Privacy Policy.

This policy explains what we collect when you use this website, why, who else is involved, and what you can ask us to do about it.

We have written it to describe what this website actually does. If something here does not match your experience of the site, tell us — that is a bug, and we want to know.

We collect two things: what you type into our contact form, and limited technical information about your visit. There is no account system on this website and no login, so there is no profile to build, and nothing is collected in your name unless you choose to send it.

When you submit the contact form

We also record when the form was submitted and a value confirming the submission passed our spam check. Please do not put sensitive information — financial account details, government identifiers, health information — into the message field. We do not need it and do not want to hold it.

Automatically, on every visit

Our web server records standard request information: your IP address, the pages you requested, the time of the request, and your browser and operating system. This is ordinary server logging — it happens on essentially every website — and we use it to keep the site running and secure.

Only if you accept analytics cookies

If you accept, Google Analytics records how you move through the site: pages viewed, approximate location derived from your IP address, referring source, device and browser type, and whether you submitted the contact form. If you decline, none of this is collected, because the analytics software is never loaded at all. See Cookies And Your Choice below.

What we never collect

We do not collect payment information on this website — there is nothing to buy here. We do not collect government identifiers, biometric data, precise device location, or information about children. We do not buy personal information from data brokers, and we do not build profiles of people who have not contacted us.

We do not use your information for automated decision-making that produces legal or similarly significant effects.

We do not sell your personal information. We do not share it for cross-context behavioural advertising. We run no advertising on this website, and we do not pass your details to anyone for their own marketing.

Three third parties process information in connection with this website. Each is listed with what it actually does.

Google Analytics 4 and Google Tag Manager

Google LLC, United States. Website analytics. Tag Manager loads the analytics and sets no cookies of its own. Neither runs unless you accept analytics cookies. Google’s Privacy Policy. You can also install Google’s browser opt-out add-on, which blocks Analytics on every site you visit.

Cloudflare Turnstile

Cloudflare, Inc., United States. A spam and bot check on the contact form. It examines technical signals from your browser and network connection to judge whether a submission is human. It runs only on the contact page. In our configuration it sets no cookies. Because it is a security control, it runs whether or not you have accepted analytics cookies. Cloudflare’s Privacy Policy.

Resend

Where your contact-form submission is delivered and stored.

Each of these acts on our instructions, for the purpose described, under contract. Beyond them, we disclose personal information in only two situations: to professional advisers bound by confidentiality, and where we are compelled by valid legal process — a court order, a subpoena, or a lawful demand we are required to answer. If we are ever compelled to hand over your information, we will tell you unless we are legally prohibited from doing so.

If eigenKOR is acquired or merges with another business, information may transfer as part of that transaction. It would remain subject to this policy until you were given notice of any change.

Nothing that tracks you loads until you choose. On your first visit a banner asks whether to allow analytics cookies. Until you answer, no analytics software loads at all. That is not a formality: the code that loads Google Tag Manager does not execute unless consent has been given.

Choose Decline and no analytics cookies are set; nothing is sent to Google.

Choose Accept and these cookies are set:

Your choice itself is remembered in your browser’s local storage under the name eigenkor_cookie_consent. It stays on your device, is never transmitted to us, and contains nothing but the word “granted” or “denied”.

Changing your mind. The Cookie Settings link in the site footer clears your stored choice and brings the banner back. You can also delete cookies through your browser at any time. Declining or clearing them does not break this website — no feature here depends on them.

We do not respond to Do Not Track browser signals, because there is no agreed standard for what a website should do on receiving one. The consent banner gives you a clearer and more reliable choice than DNT would.

We extend the following to everyone who contacts us, wherever you live. We have not made them conditional on which state or country you are in, because we would rather answer the request than argue about whether we have to.

• Know what information we hold about you, and who we have shared it with.
• Get a copy of it, in a portable format.
• Correct anything inaccurate.
• Delete it.
• Object to our use of it, or withdraw consent you previously gave.
• Not be treated differently for exercising any of these.

Email team@eigenkor.com and say what you want. We will acknowledge within 10 business days and complete the request within 45 days. If a request is genuinely complex we may take a further 45 days, and will tell you why before we do. There is no charge.

We may ask you to confirm your identity first — usually just replying from the email address that submitted the enquiry. That protects you, not us.

Two honest limits on deletion. Backups are overwritten on a rolling cycle, so a deleted record may persist in a backup briefly before it cycles out; it is not restored to active use in the meantime. And where we are required to retain something to meet a legal obligation or to establish or defend a legal claim, we will keep only that, and tell you what and why.

If you are in the EEA or the UK, you also have the right to complain to your national data protection authority. We would prefer you raise it with us first.

If you are in Texas, you may appeal a refused request by replying to our decision. If we deny the appeal we will explain why, and you may contact the Texas Attorney General at texasattorneygeneral.gov.

We protect this information with measures appropriate to what it is: business enquiries, not financial or health records.

The website is served entirely over HTTPS with strict transport security enforced. Access to contact-form submissions is limited to the people at eigenKOR who need it to respond to you. Analytics are consent-gated, so we hold no behavioural data at all on visitors who decline.

We will not tell you this is impossible to breach, because no honest company can. If a breach affects your information and creates real risk to you, we will notify you and the relevant authorities as required by law — and we will tell you what happened, rather than the minimum we can get away with.

We are based in Houston, Texas, and our service providers process information in the United States. If you contact us from outside the United States, your information is transferred here and handled under this policy and United States law, which may offer different protections than the law where you live.

For transfers from the EEA or the UK, we rely on the European Commission’s Standard Contractual Clauses, and the UK Addendum, as incorporated into our agreements with our processors.

This website is for businesses. It is not directed at children, and we do not knowingly collect information from anyone under 18. If you believe a child has sent us information, email team@eigenkor.com and we will delete it.

This site links to pages we do not control, including Google’s and Cloudflare’s. Once you follow such a link this policy no longer applies, and we would encourage you to read theirs.

If we change this policy we will update the date at the top and post the new version here. If a change materially affects how we handle information you have already given us, we will email you before it takes effect, at the address you used to contact us.

This policy is governed by the laws of the State of Texas, without regard to its conflict of law provisions. Any dispute arising out of it will be brought in the state and federal courts located in Harris County, Texas.

Nothing in this section removes a right you have under the law of the place you live, where that law says it cannot be removed by agreement.