Privacy Policy
Last updated: October 2026
Who we are
Cem Gorer, operating under the Kihon Labs name, is responsible for the data processing described in this policy. Kihon Labs is a commercial systems research and advisory practice based in Barcelona, Spain, operating with B2B companies internationally. Contact requests reach the founder through the Contact page or directly at cemgorer@kihonlabs.com.
What this site collects
The Leak Check runs in your browser until you ask for your read; then your ten answers, the score and your email are sent to HubSpot’s forms service and stored on your contact record, so the read can reach you by email and be read before a call. Asking for the read also subscribes you to Kihon Labs Weekly; every email carries an unsubscribe link, and you can ask for the record to be deleted at the address below.
Nothing optional loads until you accept optional cookies.
Forms. The enquiry and subscription forms are drawn by this site, not by HubSpot: using them needs no HubSpot script and no cookie. When you submit one, what you typed and the consent you gave are sent to HubSpot's forms service and stored there. The meetings scheduler on the contact page loads from HubSpot only when you press to open it.
Cookies. HubSpot's tracking code sets its cookies only after you accept optional cookies; if you reject them, it sets none, and you can still reach us by email.
Analytics. Vercel Analytics and Vercel Speed Insights load on the same condition. Their scripts are served from this domain, and once you accept optional analytics they send anonymised page-view and performance data to Vercel, which processes it on our behalf. Tag managers and visitor-identification tools require provider identifiers that are not configured, so they cannot load at all.
Hosting logs. Standard hosting logs may be processed for security and availability; they are not used by Kihon Labs to build a marketing profile.
Information you give us directly
If you book a call, send an email or complete a form, we process the details you provide (typically name, email address, company and what you tell us about your situation) to respond to you and, where relevant, scope an engagement. Enquiry data is processed on the basis of taking steps at your request before a possible contract and Kihon Labs' legitimate interest in responding to business enquiries. Newsletter subscriptions are processed on the basis of your consent. We do not sell or rent personal data.
Service providers and external resources
Fonts are self-hosted on this domain, so no external font service receives a request. Vercel is the hosting provider and also the analytics provider. Vercel Web Analytics and Vercel Speed Insights run only after you accept optional analytics; their scripts are served from this origin and set no third-party cookies, and the anonymised page-view and performance data they collect is transmitted to Vercel and processed there. HubSpot is the provider for forms, the meetings scheduler, the CRM and the Kihon Labs Weekly email list, and processes that data on our behalf in its European data centre. HubSpot's tracking cookies are set only after you accept optional cookies; the forms themselves need none. Subscribing to Kihon Labs Weekly requires your explicit consent, recorded at the point you give it, and every issue carries an unsubscribe link. GA4 or Google Tag Manager may later be used for consented measurement; LinkedIn Insight Tag may later be used for consented campaign measurement. RB2B may be used only after its GDPR implications and contractual safeguards are confirmed. None of those three is configured, and each would be activated only after configuration, disclosure and the relevant consent path are in place.
How long we keep it
Enquiry correspondence is retained only as long as needed for the enquiry and any resulting engagement, and for the period required by Spanish accounting and tax obligations where a commercial relationship follows. Kihon Labs Weekly subscription data is kept in HubSpot until you unsubscribe or request deletion, subject to any limited records that must be retained by law, including the record of your consent itself.
Your rights
Under the GDPR you have the right to access, correct, delete, restrict or object to the processing of your personal data and the right to data portability where applicable. You may also withdraw newsletter consent at any time. To exercise these rights, use the Contact page. You also have the right to lodge a complaint with the Spanish data protection authority, the Agencia Española de Protección de Datos.
Client engagement data
Data gathered inside a client engagement (interviews, CRM extracts, pipeline data) is governed by the engagement contract and its confidentiality terms, not by this policy. Such data is handled under agreed confidentiality, stored securely, and is not reused for any purpose outside that engagement without written permission.
Changes
If this policy changes, the updated version will be posted here with a new date.
The policy, in four questions.
What data does this site collect?
How long is it kept?
Is it shared with third parties?
How do I request that my data be deleted?
Back to the work.
See what we do
The full service ladder, from a Diagnosis on its own to an ongoing Partnership.
Understand the method
The socio-economic approach behind the diagnostic, and how it quantifies financial consequences the evidence reaches.
Start a conversation
A short call to establish whether a Diagnosis is the right next step for your system.
Questions about any of this?
Use the Contact page, or write to cemgorer@kihonlabs.com, and you will get a direct answer.