GDPR Policy

• Right of access: obtain confirmation of whether we process your personal data and, if so, a copy of it.
• Right to rectification: have inaccurate or incomplete data corrected.
• Right to erasure: request deletion of personal data in defined circumstances, also called the "right to be forgotten".
• Right to restriction: ask us to limit how we use your data while a concern is being resolved.
• Right to portability: receive your data in a structured, commonly used, and machine-readable format.
• Right to object: object to processing that is based on legitimate interests.
• Right to withdraw consent: withdraw consent at any time where processing is based on consent (for example, analytics cookies).
• Rights related to automated decision-making: we do not use automated decision-making or profiling that produces legal or similarly significant effects.

Send your request to legal@kairostudio.one. Include sufficient detail for us to identify your account and the specific right you want to exercise. We respond within one calendar month of receipt of a valid request. Where a request is complex or where we receive a high number of requests, we may extend this period by a further two months and will tell you within the initial month if we need to do so.

We do not charge a fee for handling a request unless the request is manifestly unfounded or excessive, in which case we may charge a reasonable fee or refuse to act, as permitted by the UK GDPR and EU GDPR.

To protect your data we may ask for information to confirm your identity before acting on a request. We use only the minimum information necessary for this purpose and delete it once the verification has been completed, unless retention is required by law.

You have the right to lodge a complaint with the United Kingdom Information Commissioner's Office (ICO) at https://ico.org.uk/. Data subjects in the European Union may also lodge a complaint with the supervisory authority in their country of residence; the list of EU supervisory authorities is published by the European Data Protection Board at edpb.europa.eu/about-edpb/about-edpb/members_en.

A full description of the data we collect, why we collect it, how long we keep it, the lawful basis for each processing activity, and which third parties we share it with is provided in the Privacy Policy. Information about cookies and similar tracking technologies is provided in the Cookie Policy.