legitimate interests in providing a reliable and secure website.
Sharing, transfers and retention
Information is shared only with service providers needed to operate email, host the website or deliver agreed work, or where disclosure is required by law. Those providers may process information outside the UK. Where UK data-protection law applies, appropriate safeguards are used where required.
Unsuccessful enquiry and website-review correspondence is normally kept for up to 12 months. Client and transaction records may be kept for up to 7 years after the relationship ends where needed for tax, accounting, contractual or legal purposes. Information may be deleted sooner when it is no longer needed.
Your rights
Depending on the circumstances, you may ask for access to your information, correction, deletion, restriction, portability, or object to processing based on legitimate interests.
Your right to object: you can object at any time to processing based on legitimate interests. Use the protected enquiry form and explain what you would like Kira to stop doing.
You may also complain to the UK Information Commissioner’s Office if UK data-protection law applies, or to your local data-protection authority. Visit ico.org.uk for UK complaint guidance.
Biscuits & analytics
This website uses Cloudflare Web Analytics to understand page views, referral sources, device categories and website performance. Cloudflare states that this service does not use cookies, does not track people across websites and does not collect or use visitors’ personal data.
The enquiry and free-review journeys also record a small set of anonymous events, such as the form being opened, started or successfully submitted. These events contain only the event type, page path, broad device category and country. They do not contain names, email addresses, project details or a persistent visitor identifier.
No advertising trackers are used. Cloudflare may set strictly necessary security cookies—our “biscuits”—when needed to detect malicious traffic or protect the website. These are used only for security and do not require advertising consent.
You can turn off the analytics beacon on this device. The choice is stored locally in your browser and can be changed at any time.
Changes
This notice may be updated when the website or working practices change. The date at the top shows the latest revision.
