Your privacy
matters.

Kiilu is a creative studio offering web development and brand content services, operated by Malin and Jimmy, based in Algarve, Portugal. We are the data controller for personal information collected through this website. You can reach us at hello@kiilu.io or via our contact page.

When you submit an inquiry through our contact form, we collect:

• Your name
• Your email address
• Your brand or company name (optional)
• The service you're interested in
• The content of your message

We also collect anonymous usage statistics through Vercel Analytics and — with your consent — Google Analytics 4. See the Analytics section below for details.

We collect this information solely to respond to your inquiry and, where relevant, to follow up about a potential project. We do not use your information for marketing purposes unless you have explicitly asked us to stay in touch. The legal basis for processing your data is our legitimate interest in responding to business inquiries (Article 6(1)(f) GDPR).

We retain inquiry data for up to 24 months from the date of last contact. If no project results from the inquiry, data is deleted after that period. You can request earlier deletion at any time.

Your inquiry data is handled by a small number of processors. Resend (email delivery, United States) receives your form submission and sends our reply, over an encrypted connection and under a data processing agreement that incorporates the EU Standard Contractual Clauses. Vercel, Inc. provides our hosting and privacy-friendly analytics. Only if you accept cookies, Google LLC (Google Analytics 4) processes anonymous analytics data as our processor; transfers to the United States are covered by the EU–US Data Privacy Framework (Google LLC is certified) and, where applicable, Standard Contractual Clauses. We do not sell, rent or share your personal data with any other third parties.

We use Vercel Analytics to collect anonymous page view statistics. This includes: pages visited, referrer, device type, and approximate country (derived from a hashed and discarded IP address). No cookies are set and no personally identifiable information is stored. We also use Vercel Speed Insights to measure page performance (Core Web Vitals). This collects no personal data whatsoever. We use Google Analytics 4 (GA4) to understand how visitors interact with our site — pages visited, time on site, traffic sources, and general device/browser information. GA4 only activates if you accept cookies. We use Google's Consent Mode v2, meaning analytics is blocked by default until you give consent. Google may process this data on servers in the United States under appropriate transfer safeguards (Standard Contractual Clauses). The legal basis for Vercel Analytics is our legitimate interest (Article 6(1)(f) GDPR). The legal basis for Google Analytics is your consent (Article 6(1)(a) GDPR).

This website uses a small number of cookies:

• Essential cookies — required for the contact form to function. Always active.
• Analytics cookies (Google Analytics 4) — only set if you click "Accept" on the cookie banner. GA4 sets two cookies: _ga (identifies unique visitors, 2-year expiry) and _ga_5659WDDWSF (session state, 2-year expiry). You can withdraw consent at any time by clearing your browser cookies.

Vercel Analytics and Speed Insights set no cookies. We do not use advertising or behavioural tracking cookies.

Under GDPR, you have the right to:

• Access the personal data we hold about you
• Correct any inaccurate information
• Request deletion of your data
• Object to processing based on legitimate interests
• Data portability — receive your data in a structured format

To exercise any of these rights, contact us via the contact page. We will respond within 30 days.

If you believe your data has been handled incorrectly, you have the right to lodge a complaint with Portugal's data protection authority, the CNPD (Comissão Nacional de Proteção de Dados) at www.cnpd.pt.

We may update this policy from time to time. When we make material changes, we update the date at the top of this page.