Legal

Privacy Policy

How Kosansh collects, uses, stores, and protects personal data, and how to exercise your rights.

Last reviewed: June 2026. This document is written in plain language. If something is not clear, use the Contact form and choose Security and privacy.

Policy content

What this policy covers

Visitors to kosansh.com and its brand hubs. People who submit forms, attend events, or receive updates. People who use portals we operate on behalf of a client. In the portal case the client is the data controller and we are the data processor following their instructions.

Personal data we collect

Details you choose to share through forms such as name, company, phone, website, and message. Technical data such as pages viewed and device type using privacy-respecting analytics. Event registrations and consent choices. We never collect data through hidden means or sell personal data to third parties.

How we use personal data

To answer your requests and provide services you ask for. To run events and share materials with registered attendees. To send updates if you opt in. To improve websites, content, and services through aggregated and de-identified reporting. To meet legal, security, and compliance needs.

Our legal bases

Your consent where you opt in to marketing. Contract when we provide services you request. Legitimate interests such as site security and product improvement where those interests do not override your rights. Legal obligations where we must keep records.

How we share information

Within our group of brands to deliver services you request. With service providers who support hosting, analytics, or communications, each under contract and only for stated purposes. With clients when we run a portal on their behalf. With authorities where law requires.

Data security

Encryption at rest for sensitive records in Postgres. Transport security using modern TLS protocols. Access controls and logging for reads and writes of personal data. Regular backups with tested restore procedures. Secure development practices with dependency reviews.

Data retention

We keep personal data only as long as needed for the purpose stated or as required by law. Sales and service requests are kept while the relationship is active. When data is no longer needed we delete it or de-identify it.

Your rights

Access, correction, deletion, and portability where applicable. The right to withdraw consent for marketing at any time. The right to object to certain processing based on our legitimate interests. The right to raise a concern. Use the Contact form and choose Security and privacy.

Children

Our websites and services are intended for business use by adults. We do not knowingly collect data from children under the age of 13.

International transfers

We may store or process information in more than one country. We use protections that match the destination and legal requirements, such as standard contract clauses where required.

Changes to this policy

We update this policy when we change how we handle data. We post the new version on this page with an updated date. Material changes are noted prominently so you know what is new.

How to contact us

Use the Contact form and choose Security and privacy. We confirm receipt and provide next steps. No email addresses are listed on this site.

Other legal documents

DPA

Data processing addendum for enterprise clients.