Privacy Policy
Last updated: March 2026
At Alkitu, we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website alkitu.com (the "Website"), in compliance with the General Data Protection Regulation (GDPR) and applicable data protection laws.
Data Controller
The data controller responsible for your personal data is:
Data We Collect
We may collect the following types of data:
Navigation Data
Anonymous information about how you use our Website, including pages visited, time spent, and referral sources. This data is collected via cookies only with your consent.
Contact Data
When you use our contact form, we collect your name, email address, and any message you send us.
Newsletter Data
If you subscribe to our newsletter, we collect your email address.
Technical Data
Browser type, operating system, and general geographic location (country/region). This data is anonymized and used for analytics purposes only.
Legal Basis for Processing
We process your personal data based on the following legal grounds:
How We Use Your Data
- To provide and maintain our Website
- To improve our Website and services based on anonymous analytics
- To respond to your inquiries via the contact form
- To send newsletters (only with your explicit consent)
- To ensure the security and proper functioning of our Website
Data Sharing
We do not sell your personal data. We may share data with the following third-party services that help us operate our Website:
| Service | Purpose |
|---|---|
| Supabase | Database hosting and authentication (EU/US servers with adequate safeguards) |
| Vercel | Website hosting and content delivery |
| Resend | Email delivery for contact forms and newsletters |
Data Retention
We retain your data only for as long as necessary for the purposes described in this policy:
- Analytics data: 90 days
- Contact form submissions: 12 months
- Newsletter subscriptions: Until you unsubscribe
- Cookie consent preferences: 1 year
Your Rights Under GDPR
You have the following rights regarding your personal data:
Right of Access
You can request a copy of the personal data we hold about you.
Right to Rectification
You can request correction of inaccurate or incomplete data.
Right to Erasure
You can request deletion of your personal data ("right to be forgotten").
Right to Restrict Processing
You can request that we limit the processing of your data.
Right to Data Portability
You can request your data in a structured, machine-readable format.
Right to Object
You can object to the processing of your personal data.
Right to Withdraw Consent
You can withdraw your consent at any time by adjusting your cookie settings or contacting us.
Data Security
We implement appropriate technical and organizational measures to protect your personal data, including encryption, access controls, and regular security assessments.
Children's Privacy
Our Website is not directed at children under the age of 16. We do not knowingly collect personal data from children.
Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date. We encourage you to review this policy periodically.
Supervisory Authority
If you believe your data protection rights have been violated, you have the right to file a complaint with your local data protection supervisory authority.
Contact Us
To exercise your rights or for any questions about this Privacy Policy, please contact us at: