Knead

Last updated: August 6, 2025

Introduction

At Knead, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

Information We Collect

Personal Information You Provide

We collect personal information that you voluntarily provide to us when you:

Create an account or register for our services
Contact us via email, phone, or contact forms
Subscribe to our newsletter or marketing communications
Participate in surveys, contests, or promotional activities
Make payments or complete transactions
Submit feedback, reviews, or testimonials

This information may include: name, email address, phone number, mailing address, billing information, company name, job title, demographic information, and any other information you choose to provide.

Automatically Collected Information

When you visit our website, we automatically collect technical information including:

IP address and geolocation data
Browser type, version, and language settings
Operating system and device information
Referring and exit pages and URLs
Pages viewed, time spent on pages, and click-through rates
Date and time of visits
Search terms used to find our website
Unique device identifiers

Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your browsing activities. This includes:

Session cookies (deleted when you close your browser)
Persistent cookies (remain until deleted or expired)
First-party and third-party cookies
Analytics cookies to understand website usage
Marketing and advertising cookies
Functional cookies for website features

Information from Third Parties

We may receive information about you from third-party sources, including:

Social media platforms (when you connect your accounts)
Business partners and affiliates
Data brokers and marketing companies
Public databases and records
Analytics providers and advertising networks

Legal Basis for Processing

We process your personal information based on the following legal grounds:

Consent: When you have given us explicit consent to process your data for specific purposes
Contract: When processing is necessary to fulfill our contractual obligations to you
Legal Obligation: When we must process data to comply with legal requirements
Legitimate Interest: When we have a legitimate business interest that doesn't override your privacy rights
Vital Interest: When processing is necessary to protect someone's life or physical safety

How We Use Your Information

We use the information we collect for the following purposes:

Service Provision and Management

Provide, operate, and maintain our services
Process transactions and manage payments
Create and manage user accounts
Deliver requested products or services
Provide customer support and respond to inquiries

Communication and Marketing

Send service-related communications and updates
Deliver newsletters and promotional materials (with consent)
Conduct surveys and collect feedback
Send administrative information about changes to terms or policies

Analytics and Improvement

Analyze website usage and user behavior
Improve our website, services, and user experience
Develop new products and features
Conduct research and data analysis

Security and Compliance

Detect, prevent, and address technical issues
Protect against fraud, abuse, and security threats
Comply with legal obligations and enforce our terms
Resolve disputes and investigate violations

Consent and Choice

Where we rely on your consent to process personal information, you have the right to:

Withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal
Opt-out of marketing communications by using unsubscribe links or contacting us directly
Manage cookie preferences through our cookie banner or browser settings
Choose not to provide optional information, though this may limit service functionality

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law.

Retention Periods

Account Information: Retained while your account is active and for 3 years after account closure
Transaction Records: Retained for 7 years for accounting and legal compliance purposes
Marketing Communications: Retained until you unsubscribe or withdraw consent
Website Analytics: Automatically deleted after 26 months
Customer Support Records: Retained for 3 years after case closure
Legal Hold Data: Retained indefinitely while legal proceedings are pending

Data Deletion

When personal information is no longer needed, we will:

Securely delete or destroy the information using industry-standard methods
Ensure that any copies or backups are also deleted
Anonymize data where complete deletion is not technically feasible
Maintain deletion logs for compliance purposes

Data Security

We implement comprehensive technical, physical, and administrative safeguards to protect your personal information:

Technical Safeguards

Encryption of data in transit and at rest using industry-standard protocols
Regular security assessments and vulnerability testing
Multi-factor authentication for system access
Automated security monitoring and intrusion detection
Regular software updates and security patches

Administrative Safeguards

Role-based access controls limiting data access to authorized personnel
Regular employee training on data protection and privacy
Background checks for employees with access to personal information
Incident response procedures for data breaches
Regular review and updating of security policies

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will:

Notify relevant supervisory authorities within 72 hours of discovery
Inform affected individuals without undue delay
Provide clear information about the nature of the breach
Outline steps taken to address the breach and prevent future incidents
Offer guidance on protective measures you can take

Information Sharing and Disclosure

We may share your personal information in the following circumstances:

Service Providers and Business Partners

We may share information with trusted third-party service providers who assist us in operating our business, including:

Cloud hosting and storage providers
Payment processors and financial institutions
Analytics and marketing service providers
Customer support and communication tools
Security and fraud prevention services
IT support and maintenance providers

Legal Requirements and Protection

We may disclose your information when required by law or to:

Comply with legal obligations, court orders, or government requests
Enforce our terms of service and other agreements
Protect our rights, property, and safety or that of others
Investigate and prevent fraud, security breaches, or illegal activities
Respond to claims that content violates third-party rights

Business Transactions

In the event of a merger, acquisition, sale, or other business transaction, your information may be transferred as part of that transaction, subject to appropriate confidentiality protections.

