Privacy

Last updated September 25, 2026

K-leumas is an independent practice run by Samuel in Oakland, California, USA. I'm the "data controller" for information sent through this site, which means I decide how it's used. The short version: I only collect what you choose to send me, I use it to reply and to do the work, and I don't sell it or share it for marketing.

Questions or requests about your information: privacy@k-leumas.com

What I collect

I only receive information you send me yourself:

• Contact form: your name, email, company, project type, timeline, budget and message.
• Referral form: your name, email, what you do and your message.
• Email and calls: anything you share when we talk about a project.

Name, email and a message are needed for me to reply. Everything else is optional.

There's no advertising cookie on this site, and its fonts are hosted on the site itself, so browsing it doesn't send font requests to any other company.

Analytics

I use two analytics tools to understand which pages help people and where they get stuck. Neither is used for advertising, and I don't sell or share what they collect.

• Counting visits, without cookies (everyone). Vercel Analytics and PostHog count page views, clicks on links and buttons, how far down a page people scroll, and whether forms are started, sent or left unfinished. This uses no cookies or other storage on your device. PostHog links the pages you view on the same day using a code computed from your IP address and browser details with a secret that changes daily, so it can't recognise you on another day. The content you type into forms is never sent to either tool; for the contact form, only the project type, timeline and budget ranges you pick are recorded, without your name, email or message.
• Remembering your visit (only if you allow it). If you choose "Allow", PostHog stores a random ID in your browser (a cookie and local storage) so it can connect your visits over time, and records how you move through pages as a screen recording, with everything you type hidden. You can change your mind at any time below.

Why I use it, and the legal basis

• To reply, scope and quote a project. This is a step you've asked me to take before we might agree a contract.
• To do the work we agree on. This is needed to carry out our contract.
• To keep invoices and business records. Tax and accounting law requires this.
• To follow up a referral. When someone introduces you, I use your details only to contact you about that introduction. This is based on my legitimate interest in responding to referrals, and I'll tell you who referred you in my first message.
• To see how the site's doing. Cookie-free visit counting, based on my legitimate interest in understanding what's working, weighed against the minimal nature of this data. Remembering your visit and screen recordings are based on your consent, which you can withdraw at any time.

I don't sell your information, and I won't add you to a mailing list unless you ask to be on one.

Services that process it

These companies process information on my behalf, under data processing agreements:

• Formspree receives form submissions and forwards them to my inbox.
• Cal.com handles bookings when you schedule a call. What you enter there is also covered by Cal.com's own privacy policy.
• Vercel hosts the site and keeps short-lived server logs, such as IP addresses, to run and secure it. It also runs the site's analytics: your IP address is used for a moment to work out your rough location and then discarded, not stored.
• PostHog runs the site's product analytics described above. It's hosted in the EU (Frankfurt), so this data stays in the EU.

International transfers

I'm based in the United States, and so are the services above. If you're in the EU, UK or another country with data transfer rules, your information will be processed in the US. Those transfers are covered by the EU–US Data Privacy Framework (and its UK extension) where the provider is certified, or by the European Commission's standard contractual clauses.

How long I keep it

Messages from people who don't become clients are deleted within two years. Client records are kept as long as tax and accounting rules require. You can ask me to delete your information sooner at any time, unless I'm legally required to keep it.

Your rights

Wherever you live, you can ask to see the information I hold about you, correct it, have it deleted, or receive a copy to take elsewhere. You can also object to my using it for a referral follow-up. Email privacy@k-leumas.com and I'll respond within 30 days.

If you're in the EU or UK and aren't happy with how I've handled your information, you have the right to complain to your local data protection authority, such as the Information Commissioner's Office in the UK.

Changes

If anything here changes, I'll update this page and the date at the top.