Privacy policy
Effective: June 2, 2026
- We use no cookies for tracking. No Google Analytics, no Facebook Pixel, no advertising trackers.
- We use Vercel's privacy-friendly analytics to count anonymous page views. No personal data, no fingerprinting.
- If you contact us, we send your message through Resend and keep the conversation in our inbox so we can reply.
- We don't sell your data. We don't share it with advertisers, brokers, or anyone for marketing.
- You can email us anytime at contact@kaizentalent.co to access, correct, or delete your data.
Kaizen Talent ("we", "our", "us") is a trading name of Platinum Prime Trading Ltd, a company incorporated in Malta under registration number C 102560, with its registered office at The Core, Valley Road, MSD 9021, Msida, Malta. We operate kaizentalent.co.
This policy explains what data we collect when you visit the site or contact us, what we do with it, how long we keep it, and what rights you have. It applies to anyone who visits the public site.
For any privacy-related question or request, email contact@kaizentalent.co. We respond within 30 days, often sooner.
1. What we collect
When you visit the site
We use Vercel Web Analytics and Vercel Speed Insights to understand which pages people read and how the site performs. These are cookie-free, anonymized, and aggregated. They collect:
- The URL of the page you viewed and the page that linked you here (the referrer)
- Approximate country (from IP, never stored as IP)
- Device type, browser, screen size (for layout/performance debugging)
- Anonymized performance metrics (load time, layout shift, etc.)
We do not collect your name, email, IP address, or any other identifying information from page visits. We cannot identify individual visitors.
Our hosting provider Vercel automatically captures basic server logs (request paths, timestamps, IP address truncated for security purposes). These are retained briefly for operational and security reasons.
When you fill out the contact form
If you submit our contact form, you provide:
- Name (required)
- Email address (required)
- Company name (optional)
- Budget range (optional)
- Service of interest (optional)
- Your message
This is sent to our inbox through Resend, our transactional email provider. We use this information only to respond to you.
When you receive a campaign brief
If you are a creator working with us, we may send you a link to a private campaign brief (a URL of the form /live-campaign-…). Visiting that link does not collect any personal information beyond the analytics described above.
2. How we use your information
We use the data above for the following purposes, with the following legal bases under the GDPR (for EU/UK visitors):
| Purpose | Legal basis (GDPR) |
|---|---|
| Respond to your inquiry or proposal request | Pre-contractual measures / legitimate interest |
| Send you proposals, contracts, or campaign briefs (only if you are a prospect or active partner) | Pre-contractual measures / legitimate interest |
| Understand site traffic in aggregate | Legitimate interest (no personal data) |
| Operate, debug, and secure the site | Legitimate interest |
| Comply with applicable law | Legal obligation |
We do not:
- Profile you for advertising
- Sell, rent, or trade your personal data
- Make automated decisions that have legal effect on you
- Track you across other websites
- Use your data to train AI models
3. Who we share data with
We rely on the following service providers ("processors") to operate. We share only what's necessary to deliver the service:
| Provider | What it does for us | Data shared |
|---|---|---|
| Vercel Inc. (USA) | Site hosting, analytics, speed insights | Page visit metadata, server request logs |
| Resend (USA) | Transactional email delivery for the contact form | Contact form submissions, delivery logs |
| Supabase (USA) | Database + authentication for our internal admin and campaign brief system | Brief content, admin account data — no public-visitor data |
| Google Fonts (USA) | Hosts the typefaces the site uses | Your browser's IP (for font delivery only — no tracking) |
Each provider has its own privacy policy:
- Vercel: vercel.com/legal/privacy-policy
- Resend: resend.com/legal/privacy-policy
- Supabase: supabase.com/privacy
- Google: policies.google.com/privacy
We may also disclose personal data if required by law (court order, subpoena), or to protect our rights or the safety of others.
4. International data transfers
Our service providers are based in the United States. When we transfer personal data from the EU, UK, or other regions to US providers, we rely on legal safeguards including:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- EU–US Data Privacy Framework where the provider is certified (Vercel and Google are DPF-certified)
You can request more information about the safeguards we use by emailing us.
