Privacy Policy

Introduction

This Privacy Policy explains how Khromie ("we", "us", or "our") collects, uses, and protects personal information when you visit our website. We are committed to protecting your privacy and handling your data transparently.

For details about the specific cookies and similar technologies we use, please see our Cookie Policy.

Data Controller

The data controller responsible for your personal information is Khromie. If you have questions about this policy or wish to exercise your rights, you can contact us through the Contact page.

Information We Collect

Information Collected Automatically

When you visit our website, we may automatically collect the following information depending on your consent choices:

• IP address (used for geographic region detection and analytics geo-location)
• Browser type, operating system, and device information
• Pages visited, time spent, and navigation patterns
• Referring website or campaign source
• Geographic region (country and state/region level, derived from IP address)

Information You Provide

When you use our contact form, you voluntarily provide:

• Name
• Email address
• Message content

How We Use Your Information

• To determine your regulatory region and apply the appropriate consent framework
• To analyze website usage and improve our content and performance (with your consent)
• To deliver relevant advertising and measure campaign effectiveness (with your consent)
• To respond to your inquiries submitted through the contact form
• To protect the website from abuse and ensure security

Legal Bases for Processing

We process your personal data under the following legal bases:

• Consent — For analytics and marketing data collection. You can grant or withdraw consent at any time.
• Legitimate interest — For essential website functionality, security (bot protection), and geographic region detection for consent compliance.
• Contract performance — To respond to your contact form submissions.

Third-Party Services

We share data with the following third-party services, subject to your consent choices:

• Google Analytics 4 — Website usage analytics. Data is processed in accordance with Google's privacy terms. When consent is denied, only anonymous aggregate data is collected.
• Meta (Facebook) Pixel — Advertising and conversion tracking. Only active when marketing consent is granted.
• Cloudflare — Content delivery, security, and bot protection. Processes data as a necessary service provider.
• Amazon Web Services — Website hosting and server-side data processing infrastructure.

Data Retention

• Analytics data — Retained by Google Analytics for up to 14 months, after which it is automatically deleted.
• Contact form submissions — Retained for as long as necessary to respond to your inquiry, then deleted.
• Server logs — Retained for up to 30 days for security and debugging purposes.

International Data Transfers

Your data may be transferred to and processed in countries outside your own, including the United States, where our service providers operate. These transfers are protected by appropriate safeguards such as Standard Contractual Clauses (SCCs) or the service provider's participation in recognized data protection frameworks.

Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — Request a copy of the personal data we hold about you.
• Rectification — Request correction of inaccurate personal data.
• Erasure — Request deletion of your personal data.
• Restriction — Request that we limit how we use your data.
• Portability — Request your data in a structured, machine-readable format.
• Objection — Object to processing based on legitimate interest.
• Withdraw consent — Withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us through our Contact page. We will respond within the timeframe required by applicable law.

Children's Privacy

Our website is not directed at children under 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a child, please contact us and we will promptly delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically.