Privacy Policy

Last Updated: April 2024

1. Data Controller

Kankunas LLC ("Company," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website located at www.kankunas.com (the "Website"), use our services, or interact with our company in any capacity.

We are a premium event planning agency based in New York specializing in weddings, corporate events, birthday parties, venue selection, catering coordination, and event decoration services. We take your privacy seriously and are committed to transparent data practices.

For questions about this Privacy Policy or our data practices, you can contact us at:

Email: [email protected]
Phone: +1 (555) 842-7654
Address: 450 Park Avenue, Suite 1200, New York, NY 10022

2. Information We Collect

We collect information about you in several ways:

2.1 Information You Provide Directly

You may provide information to us when you:

Contact Us: When you submit our contact form, email us, or call us, we collect your name, email address, phone number, and the content of your message
Schedule a Consultation: Information collected includes your full name, email, phone number, event type, event date, guest count, budget range, and any specific requirements or preferences
Request a Quote: Details about your event, venue preferences, catering needs, desired services, and contact information
Subscribe to Our Newsletter: Your email address when you opt-in to receive event planning tips, company news, and service updates
Book Services: Complete information needed to provide our event planning services, including legal names, dates of birth, payment information, vendor preferences, and detailed event specifications
Provide Feedback or Reviews: Comments, testimonials, and ratings about our services
Create an Account: Username, password, email, and profile information if we offer account functionality

2.2 Information Collected Automatically

When you visit our Website, we automatically collect certain information:

Technical Information: IP address, browser type and version, operating system, device type and identifiers, and referring URL
Usage Data: Pages visited, time spent on each page, clicks and interactions, search terms used, and the path through our website
Cookie Data: Information from cookies and similar tracking technologies (see our Cookie Policy for details)
Geolocation Data: Approximate geographic location based on IP address (not precise GPS location)
Device Information: Hardware model, unique device identifiers, mobile network information
Log Files: Server logs containing access times, pages viewed, referrer pages, and error messages

This information is collected through cookies, web beacons, pixels, and similar technologies as you navigate our Website.

2.3 Information from Third Parties

We may receive information about you from:

Vendors and Service Providers: Venues, caterers, florists, photographers, and other vendors may share client information with us for coordination purposes
Marketing Partners: Information from marketing partners about campaign performance and lead sources
Social Media Platforms: If you interact with us on social media (Facebook, Instagram, Pinterest), we may collect information from your public profiles
Payment Processors: Payment information and transaction details from our payment processing partners
Business Partners: Referral partners and other businesses may provide information about mutual clients
Publicly Available Sources: Information from public directories or databases

3. How We Use Your Data

We use the information we collect for various purposes:

3.1 Service Delivery

Planning and coordinating your event
Providing consultation and proposal services
Managing vendor relationships and communications
Creating timelines and schedules
Coordinating catering, décor, and other event elements
Communicating about your event before, during, and after
Delivering invoices and payment information

3.2 Communication and Customer Service

Responding to your inquiries and requests
Providing customer support and assistance
Sending confirmations and event updates
Following up after events to gather feedback
Providing event reminders and important dates
Addressing concerns or complaints

3.3 Marketing and Promotional Activities

Sending newsletters with event planning tips and company news (with your consent)
Informing you about new services or special offers
Requesting permission to use photos/video from your event for our portfolio
Creating case studies and success stories (with permission)
Promotional emails and targeted marketing communications
Social media marketing and engagement

3.4 Analytics and Improvement

Analyzing Website usage patterns and preferences
Understanding which services are most popular
Improving our website functionality and user experience
Optimizing our marketing efforts
Identifying technical issues and errors
Developing new services based on client needs

3.5 Legal Compliance and Security

Complying with applicable laws and regulations
Enforcing our Terms & Conditions
Protecting against fraud, theft, and illegal activity
Maintaining detailed records for business and legal purposes
Responding to legal requests from authorities
Preventing misuse of our services

3.6 Business Operations

Managing our business, including billing and accounting
Employee training and performance management
Creating aggregated, de-identified data for business analysis
Risk assessment and management
Insurance claims and dispute resolution

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

4.1 Consent

For certain activities, we rely on your explicit consent:

Sending marketing emails and newsletters (you can withdraw consent at any time)
Using photos/videos from your event in our portfolio or marketing materials
Storing payment information for future transactions
Creating testimonials or case studies featuring your event

You may withdraw consent at any time by contacting us at [email protected].