5. How long we keep your data
| Type of data | Retention period |
|---|---|
| Contact form inquiries and email correspondence | Up to 36 months, so we can follow up |
| Server logs (Vercel) | 30 days (Vercel default) |
| Analytics aggregates | 12 months |
| Campaign brief data (creator-facing) | Until the campaign ends + 12 months |
| Anything you ask us to delete | Deleted within 30 days of your request |
6. Your rights
Depending on where you live, you have rights under the GDPR (European Union, United Kingdom), the CCPA / CPRA (California), and similar laws. We honor the following rights for everyone, regardless of where you live:
- Access — request a copy of the personal data we hold about you
- Rectification — ask us to correct inaccurate or incomplete data
- Erasure / deletion — request we delete your data, subject to any legal retention requirements
- Restriction — ask us to limit our processing of your data
- Portability — receive a copy of your data in a portable format (JSON or CSV)
- Objection — object to processing based on legitimate interest
- Withdraw consent — where we rely on consent, you can withdraw at any time (without affecting past processing)
- Opt out of "sale" / "sharing" — we do not sell or share personal data for cross-context behavioral advertising, but you can confirm this anytime
- Non-discrimination — we will not deny services, charge different prices, or provide a different level of service because you exercised your privacy rights
- Complain — lodge a complaint with your local data protection authority
For California residents (CCPA / CPRA)
In addition to the rights above, California residents can request that we disclose:
- The categories of personal information we collected about you in the past 12 months
- The categories of sources from which we collected it
- The business or commercial purpose for collecting it
- The categories of third parties we shared it with
- The specific pieces of personal information we have about you
You can submit a request by emailing contact@kaizentalent.co with the subject line "CCPA Request." We will verify your identity through email confirmation before responding. We do not sell personal information.
How to exercise any right
Email contact@kaizentalent.co with a description of what you'd like. We may need to verify your identity (typically through email confirmation) before responding. We aim to respond within 30 days; if we need more time, we'll let you know why.
7. Cookies
We do not use cookies to track visitors. Public visitors get no cookies from us.
We also do not use any of the following common trackers:
- Google Analytics
- Facebook (Meta) Pixel
- TikTok Pixel
- Hotjar, FullStory, Mouseflow, or other session-recording tools
- Advertising or retargeting pixels
- Marketing automation cookies
If you have disabled cookies in your browser, the site works fine.
If we ever add tools that set non-essential cookies in the future, we will update this policy and add a clear consent banner before any such cookie is set.
8. Children's privacy
Our services are intended for businesses and professional creators. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal data, email us and we will delete it promptly.
9. Security
We use commercially reasonable security measures to protect data, including:
- HTTPS / TLS encryption for all site traffic
- Strict Content Security Policy and HTTP security headers
- Rate limiting on the contact form and API endpoints to prevent abuse
- Encrypted database storage (Supabase)
- Need-to-know access for our team
- Independently rotated credentials for service providers
No system is 100% secure. If we ever become aware of a personal data breach likely to result in risk to your rights, we will notify affected users and the relevant authorities within 72 hours, as required by the GDPR.
10. Changes to this policy
We may update this policy as our services or applicable laws evolve. The "Effective" date at the top reflects the most recent change. For material changes, we'll post a notice on the site or notify you by email if we have your address. Continued use of the site after the effective date constitutes acceptance.
11. Disclaimer
This policy was prepared in plain language to be understandable. It is not legal advice. If you require legal interpretation of how this policy applies to a specific situation, please consult a qualified attorney.
Contact us
For any privacy question, data request, or concern:
Email: contact@kaizentalent.co
Data controller: Platinum Prime Trading Ltd (trading as Kaizen Talent)
Registered office: The Core, Valley Road, MSD 9021, Msida, Malta
Registration number: C 102560
If you are in the EU or UK and unsatisfied with our response, you can lodge a complaint with your national data protection authority. Malta's authority is the Information and Data Protection Commissioner (IDPC). In the United States, California residents may contact the California Attorney General's office.