Privacy Policy

Last updated: 11 May 2026

This Privacy Policy explains how KOBU ("we", "us", "our") collects, uses, and protects information when you visit kobu.co or submit our Work With Us inquiry form. We aim to be straightforward — we collect the minimum we need to run the site and respond to enquiries, and we don't sell or rent your data.

Who we are

KOBU is a creative studio. For questions about this policy or your data, contact us at hello@kobu.co.

What we collect

When you submit the Work With Us form, you provide:

  • Your name, email address, and company name (required to respond to you).
  • Your project type, budget range, timeline, and a free-text message describing your project (used to triage your enquiry).
  • Optionally, your website.

We also record your browser's user agent string and a timing signal automatically when you submit, purely for spam and bot filtering.

When you browse the site, our hosting provider Vercel records standard server logs (including IP address, page requested, timestamp, referrer, and user agent) for security and operations purposes. We use Vercel Web Analytics, which is cookieless: it counts page views, top pages, referring domains, country, and device type without tracking individual visitors or setting any analytics cookies.

We do not use Google Analytics, Meta pixels, advertising cookies, or cross-site tracking.

Why we use this information

  • To respond to your enquiry and continue any resulting conversation.
  • To understand aggregate site traffic so we can improve the site.
  • To protect the site from abuse and spam.
  • To comply with legal obligations where they apply.

Under the GDPR, we rely on your consent (given by voluntarily submitting the form) for processing enquiry data, and on legitimate interests for operational logs and aggregate analytics.

Who we share data with

We share data only with the service providers that help us run the site, each acting as a processor on our behalf:

  • Vercel Inc. (United States) — hosting, server logs, cookieless analytics.
  • Neon Inc. (United States) — database hosting for form submissions.
  • Cloudflare Inc. (United States) — image and media delivery.

These providers process data on our instructions. Where personal data is transferred from the European Economic Area or the UK to the United States, we rely on Standard Contractual Clauses and the providers' own approved transfer mechanisms.

We do not sell or rent personal information. We do not share it with advertisers or marketing networks.

How long we keep it

  • Enquiry submissions: retained for as long as the conversation is active, and for up to 24 months thereafter to maintain context for follow-on work.
  • Server logs: typically retained by Vercel for 30 days.
  • Analytics data: aggregate only, no personal identifiers.

You can ask us to delete your enquiry data at any time.

Your rights

If you're in the EEA, UK, California, or another jurisdiction with applicable privacy law, you have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate data.
  • Request deletion of your data.
  • Object to or restrict our processing.
  • Receive a copy of your data in a portable format.
  • Withdraw consent at any time (without affecting the lawfulness of prior processing).

To exercise any of these rights, email us at hello@kobu.co. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

Cookies

We use only strictly necessary cookies — specifically the session cookie required to log into the KOBU admin panel (used only by KOBU staff). Public pages set no cookies. Because we use no advertising or analytics cookies, no consent banner is required.

Children

The site is not directed at children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal data, please contact us and we will delete it.

Security

We protect data using TLS in transit and at-rest encryption provided by our hosting and database providers. The Work With Us form includes anti-bot measures (honeypot fields and timing checks). No system is perfectly secure, but we take reasonable precautions.

Changes to this policy

We may update this policy occasionally. Material changes will be flagged on this page with a new "Last updated" date.

Contact

Privacy questions: hello@kobu.co.