What we collect, why we collect it, and what you can ask us to do with it.
Last updated 6 August 2026
This policy explains how Kestrel Iota LLC ("Kestrel Iota", "we", "us") handles personal data collected through this website. It does not cover data we process on behalf of clients under a separate services agreement — that is governed by the data processing terms in the relevant contract.
Kestrel Iota LLC is the data controller for information collected through this website. For any privacy question or request, contact sales@kestreliota.com.
| Category | Examples | Why |
|---|---|---|
| Booking details | Name, email, company, phone, the details you type into the booking form | To schedule and prepare for your session |
| Enquiry content | Anything you write to us by email or in a form | To answer you |
| Technical data | IP address, browser type, pages visited, referring page | Security, abuse prevention, and understanding which pages are useful |
We do not collect special category data through this site, and we ask that you don't send it to us in a form field.
Our booking form uses Cloudflare Turnstile to tell humans from automated traffic. Turnstile receives technical signals from your browser in order to score the request. It is used solely for security and does not track you across sites for advertising. See Cloudflare's own privacy documentation for detail on what it processes.
We do not sell personal data. We share it only with service providers who help us operate: our hosting and email providers, Cloudflare for bot protection and delivery, and our calendar provider for scheduling. Each is bound to process data only on our instructions.
Enquiry and booking records are kept for up to 24 months from your last contact with us, unless you become a client, in which case retention follows the terms of the services agreement. Technical logs are kept for a substantially shorter period.
Depending on where you live, you may have the right to access, correct, delete, restrict, or port your personal data, and to object to processing based on legitimate interests. UK and EU residents may also complain to their supervisory authority. To exercise any of these, mail sales@kestreliota.com — we will respond within one month.
Some of our providers operate outside your country. Where data leaves the UK or EEA, we rely on the appropriate safeguards, such as standard contractual clauses.
This site uses only what is necessary to function and to run bot protection. If we introduce analytics or marketing cookies, we will ask for consent first and update this policy.
We'll update the date at the top of this page whenever this policy changes materially.