Privacy Policy
How KAMU STUDIO collects, uses and protects personal information on kamustudio.org, and the choices and rights you have.
Who we are
KAMU STUDIO builds custom websites for local businesses. This policy explains how we handle personal information when you visit kamustudio.org (the "website") or send us a request through it.
- Responsible for your information: KAMU STUDIO
- Privacy contact: [email protected]
More operator details are in our Legal Notice. If you become a customer, your project agreement may add privacy terms.
Information we collect
Information you give us
When you send the "Tell us about your business" form we receive:
| Field | Required |
|---|---|
| Your name | Yes |
| Email address | Yes |
| Business name | No |
| Phone or text number | No |
| What you tell us about your business | No |
| The package and payment option you picked (or "not sure yet") | Filled in by the form |
| The price estimate shown to you, the currency you were viewing and the site language | Added automatically |
If you email us directly, we receive your address and whatever your message contains.
Information collected automatically
- Technical data. Our hosting provider processes your IP address, browser type, the pages you request and timestamps to deliver and protect the website. When you send the form, the form provider may record your IP address and browser with the request.
- Spam protection. The form has a hidden "honeypot" field that people never see, and your browser keeps the times of the requests you sent (not their content) so that no more than three can be sent in ten minutes.
- Browser storage. The website keeps a few small items in your browser: your language, your currency, cached exchange rates and the spam limit above. See our Cookie Policy.
- No analytics, no tracking. The website uses no analytics, advertising pixels or tracking cookies.
Third parties that load parts of the website
Some parts of the website load from other companies' servers. They receive technical data such as your IP address when your browser fetches them, but never the contents of the form:
- Google Fonts delivers the typefaces.
- Amazon CloudFront delivers the opening video.
- ExchangeRate-API (open.er-api.com) provides exchange rates, requested by your browser only when you view prices in a currency other than US dollars.
- Unsplash and Mixkit deliver the photos and video inside the fictional example websites.
What we do not collect
- No payments. We take no payments on the website and never ask for card or bank details.
- No sensitive data. We do not ask for health, financial, religious or similar sensitive information. Please don't include it in your message.
- No data from the example websites. Their forms are demonstrations and send nothing.
How we use information
- To reply to your request and arrange a call if you want one
- To prepare a quote and, if you hire us, to carry out your project
- To protect the website and its form from spam and abuse
- To deliver the website and remember your language and currency
- To meet legal obligations and protect our rights where needed
We do not use your information for advertising, we do not send marketing messages, and we do not make automated decisions about you. If we ever want to send marketing, we will ask for your separate consent first. Giving us your phone number never authorizes promotional calls or texts.
Service providers
These providers process information on our behalf, only for the purposes above:
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Cloudflare | Hosting the website (Cloudflare Pages); forwarding email sent to [email protected] to our inbox | IP address, browser data, requested pages; the emails you send us | United States and other countries where Cloudflare operates |
| FormSubmit | Delivering form requests to our inbox by email | Form contents, IP address, browser data | As stated in the provider's privacy policy |
| Google (Gmail) | Our inbox, [email protected], where we read and answer requests | Your request and our emails | United States and others |
| Google Fonts | Delivering typefaces | IP address, browser data | United States and others |
| Amazon CloudFront | Delivering the opening video | IP address, browser data | Global network |
| ExchangeRate-API | Exchange rates for the price converter | IP address, browser data | As stated in the provider's privacy policy |
| Unsplash, Mixkit | Photos and video in the example websites | IP address, browser data | As stated in each provider's privacy policy |
We may also disclose information when the law requires it, to protect our rights or safety, or as part of a sale or merger of the business. We do not sell personal information.
How long we keep information
| Information | How long |
|---|---|
| Requests that do not become projects | Up to 12 months after our last contact |
| Customer project records and correspondence | For the project or plan, then as long as tax and accounting law requires |
| Language and currency in your browser | Until you change them or clear your browser data |
| Cached exchange rates in your browser | Replaced after 12 hours |
| Spam-limit times in your browser | Ignored after 10 minutes; replaced by your next request |
Security
We use HTTPS on every page, strict security headers, a hidden honeypot field and a limit on repeated requests. Requests are only confirmed to you when a provider has accepted them. No system is completely secure, so we cannot guarantee absolute security.
International transfers
Our providers are mainly in the United States, so your information may be processed outside Mexico and outside the country where you live.
Your rights and how to make a request
You can ask us to show you the information we hold about you, correct it, delete it, or stop using it for a purpose, and you can withdraw consent you gave. Sections below describe rights in specific places.
- Email [email protected] with "Privacy request" in the subject.
- Say what you would like us to do and include the email address you used to contact us.
- We confirm it is you, usually by asking you to reply from that address.
- We reply within 20 business days.
We will not treat you differently for using your rights. You can also see and delete what the website stored in your browser on Your Privacy Choices.
Children
The website is meant for businesses. It is not directed to children under 13 and we do not knowingly collect their information. If you think a child sent us information, tell us and we will delete it.
No sale or sharing, and Global Privacy Control
We do not sell personal information and do not share it for cross-context behavioral advertising. We use no advertising trackers. If your browser sends a Global Privacy Control signal we honor it, although there is nothing to opt out of.
If you are in Mexico
This section applies when we handle your information under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares), published on March 20, 2025 and overseen by the Secretaría Anticorrupción y Buen Gobierno.
This policy is meant to serve as our privacy notice (aviso de privacidad).
- Purposes: all the purposes in "How we use information" are needed to answer your request. We have no secondary purposes such as marketing.
- ARCO rights: you can Access, Rectify, Cancel or Oppose the use of your data, revoke your consent and limit its use. Send your request to [email protected] with your name, how you want to receive the answer, a copy of your ID (or proof of your representative's authority), the right you want to exercise and the data concerned.
- Transfers: we share data only with the providers listed above, who act on our behalf.
If you believe your rights have not been respected, you may contact the Secretaría Anticorrupción y Buen Gobierno.
If you are in the United States
Where US state privacy laws such as California's (CCPA/CPRA) apply to us: in the past 12 months we collected identifiers (name, email, phone, IP address), professional information (business name), commercial information (packages and payment options you were interested in) and internet activity (technical log data), from you and your device, for the purposes above. We disclosed them only to the service providers listed above. We do not sell or share personal information or use sensitive personal information.
You may have the right to know, access, correct and delete your information, and not to be discriminated against for using these rights. Use the request steps above. Someone you authorize may make the request for you; we may ask for proof of the authorization and confirm your identity with you directly.
Other places
If you live elsewhere you may have rights under local law. Contact us and we will respond as that law requires.
Changes and contact
We may update this policy; the date at the top shows the latest version. If a change is significant, we will point it out clearly on the website.
- Email: [email protected]
- Contact page: Contact & Support