01Who we are
This website is operated by KartShield Cyber (“KartShield”, “we”, “us”). For personal data processed through this website, we are the controller under the EU General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”).
Contact: hello@kartshields.com. You can reach our Data Protection Officer at the same address.
This policy covers the website only. When we deliver security or compliance services to clients, we usually act as a processor on the client’s behalf under a separate data processing agreement (Article 28 GDPR).
02Data we collect
Information you give us
Our contact form does not send data to our servers. It opens your own email app with a pre-filled message. If you send that email — or write to any of our addresses — we receive your name, email address, company, the topic you selected, your message and any other details you include.
Information collected automatically
Like any website, our hosting provider processes technical data needed to deliver pages securely: IP address, date and time of the request, requested URL, browser user-agent, and referrer. These are kept in short-lived server logs for security and reliability.
Information that stays on your device
The game and a few preferences use your browser’s local storage. This data is never sent to us — see section 4.
We do not use analytics, advertising pixels, social media plugins, session replay tools or external fonts.
03Purposes & legal bases
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Replying to your enquiry and preparing a proposal | Contact details, message content | Art. 6(1)(b) — steps prior to entering a contract, or Art. 6(1)(f) — legitimate interest in responding to business enquiries |
| Delivering and securing the website | Server log data | Art. 6(1)(f) — legitimate interest in operating a secure, reliable website |
| Handling security vulnerability reports | Contact details, report content | Art. 6(1)(f) — legitimate interest in protecting our systems and users |
| Complying with legal obligations and defending legal claims | Relevant correspondence and records | Art. 6(1)(c) — legal obligation; Art. 6(1)(f) — legitimate interest |
We will never sell your personal data or use it for automated marketing without your consent. If we ask for consent (for example, for a newsletter), you can withdraw it at any time.
04Cookies & local storage
This website sets no cookies. It uses your browser’s local storage for the following strictly functional items, which remain on your device:
| Key | Purpose | Duration |
|---|---|---|
ks-best | Your best score, place, time and grade in the game | Until you clear your browser data |
ks-kart | Your chosen kart colour | Until you clear your browser data |
ks-muted | Whether game sound is on or off | Until you clear your browser data |
ks-notice | Remembers that you dismissed the privacy notice | Until you clear your browser data |
These items are strictly necessary to provide features you actively use, so no consent banner is required under the ePrivacy rules. You can delete them at any time through your browser settings.
05Who we share data with
We only share personal data with service providers who need it to operate our business, bound by data processing agreements:
- Website hosting — Vercel Inc., which serves this website and processes server log data.
- Email and collaboration — our business email provider, which stores correspondence you send us.
- Professional advisers — lawyers, auditors or insurers, where necessary and under confidentiality.
- Authorities — where required by law or to protect our rights and the safety of others.
06International transfers
We aim to keep personal data within the European Economic Area. Our website hosting provider is based in the United States and may process server log data outside the EEA. Where that happens, transfers are protected by the EU–U.S. Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses, together with supplementary measures where needed. You can request a copy of the relevant safeguards by contacting us.
07How long we keep data
- Enquiries that don’t lead to a contract: up to 24 months after our last contact, then deleted.
- Client correspondence and contracts: for the duration of the relationship and afterwards as required by applicable tax and commercial law.
- Server logs: kept by our hosting provider for a short period, typically no longer than 30 days.
- Local storage: controlled entirely by you.
08Security
Security is our job, so we hold ourselves to the standard we set for clients: encrypted connections (HTTPS with HSTS), a strict Content Security Policy, no third-party scripts, least-privilege access to mailboxes, multi-factor authentication and regular testing. If you discover a vulnerability, please report it responsibly to hello@kartshields.com.
09Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you (Art. 15);
- Rectify inaccurate or incomplete data (Art. 16);
- Erase your data in certain circumstances (Art. 17);
- Restrict processing (Art. 18);
- Data portability for data you provided to us (Art. 20);
- Object to processing based on legitimate interests, and to direct marketing at any time (Art. 21);
- Withdraw consent at any time, where processing is based on consent (Art. 7(3)).
To exercise any right, email hello@kartshields.com. We will respond within one month, which may be extended by two further months for complex requests. We may need to verify your identity first.
10Children & automated decisions
Our services are aimed at businesses and our website is not directed at children under 16. We do not knowingly collect their personal data.
We do not make decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects for you. The in-game “posture grade” is a game score only and is not stored by us.
11Changes to this policy
We may update this policy when our website or the law changes. The “last updated” date at the top shows when it was last revised. Material changes will be highlighted on this page.
12Contact & complaints
Questions about this policy or your data: hello@kartshields.com.
You also have the right to lodge a complaint with a data protection supervisory authority — in particular in the EU/EEA country where you live, work or where an alleged infringement took place. We’d appreciate the chance to address your concerns first.