How we handle your information
This notice covers ninekites.com. The site is run by Nine Kites, referred to here as "Nine Kites", "we" or "us". We decide how your information is used, so we are responsible for it under data protection law, including the UK and EU GDPR and Malaysia's Personal Data Protection Act.
If you send us an enquiry
When you use the "Let's talk" or "Send us your brief" form, we collect:
- What you type or choose: name, work email, company, message, your stage, industry and the help you need, and for a brief, the file or link you share and your timeline.
- Technical details sent with the form: your IP address, browser, operating system and device type, approximate location derived from your IP address (country, region, city, postcode and approximate coordinates), your network provider, the page and link that brought you here (including campaign tags), screen and window size, language, time zone, and how long you were on the page.
We use this to reply to you, to judge how we can help, and to understand which pages and campaigns bring us enquiries. Our legal basis is our legitimate interest in answering business enquiries and running our business, and steps you ask us to take before a possible contract.
We collect the technical details only when you send the form. We do not collect them from visitors who do not.
Spam protection
The form uses Cloudflare Turnstile to check that a person, not a bot, is sending it. Turnstile processes technical signals from your browser for that check only.
Analytics and cookies
We use two analytics tools to see how the site is used.
- Google Analytics sets cookies to count visits and see which pages, buttons and videos lead to enquiries. In the UK, the EU and Switzerland it stays off until you accept it in the cookie banner. Before you choose, or if you decline, Google may receive basic signals with no cookies and no identifier. Elsewhere it is on by default. You can change your choice at any time with "Cookie settings" at the foot of every page. We have turned off advertising features; nothing is used for ads.
- Cloudflare Web Analytics counts page views without cookies and without identifying you.
We also store your cookie choice in your browser so we do not ask again.
Who else handles it
We use these providers to run the site. They process your information on our behalf and under their own security terms:
- Cloudflare: hosting, the form, enquiry storage, spam protection and cookie-free analytics.
- Google: Google Analytics, our email inbox, and Google Calendar when you book a call.
- Resend: sends the enquiry to our inbox.
These providers may process data outside your country, including in the United States. Where the law requires it, transfers rely on safeguards such as the European Commission's standard contractual clauses. We do not sell your information or share it for advertising.
How long we keep it
- Enquiries: 24 months from our last contact with you, then deleted, unless we start working together.
- IP address and approximate coordinates: deleted after 12 months, sooner if the enquiry is deleted.
- Brief files: kept in our email inbox only, for the same period as the enquiry.
- Google Analytics data: 14 months, then deleted automatically.
Your rights
You can ask us for a copy of your information, to correct it, to delete it, or to stop using it. You can also object to how we use it. To do any of these, send us a message through the form on this site and say it is a privacy request. We will reply within one month.
If you are unhappy with how we handle your information, you can complain to your data protection authority. In the UK that is the Information Commissioner's Office; in Malaysia, the Personal Data Protection Commissioner.
Changes
If we change this notice, we will update the date at the top.