Aggregated and De-identified Data

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you for research, analytics, or marketing purposes.

With Your Consent

We may share your information with third parties when we have your explicit consent to do so, such as when you authorize us to share data with integrated applications or social media platforms.

Your Privacy Rights

Depending on your location and applicable privacy laws (including GDPR, CCPA, and other regulations), you may have the following rights regarding your personal information:

Access and Portability Rights

Right to Access: Request a copy of the personal information we hold about you
Right to Data Portability: Receive your data in a structured, machine-readable format
Right to Information: Learn about how we process your personal information

Correction and Deletion Rights

Right to Rectification: Correct inaccurate or incomplete personal information
Right to Erasure: Request deletion of your personal information under certain circumstances
Right to Restrict Processing: Limit how we use your personal information

Control and Objection Rights

Right to Object: Object to processing based on legitimate interests or for direct marketing
Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
Right to Opt-Out: Opt-out of the sale or sharing of personal information (where applicable)

California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights including:

Right to know what personal information is collected and how it's used
Right to delete personal information (subject to certain exceptions)
Right to opt-out of the sale of personal information
Right to non-discrimination for exercising your privacy rights
Right to correct inaccurate personal information
Right to limit the use of sensitive personal information

How to Exercise Your Rights

To exercise any of these rights, you may:

Email us at privacy@knead.com with your request
Call us at (555) 123-4567
Submit a request through our online privacy portal (if available)
Send a written request to our mailing address

We will respond to your request within the timeframes required by applicable law (typically 30-45 days). We may need to verify your identity before processing certain requests.

International Data Transfers

Your personal information may be transferred to, stored, and processed in countries other than your country of residence. These countries may have different data protection laws than your country.

Transfer Safeguards

When we transfer your personal information internationally, we ensure appropriate safeguards are in place, including:

Standard Contractual Clauses approved by the European Commission
Adequacy decisions by relevant data protection authorities
Binding Corporate Rules for intra-group transfers
Certification schemes and codes of conduct
Other lawful transfer mechanisms under applicable privacy laws

Jurisdictional Compliance

We comply with privacy laws in multiple jurisdictions, including:

European Union: General Data Protection Regulation (GDPR)
United Kingdom: UK GDPR and Data Protection Act 2018
California: California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA)
Canada: Personal Information Protection and Electronic Documents Act (PIPEDA)
Other jurisdictions: Applicable local privacy and data protection laws

Children's Privacy

We are committed to protecting the privacy of children. Our services are not intended for children under the age of 13 (or 16 in the European Union), and we do not knowingly collect personal information from children under these ages.

Age Verification and Parental Consent

We implement age verification measures where required by law
We obtain verifiable parental consent before collecting information from children where legally required
Parents may review, modify, or delete their child's personal information by contacting us
We provide parents with control over their child's information and account settings

Discovery of Child Information

If we discover that we have collected personal information from a child without appropriate consent, we will:

Delete the information as soon as reasonably possible
Not use the information for any purpose
Not share the information with third parties
Implement additional safeguards to prevent future collection

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

Notification of Changes

When we make changes to this policy, we will:

Post the updated policy on this page with a new effective date
Notify you of material changes via email or prominent website notice
Provide advance notice where required by law
Obtain your consent for material changes where required

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us using the information below:

General Privacy Inquiries

Email: privacy@knead.com
Phone: (555) 123-4567
Mailing Address:
Knead Privacy Team
123 Business Street, Suite 100
City, State 12345
United States

Data Protection Officer

Email: dpo@knead.com
Phone: (555) 123-4568
Contact Name: Jane Smith, Data Protection Officer

EU Representative

Company: Knead EU Privacy Services
Email: eu-privacy@knead.com
Address:
Knead EU Representative
456 European Street
Dublin, Ireland

Response Times

We are committed to responding to your privacy-related inquiries promptly:

General inquiries: Within 5-7 business days
Privacy rights requests: Within 30-45 days as required by law
Data breach notifications: As required by applicable regulations
Urgent privacy concerns: Within 24-48 hours