4.2 Contract

When you hire us to plan your event, processing is necessary to perform our contractual obligations:

Creating and executing our service agreements
Planning and coordinating your event
Billing and payment processing
Vendor management and coordination
Event delivery and execution

4.3 Legitimate Interests

We process data based on our legitimate business interests:

Improving our services and Website
Preventing fraud and ensuring security
Marketing our services to potential clients
Understanding client preferences and behavior
Maintaining detailed business records
Responding to inquiries and managing customer relationships

We balance our legitimate interests against your rights and privacy expectations.

4.4 Legal Obligation

We may process data when required by law:

Tax and financial reporting requirements
Employment and labor law compliance
Legal proceedings and court orders
Regulatory investigations
Data retention requirements

5. Data Sharing and Disclosure

We may share your information in limited circumstances:

5.1 Service Providers

We share necessary information with vendors and contractors who help us provide services:

Catering Companies: Guest count, dietary requirements, catering timeline, contact information
Venues: Date, guest count, layout preferences, technical requirements
Florists and Decorators: Design preferences, color scheme, delivery instructions
Photographers and Videographers: Event schedule, client contact information, shot list
Payment Processors: Payment information (securely transmitted with PCI DSS compliance)
Email Service Providers: Email address for newsletters (with your consent)
Cloud Storage and IT Services: Information necessary for secure data storage and backup

All service providers are contractually obligated to protect your information and use it only for the purposes we specify.

5.2 Legal Authorities

We may disclose information when legally required:

Law enforcement agencies with valid legal requests
Government agencies investigating potential violations
Court orders or subpoenas
Administrative agencies during investigations
As necessary to comply with applicable laws

5.3 Business Transfers

If Kankunas is involved in a merger, acquisition, bankruptcy, or other business transaction:

Your information may be transferred as part of that transaction
We will provide notice of any such change and any choices you may have
Receiving company must honor this Privacy Policy or provide notice of changes

5.4 With Your Consent

We may share information when you explicitly consent:

Sharing event photos/videos in our portfolio or marketing materials
Creating case studies or testimonials featuring your event
Recommending your event as a reference to potential clients (with permission)
Forwarding information to other vendors at your request

5.5 Aggregated and De-Identified Data

We may share aggregated, de-identified information that cannot identify you:

Industry trends and statistics
Event planning insights and data
Website usage analytics
Customer satisfaction metrics

6. Data Retention

We retain your information for as long as necessary to provide services and comply with legal obligations:

6.1 Client Information

Active Clients: Information retained throughout our engagement plus 3 years after event completion
Closed Accounts: Retained for 7 years for accounting, tax, and legal purposes
Financial Records: Retained for 7 years to comply with tax and accounting regulations
Contracts and Agreements: Retained for 7 years for legal dispute resolution

6.2 Website and Inquiry Data

Website Visitor Data: Automatically deleted after 24 months
Contact Form Submissions: Retained for 1 year unless you become a client
Newsletter Subscribers: Retained until you unsubscribe or for 2 years of inactivity
Event Inquiries: Retained for 2 years for referral and follow-up purposes

6.3 Technical and Analytics Data

Cookies and Tracking Data: Retained according to cookie type (see Cookie Policy)
Server Logs: Retained for 90 days for security and troubleshooting
Website Analytics: Retained for 26 months per Google Analytics default settings

6.4 Marketing Communications

Email Lists: Maintained until unsubscribe or 2 years of inactivity
Marketing Campaign Data: Retained for analysis purposes for 2 years

6.5 Special Circumstances

If a legal claim is filed, we retain data until the matter is resolved
If you request deletion, we retain data as long as legally required
Some data may be retained in backup systems for disaster recovery (automatically deleted per backup schedule)

7. Data Security

We implement comprehensive security measures to protect your information:

7.1 Encryption

In Transit: SSL/TLS encryption protects data transmitted between your device and our servers
At Rest: Sensitive data stored in our systems is encrypted using industry-standard algorithms
Password Protection: Passwords are salted and hashed using secure cryptographic functions
Payment Data: All payment information is encrypted and processed through PCI DSS-compliant payment processors

7.2 Access Controls

Role-Based Access: Employees access only data necessary for their job functions
Authentication: Strong password requirements and multi-factor authentication for sensitive systems
Access Logs: All access to sensitive data is logged and monitored
Employee Training: All team members receive privacy and security training
Confidentiality Agreements: All employees and contractors sign confidentiality agreements

7.3 Technical Safeguards

Firewalls: Protect our network from unauthorized access
Intrusion Detection: Systems to identify and respond to suspicious activity
Regular Security Audits: Independent security assessments and vulnerability testing
Patch Management: Timely application of security updates and patches
DDoS Protection: Measures to protect against distributed denial-of-service attacks

7.4 Organizational Safeguards

Incident Response Plan: Procedures for responding to security breaches
Data Protection Officer: Responsible oversight of data protection practices
Privacy by Design: Privacy considerations integrated into all systems
Regular Reviews: Periodic assessment of security practices
Insurance: Cyber liability insurance to cover potential breaches

7.5 Limitations

While we use strong security measures, no system is completely secure. We cannot guarantee absolute security of your information. By using our Website and services, you assume the risk of any potential security breaches despite our best efforts.

