Privacy Policy
Last updated: 1 April 2026
This Privacy Policy explains how Krytal collects, uses, and safeguards your personal information when you visit our website or contact us. Please read it carefully. By using our website, you acknowledge the practices described here.
1. Who We Are
Krytal (“we”, “us”, “our”) is a full-stack web development and digital marketing studio. Our website is krytal.com. For data protection enquiries, contact us at grow@krytal.com.
2. Data We Collect
We collect only what is necessary to respond to your enquiries and deliver our services:
- Contact form data — name, email address, the service you enquire about, and your message.
- Usage data — anonymous analytics (pages visited, session duration, referral source) via Google Analytics 4, only when our GA4 tag is active. No personally identifiable information is collected through analytics.
- Technical data — IP address (used server-side for rate limiting only; not stored or logged beyond the current server session).
We do not collect payment information, sensitive personal data, or data from children under 16.
3. How We Use Your Data
- To respond to your project enquiry or support request.
- To improve our website and understand which pages are most useful (analytics).
- To protect our contact form from automated spam (rate limiting and honeypot techniques).
- We do not sell, rent, or share your personal data with third parties for marketing purposes.
4. Legal Basis (GDPR)
- Legitimate interest — responding to enquiries you have sent to us.
- Consent — analytics tracking (where applicable under your browser's cookie settings).
- Legal obligation — where we are required to retain data by applicable law.
5. Data Retention
Contact form submissions (delivered via email) are retained in our email system for up to 2 years for business record-keeping. Anonymous analytics data is retained for 14 months as configured in Google Analytics. IP addresses used for rate limiting are held in server memory only and are lost on server restart — they are never written to disk or a database.
6. Your Rights
Under GDPR (and applicable data protection laws), you have the right to:
- Access — request a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate data.
- Erasure — request deletion of your data where there is no compelling reason to keep it.
- Objection — object to processing based on legitimate interest.
- Portability — receive your data in a structured, machine-readable format.
To exercise any of these rights, email grow@krytal.com. We will respond within 30 days.
8. Third-Party Services
- Google Analytics 4 — anonymous usage analytics. Data is processed by Google LLC under their privacy policy.
- Hostinger SMTP — our contact form emails are sent via Hostinger's mail infrastructure. No personal data is stored on third-party servers beyond email delivery.
9. Changes to This Policy
We may update this Privacy Policy from time to time. The “last updated” date at the bottom of this page will reflect any changes. We encourage you to review this page periodically.
10. Contact Us
If you have any questions about this Privacy Policy, please contact us at grow@krytal.com or visit our contact page.