Privacy Policy

Who we are

Cem Gorer, operating under the Kihon Labs name, is responsible for the data processing described in this policy. Kihon Labs is a commercial systems research and advisory practice based in Barcelona, Spain, operating with B2B companies internationally. Contact requests are routed through the Contact page until the Kihon Labs domain email is activated.

What this site collects

The Strain Check runs entirely in your browser: answers are not sent to us or stored. Nothing optional loads until you accept optional cookies. Two optional tools are present. HubSpot forms and the HubSpot meetings scheduler load only after you accept optional cookies; if you reject them, the forms do not load at all and you can still reach us by email. Vercel Analytics and Vercel Speed Insights load on the same condition; their scripts are served from this domain, and once you accept optional analytics they send anonymised page-view and performance data to Vercel, which processes it on our behalf. Tag managers and visitor-identification tools require provider identifiers that are not configured, so they cannot load at all. Standard hosting logs may be processed for security and availability; they are not used by Kihon Labs to build a marketing profile.

Information you give us directly

If you book a call, send an email or complete a form, we process the details you provide (typically name, email address, company and what you tell us about your situation) to respond to you and, where relevant, scope an engagement. Enquiry data is processed on the basis of taking steps at your request before a possible contract and Kihon Labs' legitimate interest in responding to business enquiries. Newsletter subscriptions are processed on the basis of your consent. We do not sell or rent personal data.

Service providers and external resources

Fonts are self-hosted on this domain, so no external font service receives a request. Vercel is the hosting provider and also the analytics provider. Vercel Web Analytics and Vercel Speed Insights run only after you accept optional analytics; their scripts are served from this origin and set no third-party cookies, and the anonymised page-view and performance data they collect is transmitted to Vercel and processed there. HubSpot is the provider for forms, the meetings scheduler, the CRM and the research-notes email list, and processes that data on our behalf in its European data centre. HubSpot scripts load only after you accept optional cookies. Subscribing to the research notes requires your explicit consent, recorded at the point you give it, and every note carries an unsubscribe link. GA4 or Google Tag Manager may later be used for consented measurement; LinkedIn Insight Tag may later be used for consented campaign measurement. RB2B may be used only after its GDPR implications and contractual safeguards are confirmed. None of those three is configured, and each would be activated only after configuration, disclosure and the relevant consent path are in place.

How long we keep it

Enquiry correspondence is retained only as long as needed for the enquiry and any resulting engagement, and for the period required by Spanish accounting and tax obligations where a commercial relationship follows. Research-notes subscription data is kept in HubSpot until you unsubscribe or request deletion, subject to any limited records that must be retained by law, including the record of your consent itself.

Your rights

Under the GDPR you have the right to access, correct, delete, restrict or object to the processing of your personal data and the right to data portability where applicable. You may also withdraw newsletter consent at any time. To exercise these rights, use the Contact page. You also have the right to lodge a complaint with the Spanish data protection authority, the Agencia Española de Protección de Datos.

Client engagement data

Data gathered inside a client engagement (interviews, CRM extracts, pipeline data) is governed by the engagement contract and its confidentiality terms, not by this policy. Such data is handled under agreed confidentiality, stored securely, and is not reused for any purpose outside that engagement without written permission.

Changes

If this policy changes, the updated version will be posted here with a new date.