Privacy Policy

Last updated: [EFFECTIVE DATE]. Controller: [LEGAL ENTITY NAME], [REGISTERED ADDRESS]. Contact: info@kinetos.shop.

1. Data we collect

• Enquiry data. Name, work email, studio name, target engine and the project description you send us through the contact form or by email.
• Contract and billing data. Signatory names, business address, VAT or tax identifiers, purchase order references and payment records.
• Project material. Meshes, textures, capture takes, rig files and reference material you share with us. These may incidentally contain personal data, for example the likeness or facial capture of a performer.
• Technical data. Server logs recording IP address, user agent, requested page and timestamp, used to keep this website secure and available.

2. Why we process it

• To respond to your enquiry and prepare a scope, rig specification and quotation.
• To perform a contract with you, deliver rigs and provide support during the warranty period.
• To comply with accounting, tax and statutory record-keeping obligations.
• To protect the security and integrity of our systems and your assets.

Where [APPLICABLE DATA PROTECTION LAW / JURISDICTION] requires a legal basis, we rely on performance of a contract, our legitimate interest in operating and securing the studio, compliance with legal obligations, or your consent where consent is the appropriate basis.

3. Performer and likeness data

Facial capture, body capture and likeness data are treated as confidential client material. We act as a processor on your instructions: we do not use this material to train models, do not publish it, and do not repurpose it for other clients or for marketing. You remain responsible for obtaining performer consents and releases.

4. Sharing and processors

We do not sell personal data. We share it only with service providers who help us operate: website and email hosting, secure file transfer, accounting and payment processing. Each is bound by a written agreement limiting use to our instructions. Current processors are listed at [PROCESSOR LIST OR ANNEX REFERENCE].

5. International transfers

Our providers may process data outside [PRIMARY JURISDICTION / EEA-UK STATUS]. Where that happens we rely on an adequacy decision or on standard contractual clauses together with supplementary safeguards where required.

6. Retention

• Unsuccessful enquiries: deleted within 12 months of last contact.
• Project files and rigs: retained for [PROJECT RETENTION PERIOD] after delivery for support and revisions, then deleted or returned on written request.
• Contracts and invoices: retained for the statutory period required by [TAX / ACCOUNTING JURISDICTION].
• Server logs: retained for up to 90 days.

7. Security

Access to client material is restricted to the personnel assigned to the engagement. Transfers use encrypted links, workstations and backups are encrypted at rest, and access is revoked when an engagement ends. We will notify you without undue delay if a breach affects your data or assets.

8. Your rights

Subject to [APPLICABLE DATA PROTECTION LAW], you may request access to, correction of, deletion of, or a copy of your personal data, object to or restrict certain processing, and withdraw consent where processing is consent-based. Write to info@kinetos.shop and we will respond within [STATUTORY RESPONSE PERIOD]. You may also complain to [SUPERVISORY AUTHORITY].

9. Cookies

This website uses only cookies and local storage strictly necessary to serve pages securely. We run no advertising trackers. If analytics are introduced, this policy will be updated and, where required, consent will be requested before any non-essential cookie is set.

10. Changes and contact

We will post any material change to this policy on this page with a revised effective date. For any privacy question or request, contact info@kinetos.shop.