What we do
with your data.

Who we are

KIX Labs is the trading name of KIX Labs Ltd, a company registered in England and Wales (company number 17479412), registered office 124 City Road, London, EC1V 2NX. KIX Labs Ltd is responsible for the personal data described below. You can reach us at [email protected], which is the same address that receives everything described below.

What we collect, and only when you send it

The contact form asks for your name, your email address, optionally your organisation, the kind of engagement you have in mind, and whatever you write in the brief. There is also an optional tick box asking whether you would like occasional notes about what we are building.

If you buy the website soft audit or the family home visit, the checkout asks for your name, email address and phone number, then either your business name and website address (audit) or your home address (home visit), and anything you choose to add in the notes box.

Nothing is collected unless you fill a form in and send it. There is no tracking of visits, no profile built from your browsing, and no data gathered in the background.

What happens to it

The form sends your message as an email to [email protected], relayed through Google Workspace. That is all it does. The form writes nothing to disk on our server, so your message exists only as an email in our mailbox and in Google's systems as our mail provider.

We use it to reply to you and to have the conversation you started. We do not sell it, share it with anyone else, or use it for advertising.

When you pay

Payments are handled by Stripe. Your card details go straight to Stripe and never reach us. Stripe keeps the order details listed above with the payment, and emails you a receipt and an invoice. We receive the order by email so that we can arrange the work.

Stripe is responsible for its own part of this under its own privacy policy, at stripe.com/privacy. It may process payment data outside the UK and the EU, with the safeguards the law requires.

If we set up your router

If we install a router in your home, we keep your name, your email address and the router's model on our own server, so that we can email you when a security update for it is released. We use them for nothing else.

Every update email lets you unsubscribe, with your email app's Unsubscribe button or by replying "no updates". Either takes you off the list for good.

Cookies, analytics and tracking

This site sets no cookies of its own. We run no analytics on it — no Google Analytics, no pixels, no third-party scripts watching what you do. There is no cookie banner because there is nothing to consent to.

One exception, when you choose to pay: continuing to payment loads Stripe's card form. It sets two cookies on this site, __stripe_mid (kept for a year) and __stripe_sid (kept for 30 minutes), and Stripe and the bot check it uses set their own on their own domains. They are there to prevent fraud, and the payment cannot work without them. If you never continue to payment, none of them is set.

One exception, stated for completeness: if you use the light and dark toggle, your choice is saved in your browser's local storage under the key "kx-theme". It holds the word "light" or "dark" and nothing else. It stays on your device, is never sent to us, and cannot identify you. Clearing your site data removes it. If you never touch the toggle, nothing is stored and the site simply follows your operating system's setting.

Some of our Security articles contain affiliate links to NordVPN and NordPass, marked as affiliate links where they appear. Clicking one sets nothing on this site and sends us nothing. It takes you to Nord's own site, which records that you arrived through our link so that it can pay us a commission if you buy. That is covered by Nord's own privacy policy, not this one.

The site is served from our own dedicated server, not a shared platform, and it stays inside the EU. Ordinary web server logs exist as a technical necessity, as they do for any website.

How long we keep it

Your email stays in the mailbox while the conversation is live and for a reasonable period afterwards, in case you come back to us. If you want it deleted sooner, ask and we will delete it.

If you buy something, we keep the order and payment record for six years, because HMRC requires a company to keep its financial records for that long. After that it is deleted.

If we set up your router, we keep your entry on the update list while we look after it. If you unsubscribe, we keep only the note that you did, so that you are never added back by mistake.

Your rights

You can ask what we hold about you, ask for a copy, ask us to correct it, or ask us to delete it. Email [email protected] and we will do it. There is no form and no process to go through — it reaches a person.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk.