Website Privacy Policy

Scope

This policy covers the Kenresoft website at kenresoft.com. Our mobile apps have their own privacy policies, linked from each app's page, because apps handle different information from a website. They are: E-NoteBook, Kostunex, Chammolx and Coxprice.

The controller of the data described here is Kenresoft Technologies Ltd.

Information we collect

• Contact form. Your name, email address, company (optional) and the message you write. It is emailed to our team and stored in our system so we can reply and keep a record of enquiries.
• App waitlist. If you join an app's waitlist, we collect your email address and which app you chose, so we can tell you about that app.
• Privacy requests. If you use the privacy request form, we collect your email address, the type of request, the app or service it concerns and any details you add, so we can find your data and reply.
• Website account. If you register, we collect your name, email address and a password (stored in hashed form, never in plain text). We also keep your email verification status and sign-in session details, such as a session cookie, so you stay signed in.
• Analytics (only if you accept). If you accept analytics cookies, Google Analytics collects pages viewed, approximate location derived from your IP address, device and browser type, and the referring site. If you don't accept, Google Analytics isn't loaded.
• Bot protection. The waitlist, registration and privacy request forms can use Cloudflare Turnstile to check a visitor is human. Turnstile reads limited browser and network signals to do this.
• Technical logs. Our hosting provider processes standard request data, such as IP address and user agent, to deliver the site and protect it from abuse.

We don't ask for payment details, and we don't knowingly collect special-category data through the website.

How we use it and our legal basis

• Replying to contact enquiries: steps at your request before entering a contract, and our legitimate interests in running the business.
• Waitlist emails about the app you chose: your request (consent when you submit the form).
• Running your website account: performing the account service you asked for.
• Handling privacy requests: our legal obligations and our legitimate interests in responding to you properly.
• Analytics: your consent, given through the cookie banner.
• Security, bot protection and preventing abuse: our legitimate interests in keeping the site safe.

These are the legal bases where privacy law such as the GDPR or similar applies.

We don't sell your information and we don't use it for advertising.

Who else handles your data

We use these providers to run the site. They process data for us or on their own terms as described in their policies:

• Cloudflare: hosting, content delivery, database storage and Turnstile bot protection.
• Email delivery provider: sending the emails generated by contact form submissions and account messages.
• Google (Google Analytics): website analytics, only if you accept analytics cookies.

We don't share your information with anyone else unless the law requires it.

International transfers

These providers operate globally, so your information may be processed outside your country, including outside the European Economic Area and the UK. Where the law requires safeguards for such transfers, we rely on the safeguards our providers offer, such as standard contractual clauses. We haven't independently audited these arrangements.

How long we keep it

• Contact enquiries: kept for up to 24 months after our last reply, then deleted. If the enquiry becomes a client engagement, the related correspondence is kept as a business record for as long as the law requires.
• Waitlist entries: kept until the app you chose launches and we have sent you the launch notice, then deleted within 6 months, or sooner if you ask us to remove you.
• Website accounts: kept while the account is open. When you ask us to close it, we delete the account data within 30 days. Copies in routine backups or logs expire on their normal cycle.
• Privacy requests: we keep the request and our reply for up to 3 years after we close it, as a record that we responded.
• Analytics: retained by Google for a limited period under our analytics property's retention setting, and only if you accepted analytics cookies.

Security

The site is served over HTTPS. Submissions are stored in Cloudflare infrastructure, and access is limited to our team. Passwords are stored hashed. No system is perfectly secure, so we can't guarantee absolute security.

Your rights

Depending on where you live, you may have the right to access the information we hold about you, correct it, delete it, object to or restrict how we use it, withdraw consent, and receive a copy of it. To use any of these, use the privacy request page or email hello@kenresoft.com. We may need to verify it's you before acting. If you're unhappy with our response, you can complain to your local data protection authority.

You can change your analytics choice at any time with cookie settings.

Children's privacy

The website is a business site and isn't directed at children. If you think a child has given us personal information, tell us and we'll delete it.

Changes to this policy

If this policy changes we'll update the date at the top of the page. For significant changes we'll make that clear on the site.

Contact

Privacy questions and requests: hello@kenresoft.com. See also the Cookie Policy and Legal Notice.