Privacy Policy

Last Updated: December 16, 2025 • Effective Date: December 16, 2025

1. Introduction

Kernelis Studio ("Company," "we," "us," or "our") is committed to protecting your privacy and ensuring transparency in how we collect, use, and protect your personal information. This Privacy Policy explains our practices regarding data collection and processing for all visitors and customers who interact with our website, services, and integrated platforms.

This Privacy Policy applies to all services offered by Kernelis Studio, including our website design services, e-commerce platforms, domain and hosting resale, and digital consulting. If you do not agree with our privacy practices, please do not use our services.

2. Information We Collect

2.1 Information You Provide Directly

We collect personal information that you voluntarily provide when:

Contacting us – Name, email address, phone number, message content, company information, and project details when you submit contact forms or inquiries
Booking services – Billing address, business information, service preferences, and project specifications when engaging our services
Making payments – Payment method information (processed securely through Stripe; see Section 5)
Subscribing to communications – Email address when you join our newsletter or opt into marketing communications (processed through our email service provider; see Section 5)
Creating an account – Username, password, profile information, and associated contact details if you access any account-based services
Communicating with us – All correspondence, including emails, chat messages, and support tickets

2.2 Information Collected Automatically

When you visit our website or use our services, we automatically collect certain information:

Website usage data – Pages visited, time spent on each page, links clicked, referring page, browser type, operating system, and device type
IP address and location – Your approximate geographic location (country/region level; we do not collect precise geolocation)
Cookies and tracking technologies – Session cookies, persistent cookies, and similar tracking tools used to personalize your experience and analyze site performance
Analytics data – Collected and analyzed through Google Analytics 4 (GA4; see Section 5)
Device information – Device identifier, screen resolution, language settings, and browser information

2.3 Information from Third Parties

We may receive personal information about you from:

Service providers – Payment processors (Stripe), email marketing platforms (our email service provider), and analytics providers (Google Analytics)
Business partners – If referred to us by another party or business partner
Public sources – Publicly available business information when relevant to our services

3. Purposes of Data Collection and Use

We collect and use your personal information for the following legitimate purposes:

3.1 Service Delivery

Providing, delivering, and improving our web design, development, and digital services
Processing and fulfilling orders for website design packages, domain registration, hosting services, and add-ons
Managing project timelines, communications, and deliverables
Providing technical support and customer service

3.2 Payment Processing

Processing payments securely through Stripe
Billing and invoicing
Refund processing and dispute resolution
Fraud prevention and detection (handled by Stripe)

3.3 Communications

Sending transactional emails (order confirmations, invoices, delivery notifications)
Responding to your inquiries and support requests
Providing project updates and status notifications

3.4 Marketing and Business Development

Sending marketing communications about our services, promotions, and updates (via email)
Analyzing campaign effectiveness and customer preferences

3.5 Analytics and Performance

Analyzing website traffic and user behavior patterns
Measuring marketing campaign performance and ROI
Understanding user demographics and preferences

3.6 Legal and Compliance

Complying with legal obligations and regulatory requirements
Protecting our legal rights, privacy, safety, and property
Enforcing our Terms of Service and other agreements

4. Legal Basis for Processing

For users in the European Union and regions subject to GDPR:

We process your personal information based on the following legal bases:

Contractual necessity – Processing necessary to provide services you have requested or to fulfill a contract with you
Legitimate interests – Processing necessary for our legitimate business interests, including improving our services, marketing, and fraud prevention
Consent – Processing based on your explicit consent (e.g., marketing communications, optional analytics)
Legal obligation – Processing required to comply with applicable laws and regulations

For users in California and other US jurisdictions:

We collect and use personal information as permitted under applicable state privacy laws, including for our commercial purposes as defined by law.

5. Third-Party Integrations and Data Sharing

5.1 Stripe (Payment Processing)

Purpose: Secure payment processing for services, subscriptions, and e-commerce transactions
Data shared: Name, email, billing address, payment method information (card details are handled entirely by Stripe's secure system and are not stored on our servers)
Privacy policy: Stripe Privacy Center

We do not store credit card information on our servers. Stripe handles all payment data in compliance with PCI DSS standards.

5.2 Google Analytics 4 (GA4)

Purpose: Analyzing website traffic, user behavior, engagement metrics, and marketing campaign performance
Data collected: Anonymous user IDs, pages visited, time on site, referral sources, device and browser information, approximate location data
Privacy policy: Google Analytics Privacy Policy

We do not use GA4 data to identify individuals; analytics are reviewed in aggregated, anonymized form only.

