Privacy Policy

How KH Digital Studio handles your information.

This page explains what information KH Digital Studio may collect, how it is used, and how you can get in touch about your data.

16 August 2026

KH Digital Studio is a small digital studio. If you contact KHDS, buy a service, or use this website, some information may be collected so your enquiry, project, or purchase can be handled properly.

What you may share.

KHDS may collect your name, email address, business details, project notes, order details, messages you send, and technical information such as browser or device data when needed to operate the website.

Why it is needed.

Information is used to reply to enquiries, provide services, manage purchases, improve the website, keep records, protect the website, and meet legal or financial obligations.

Anonymous journey references.

A KHDS outreach link may contain a random reference so KHDS can record whether that specific outreach led to a website visit, a free check, or the start of an email enquiry. The reference does not contain your name or email address, is kept only for the current browser session, and is not an email-open tracker.

Relevant contact, with a clear right to object.

KHDS may use business identity, website and publicly published business contact details to send a limited, relevant message to an incorporated organisation where KHDS has a legitimate interest in offering its services. KHDS checks that the contact route is suitable, records where the details came from, does not buy or harvest address lists, and does not use email-open tracking. Sole traders and unincorporated partnerships are not contacted without consent or another applicable permission.

You can object at any time by replying to the message or emailing hello@khdigitalstudio.com. KHDS will suppress the address from future outreach and will not follow up after an opt-out. A minimal suppression record may be retained so that request continues to be honoured.

Checkout is handled securely.

Payment processing may be handled by trusted third-party providers such as Stripe. KHDS does not ask you to send card details by email.

Private previews and sign-in.

Factory journey measurement records page loads, brief starts, example clicks, preview results and checkout steps with a fresh identifier for each page load. Fixed launch campaign, channel and material labels help compare launch links. The identifier is not stored in browser storage or cookies and does not identify a person across visits. Existing campaign-link attribution is kept in this browser tab’s session storage and can be attached to checkout. Brief text, photographs, contact details, sign-in tokens and error messages are excluded from journey events. Payment records are checked separately against Stripe; only the studio owner can view the launch report. The owner may record time spent on launch work or customer support without names or message content.

We use your checkout email to identify your purchased websites and send sign-in emails through Resend. Sign-in links work once and expire after 15 minutes. A necessary, HttpOnly browser cookie keeps you signed in for up to 30 days unless you sign out; session and sign-in secrets are stored as hashes on the backend.

Previews, editing and ZIP downloads require sign-in. You can create read-only review links that last 1 hour, 24 hours or 7 days, and revoke them early. Anyone with a valid review link can see the saved pages, public contact details and photographs, so share it only with people you want to review the website. The link does not give editing or ZIP-download access. Active paid hosting supplies a continuously public website. Private preview and workspace routes are kept out of search indexes.

Only where necessary.

Information may be processed by Hetzner for website and backend hosting, Stripe for checkout, Resend for transactional email, Google Analytics and Vercel Analytics for website measurement, and OpenAI when you deliberately use an AI feature. A free website check fetches the public website address you enter and may use Jina Reader if the site cannot be read directly. Some providers may process information outside the UK; contact KHDS for the destination and transfer safeguards relevant to your data. Do not enter private, confidential, health, or special-category information into free checks or AI tools. KHDS does not sell personal information.

Kept only as needed.

Free website-check reports are removed within 30 days. Paid report workspaces and access records are normally kept for up to 12 months so the service can be delivered and revisited. Short-lived checkout-delivery records are normally removed within 30 days after delivery; Stripe remains the payment record. KHDS database backups are kept for no more than 30 days. Enquiries and project records are reviewed when work ends, while invoices and records required for tax or legal purposes may be kept longer. Server and security logs are kept only for operational and abuse-prevention needs.

You can ask about your data.

You can contact KHDS to ask for access, correction, deletion, or a copy of personal information, subject to any records that must be kept for legal or business reasons.