Privacy and data protection

Who this notice covers

This notice applies to kinematictrees.com and related website subdomains operated by Kinematic Trees Ltd. We are the data controller for personal data described here.

Information we process

• Information you provide: your email address, selected area of interest and any information you deliberately send to us in a business enquiry.
• Mailing-list records: subscription status, selected interest, signup source and delivery or unsubscribe activity.
• Technical and usage data: page URL, referrer, campaign parameters, broad device/browser information, event timestamps and website interactions. Our self-hosted analytics service processes connection information needed to receive a request.
• Optional journey identifier: if you consent, a cryptographically random identifier representing this browser. It does not contain your name or email address and is not a reliable identifier of a person across devices.

Why we use it and our lawful bases

Website analytics and journey tracking

We use a self-hosted instance of Umami to understand website use. Aggregate analytics do not require the optional Kinematic Trees journey cookie. If you choose “Allow journey tracking”, we create a random 32-character browser identifier, store it as a first-party cookie for 180 days and pass that identifier to Umami as a Distinct ID. A consented form submission may include the same opaque ID so authorised staff can relate the enquiry to website activity.

You can change your choice through “Privacy choices” in the site footer. Withdrawal stops future use of the persistent ID on that browser and deletes its cookie. It does not automatically erase records lawfully collected before withdrawal; you may request erasure using the contact details below.

Mailing list and enquiries

Website forms are delivered through our workflow service, n8n, and mailing-list records are managed in Brevo. We use your selected interest to send relevant communications and understand the context of your request. Mailing-list submissions create or update a Brevo contact.

We do not send email addresses, names or free-text messages to Umami. The only link between CRM records and website behaviour is the consented random visitor ID described above.

Service providers and disclosures

We use carefully selected providers for website hosting, analytics infrastructure, workflow automation and email delivery. They process data under our instructions where they act as processors. We may also disclose information where required by law, to protect legal rights, or as part of a properly governed corporate transaction.

We do not sell personal data and this website does not use advertising or social-media tracking pixels.

International transfers

Some service providers may process data outside the United Kingdom. Where UK data-protection law requires it, we use an adequacy regulation, the UK International Data Transfer Agreement or Addendum, or another valid safeguard, together with appropriate technical and organisational measures.

Retention

• The optional journey identifier and consent preference expire after 180 days unless renewed by a later choice.
• Mailing-list data is kept until you unsubscribe or ask us to delete it, subject to limited suppression records needed to honour opt-outs.
• Enquiry and business records are kept only as long as reasonably needed for the relationship and applicable legal obligations.
• Analytics events are retained for 12 months, then deleted or irreversibly aggregated unless a shorter period is required for an approved erasure request.

Security

We use access controls, encrypted transport, restricted administrative access, monitoring and data minimisation. No online service can guarantee absolute security, but we review controls in proportion to the risks.

Your UK GDPR rights

Depending on the circumstances, you may ask us to provide access to your personal data, correct it, erase it, restrict its use, object to processing, or provide portable data. Where processing relies on consent, you may withdraw consent at any time without affecting the lawfulness of earlier processing.

Contact contact@kinematictrees.com. We may need to verify your identity and normally respond within one month. You may also complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint.

Children

Our business website and services are not directed to children, and we do not knowingly collect personal data from children through the website.

Changes and contact

We may update this notice when our services or legal obligations change. Material changes will be highlighted on this page.