Privacy Policy

Who we are

KINETEN is operated by Montegrisalho, Unipessoal Lda (NIF 517501368), based in Porto, Portugal. For any privacy request, data question, or complaint, email privacy@kineten.com. We respond within 30 days (Art. 12 GDPR). privacy@kineten.com

What data we collect and why

• Email address — to manage your reservation and send shipping or product updates (Art. 6(1)(b) GDPR, performance of a pre-contract).
• Email address for marketing — only if you tick the opt-in box at checkout. You can unsubscribe at any time (Art. 6(1)(a) GDPR, consent).
• Payment data — processed by Stripe for the €20 deposit. We never store card data (Art. 6(1)(b) GDPR).

We do not collect names, phone numbers, or special-category data (Art. 9 GDPR).

Third-party processors

We share your data only with the following sub-processors, each covered by a data processing agreement, EU adequacy decision, or standard contractual clauses (SCCs):

• Formspree Inc. (USA) — receives and stores reservation emails. Covered by SCCs.
• Stripe Inc. (USA/EU) — payment processing. Covered by SCCs and Stripe's EU Data Processing Addendum.
• Hosting provider — website hosting and content delivery; may process IP addresses in server logs. Covered by SCCs and EU adequacy.
• ipapi.co (Kloudend Inc., USA) — used solely to detect your country from your IP address at page load, to display the site in the most appropriate language. No data is stored. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

We do not sell your data. We do not share it with advertisers or data brokers.

Cookies and tracking

This site uses no third-party analytics, advertising pixels, or tracking cookies by default. If you accept optional analytics via the cookie banner, we use a privacy-first tool with no cross-site tracking, no fingerprinting, and anonymised IPs. You can withdraw consent at any time by clicking 'Cookie settings' in the footer.

Strictly necessary cookies (session state, form protection) are set without consent under the ePrivacy Directive, as they are required for the site to function.

How long we keep your data

• Reservation email — until your order ships and the return window closes, then deleted.
• Marketing email — until you withdraw consent or request deletion.
• Payment records — kept by Stripe for legal and tax purposes (typically 7 years). We hold no card data.

Your rights (Art. 15 to 22 GDPR)

As an EU/EEA resident you can request access, correction, deletion, restriction, portability, or object to processing by emailing privacy@kineten.com with the subject line 'Data Request'. We may ask you to verify your identity before acting. privacy@kineten.com

You also have the right to complain to your national supervisory authority. In Portugal: CNPD, Comissão Nacional de Proteção de Dados (www.cnpd.pt).

Data deletion

To remove your email from our reservation list, email privacy@kineten.com with the subject 'Delete my data'. We will confirm within 30 days. Stripe retains payment records independently per its legal obligations. privacy@kineten.com

Changes to this policy

If we make material changes, we will update the date above and notify reservation holders by email where feasible.