5.3 Email Service Provider

Purpose: Sending marketing emails, newsletters, campaign automation, and customer communication
Data shared: Name, email address, project type, service interests, engagement data (email opens, link clicks)
Provider: We use industry-standard transactional email services that comply with applicable data protection regulations

Every marketing email includes an unsubscribe link. You may unsubscribe at any time.

5.4 Data Sharing Limitations

We do NOT: Sell, rent, lease, or trade your personal information to third parties for their independent marketing purposes.

We DO share data only with: Trusted service providers (Stripe, our email service provider, GA4) who process data on our behalf under strict data processing agreements.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, or as required by law.

Data Type	Retention Period	Rationale
Contact form submissions	3 years	Responding to inquiries; legal compliance
Customer account information	Duration of service + 3 years	Contract fulfillment; financial/tax records
Payment records	7 years	Financial audit, tax compliance, fraud prevention
Marketing list subscribers	Until unsubscribed	Email marketing; you may unsubscribe anytime
Website analytics data	14–26 months (GA4 default)	Website optimization; automatically deleted by GA4

7. Your Privacy Rights

7.1 Rights Under GDPR (European Union Residents)

Right of access – Request a copy of the personal information we hold about you
Right to rectification – Request correction of inaccurate or incomplete information
Right to erasure ("right to be forgotten") – Request deletion of your data, subject to legal obligations
Right to data portability – Request your data in a portable format for transfer to another service
Right to object – Object to processing for marketing, analytics, or legitimate interests purposes
Right to withdraw consent – Withdraw consent for processing at any time

7.2 Rights Under CCPA/CPRA (California Residents)

Right to know – Request what personal information we collect and the purposes of collection
Right to delete – Request deletion of personal information collected from you, subject to exceptions
Right to correct – Request correction of inaccurate personal information
Right to opt-out of sale or sharing – Opt out of any sale, sharing, or targeted advertising (we do not sell data)
Right to non-discrimination – We will not discriminate against you for exercising your privacy rights

7.4 How to Exercise Your Rights

To exercise any of these rights, please submit a request:

Email:[email protected]

We will verify your identity and respond within 30–45 days (or as required by law). We will not charge a fee for reasonable requests.

8. Cookies and Tracking Technologies

8.1 What Are Cookies?

Cookies are small text files stored on your device that help us recognize you, remember your preferences, and understand how you use our website.

8.2 Types of Cookies We Use

Session Cookies

Maintain your session; remember items in your cart. Deleted when you close your browser.

Analytics Cookies

Track website usage via Google Analytics (14–26 months).

Marketing Cookies

Enable email marketing integration (our email service provider). Duration of subscription.

8.3 Cookie Control

You can control cookies through your browser settings. Note that disabling certain cookies may limit some website features.

9. Data Security

We implement comprehensive technical, administrative, and organizational security measures to protect your personal information:

Encryption in transit – All data transmitted uses TLS/SSL encryption (HTTPS)
Secure password storage – Passwords are hashed and salted using industry-standard algorithms
Access controls – Personal data is accessible only to authorized personnel on a need-to-know basis
Payment security – All payment processing is handled by PCI DSS-compliant Stripe; we do not store credit card data

While we take security seriously, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security of your information.

10. Children's Privacy

Kernelis Studio's services are not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately at [email protected].

11. International Data Transfers

Kernelis Studio is based in Puerto Rico. Your personal information may be transferred to, stored in, and processed in Puerto Rico, the United States, or other countries where our service providers operate.

By using our services, you consent to the transfer of your personal information as described in this Policy.

12. Third-Party Links and Services

Our website may contain links to third-party websites, applications, and services that are not operated by Kernelis Studio. This Privacy Policy does not apply to third-party services, and we are not responsible for their privacy practices. Before providing your information to third-party sites, review their privacy policies.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

Update the "Last Updated" date at the top of this Policy
Provide notice on our website or via email (for significant changes)
Request your consent if required by law

Your continued use of our services after changes are posted constitutes acceptance of the updated Privacy Policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Kernelis Studio

Email:[email protected]Website:kernelis.studio

Response Time: We will respond to all inquiries and data subject requests within 30 days or as required by applicable law.

This Privacy Policy is provided as-is and constitutes the entire agreement between you and Kernelis Studio regarding privacy practices.

← Volver al inicio