Privacy Policy

This policy explains how Kestrel Iota LLC ("Kestrel Iota", "we", "us") handles personal data collected through this website. It does not cover data we process on behalf of clients under a separate services agreement: the data processing terms in that contract govern it.

1. Who we are

Kestrel Iota LLC is the data controller for information collected through this website. For any privacy question or request, contact sales@kestreliota.com.

2. What we collect

• Booking details. Your name, work email, company and role if you give them, the topic you choose and your message, so we can arrange and prepare for the conversation you asked for.
• Enquiry content. Anything you write to us by email or in the form, so we can answer you.
• Technical data. The internet address of the device that sends the form, and the address, browser type, page requested and referring page recorded in our server logs, for security and to prevent abuse. We do not run analytics.

We do not collect special category data through this site, and we ask that you don't send it to us in a form field.

3. Bot protection

Our booking form uses Cloudflare Turnstile to tell people from automated traffic. On pages with the form, Turnstile receives technical signals from your browser in order to score the request. It is used only for security and does not track you across sites for advertising. Cloudflare's own privacy documentation describes what it processes.

4. Legal basis

• Contract and pre-contract steps: handling your booking or enquiry.
• Legitimate interests: keeping the site secure and preventing abuse.
• Legal obligation: where we must keep records.

5. Sharing

We do not sell personal data. We share it only with the service providers who help us run the site: our hosting and email providers, and Cloudflare for bot protection. Each processes data only on our instructions.

6. Retention

We delete form submissions 12 months after they arrive, unless you become a client, in which case the services agreement sets retention. The internet address recorded with a submission is deleted after 30 days. Notification emails are removed from our inbox on the same 12-month schedule, backups of the form database expire after 30 days, and server logs are kept for a shorter period still.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or port your personal data, and to object to processing based on legitimate interests. UK and EU residents may also complain to their supervisory authority. To exercise any of these, email sales@kestreliota.com and we will respond within one month.

8. International transfers

Some of our providers operate outside your country. Where data leaves the UK or EEA, we rely on appropriate safeguards, such as standard contractual clauses.

9. Cookies

This site sets no cookies of its own, runs no analytics and serves its fonts from our own server. On pages with the booking form, Cloudflare's bot check may store a small amount of data in your browser. If we ever add analytics or marketing cookies, we will ask for consent first and update this policy.

10. Changes

We update the date at the top of this page whenever this policy changes materially.