Privacy Policy
Last updated: October 28, 2026
This policy explains what information Kessmore collects, why, and what you can do about it. Kessmore is a small service business operated from the European Union, so we follow the EU General Data Protection Regulation (GDPR) for everyone, wherever they are.
Who is responsible
The data controller is Kessmore (contact: [email protected]). Contact: [email protected].
What we collect
- Emails you send us: your name, email address, and whatever you write, including any attachments.
- Website URLs and page content you ask us to work on. This is usually public content from your website.
- Payment information: payments are processed by Stripe. We receive confirmation of payment, the amount, your name and email, and billing details Stripe shares with merchants. We never see or store your full card number.
Please don’t send us patient records, health information, or other sensitive personal data. We don’t need it for our work.
Why we use it
- To answer your request, prepare samples, and deliver the work you order (performance of a contract, or steps before one).
- To take payment and keep accounting and tax records (legal obligation).
- To follow up once about a sample or delivery (legitimate interest). We don’t add you to a mailing list.
Who we share it with
Only the service providers we need to run the business:
- Stripe (payments)
- Cloudflare (website hosting and email routing)
- Resend (sending email)
- Software service providers used to process requests, which process the content of your request
Some of these providers are located in the United States. Transfers rely on the safeguards those providers offer, such as Standard Contractual Clauses or the EU–US Data Privacy Framework. We don’t sell your information.
How long we keep it
Emails and project files: up to 24 months after our last contact, then deleted. Payment and invoice records: as long as tax law requires (typically several years). You can ask us to delete your emails and files sooner.
Cookies and analytics
This website uses no cookies, no analytics, and no tracking scripts. Our hosting provider may keep standard technical logs (such as IP addresses) for security.
Your rights
You can ask to access, correct, delete, or export your data, to restrict or object to how we use it, and to withdraw consent where we rely on it. Write to [email protected]; we answer within 30 days. If you are in the EU, you can also complain to your local data protection authority.
Changes
If we change this policy, we will update this page and the date above.