Privacy Policy

This Privacy Policy explains how Knowledge Studio LLC ("we", "us", "our") handles personal data when you visit knowledge-studio.com or interact with the AI widget and contact form on our site.

We take a data-minimisation approach and do not sell your personal data.

What we collect

When you visit our website

Our website is hosted on standard infrastructure that logs basic technical data for security and operational purposes. We do not currently run analytics tracking or advertising cookies.

When you use the AI widget on our site

When you use the widget, we may process your queries, the AI responses, your interactions with the widget (such as link clicks), and associated technical data, for the purpose of operating, securing, and improving the service. A session identifier and interaction state may be stored briefly in your browser's sessionStorage while the widget is in use, and cleared when you close the tab.

If you choose to submit the contact form within the widget, we collect the details you provide (such as name, email, and message) to respond to your enquiry.

When you submit the contact form

If you submit our contact form, we may collect your name, email address, organisation, message content, and any other fields you complete. We use this information to respond to your enquiry, follow up about the services you asked about, maintain business records, and protect our site and business.

When you email us directly

If you email us at [email protected], that email is handled under standard email practices.

What we do with your data

We use personal data to respond to your enquiries, operate our website and widget, run our business, and meet legal obligations. We do not sell personal data, and we do not use personal data collected through this site for third-party advertising or marketing profiling.

We may disclose data where required by law, court order, or valid legal process, to protect our rights or systems from misuse, or in connection with a business transfer or reorganisation.

Service Providers and Recipients

To operate our website and deliver our services, we use a small number of trusted third-party service providers for hosting, AI model processing, email infrastructure, and business operations. All providers are vetted and operate under standard data processing terms.

Clients who sign a Data Processing Agreement with us receive a full list of service providers and sub-processors as part of that agreement.

Your rights

If you are located in the UK, EU, or a US state with applicable privacy laws, you have the right to request access to personal data we hold about you, correction of inaccurate data, deletion of data, restriction of or objection to certain processing, and portability of data you have provided.

To exercise any right, email [email protected]. We may need to verify your identity before acting on a request, and will assess and respond in line with applicable law, generally within 30 days. Some rights are not absolute (for example, we may need to retain data to comply with legal obligations or protect our rights).

Legal basis for processing (UK/EU visitors)

If you are located in the UK or EU, we rely on the following legal bases under UK GDPR / EU GDPR for our processing:

• Legitimate interest for operating our website, running the AI widget, responding to your enquiries, and protecting our systems from abuse
• Contract where processing is necessary to take steps at your request before entering into or performing a contract with you
• Legal obligation where we are required by law to process data (for example, responding to valid legal requests)
• Consent for any processing that would otherwise require it — you can withdraw consent at any time

Your right to complain

If you are in the UK or EU and believe we have not handled your personal data correctly, you have the right to lodge a complaint with a data protection supervisory authority. In the UK this is the Information Commissioner's Office (ICO) at ico.org.uk. In the EU, it is the supervisory authority in your Member State.

California Privacy Notice

If you are a California resident, this section applies to you in addition to the rest of this Privacy Policy.

• Categories of personal information and purposes. As described in the sections above.
• Sale of personal information. We do not sell personal information. We do not share personal information for cross-context behavioural advertising.
• Third-party collection. Our service providers may process technical data in the course of providing their services to us, but do not collect personal information from our visitors for their own purposes.
• Do Not Track. Our site does not respond to "Do Not Track" browser signals. We do not track users across third-party sites.
• Your rights. California residents have rights to know, delete, and correct personal information, and to opt out of sale or sharing. To exercise these rights, email [email protected].

Data retention

We keep personal data only for as long as reasonably necessary for the purposes described above. In practice this means:

• Widget session data is retained for limited operational, security, troubleshooting, and service improvement purposes, and for no longer than is reasonably necessary for those purposes
• Enquiry and correspondence data (including contact form submissions and direct email) is kept for as long as reasonably necessary to respond, follow up about requested services, maintain business records, resolve any disputes, and comply with legal obligations
• Some data may be retained longer where required for an ongoing client relationship, backup cycle, or legal obligation

International data transfers

Some of our service providers may process data in other countries, including outside the UK and EU. Where required by applicable law, appropriate safeguards are used for international transfers.

Security

We use industry-standard technical and organisational measures to protect data. No system is perfectly secure, but we take reasonable steps including TLS encryption, access controls, and minimisation of data collection as our core defensive principle.

Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected in the "Last Updated" date at the top of this page. Please check back occasionally.

Contact

For any questions about this Privacy Policy or how we handle your data:

Email: [email protected]