8. Your Privacy Rights

You have certain rights regarding your personal data:

8.1 Right of Access

What it means: You have the right to obtain confirmation of whether we process your data and to access a copy of your information.

How to exercise it: Send a written request to [email protected] with subject line "Data Access Request." Include your full name, email, and phone number. We will provide a copy within 30 days.

What we provide: A complete list of personal data we hold, categories of data, purposes of processing, and recipients of your data.

8.2 Right of Rectification

What it means: You can correct inaccurate or incomplete information we hold about you.

How to exercise it: Contact us at [email protected] with specific details about what needs to be corrected. We will update information within 30 days.

Examples: Incorrect address, outdated phone number, misspelled name, wrong event date.

8.3 Right of Erasure (Right to Be Forgotten)

What it means: You can request deletion of your personal data in certain circumstances.

When applicable: Data is no longer necessary, you withdraw consent, you object to processing, data was collected from a minor, or deletion is required by law.

Limitations: We may retain data if needed to complete services, for legal compliance, or to establish/defend legal claims.

How to exercise it: Submit a written request to [email protected] with subject "Erasure Request." We will respond within 30 days with confirmation of deletion or explanation of why we cannot comply.

8.4 Right to Restrict Processing

What it means: You can limit how we use your data while we verify its accuracy or handle disputes.

When you can use it: When you contest accuracy of data, processing is unlawful, data is no longer needed but needed for legal claims, or you've objected to processing.

How to exercise it: Email [email protected] with "Restrict Processing" in the subject line. We will limit use of your data within 30 days.

Effect: Your data will be stored but not actively processed except with your consent or for legal reasons.

8.5 Right to Data Portability

What it means: You can receive your data in a structured, machine-readable format and have it transferred to another service provider.

How to exercise it: Request data portability at [email protected]. We will provide data in CSV or JSON format within 30 days.

Limitations: This right applies to data you provided and data processed based on consent or contract. We can refuse if processing is necessary for our legitimate interests.

8.6 Right to Object

What it means: You can object to processing of your data for marketing, analytics, or other purposes.

Marketing communications: You can opt-out of promotional emails by clicking "Unsubscribe" in any email or contacting us directly.

Direct marketing: Send an objection request to [email protected].

Legitimate interests processing: You can object to processing based on our legitimate interests, except where we have compelling legal reasons.

8.7 Right to Withdraw Consent

What it means: If we process data based on your consent, you can withdraw that consent at any time.

How to exercise it: Email [email protected] with "Withdraw Consent" in the subject line. Specify which processing activities you're withdrawing consent for.

Effect: Withdrawal does not affect the lawfulness of processing before withdrawal. Continued processing of other activities requires a different legal basis.

9. International Data Transfers

Kankunas is based in the United States. If you are located outside the U.S., your information will be transferred to, processed in, and stored in the United States.

The United States may not have the same level of data protection as your home country. By using our services, you consent to the transfer of your information to the United States and processing under U.S. law.

We implement appropriate safeguards for international transfers:

Using Standard Contractual Clauses approved by applicable authorities
Ensuring recipients provide adequate data protection
Obtaining your explicit consent for sensitive transfers

10. Children's Privacy

Our Website and services are not directed to children under 16 years of age. We do not knowingly collect information from children under 16.

If we learn that we have collected information from a child under 16:

We will delete such information immediately
We will notify parents/guardians of the collection
We will comply with all applicable laws regarding children's data

Parents who believe their child has provided information can contact us at [email protected].

Note: While our Website isn't directed to children, we may collect information about minors when parents are planning events (e.g., children's birthday parties). We treat such information with appropriate protections.

11. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices, technology, legal requirements, or other factors.

Notification of Changes:

We will post the updated policy on our Website
The "Last Updated" date at the top will be revised
For material changes, we will notify you via email or prominent Website notice
Changes are effective upon posting unless otherwise stated

Your rights upon changes:

You have the right to review changes before continuing to use our services
Continued use after posting constitutes acceptance of changes
If you disagree with changes, you can request deletion of your information

Material Changes: We consider material changes to be:

Changes to what data we collect
Changes to how we use data
Changes to who we share data with
Changes to your rights or our obligations

12. Contact Us

If you have privacy questions, concerns, or requests, contact us:

Email: [email protected]

Phone: +1 (555) 842-7654

Mailing Address: Kankunas LLC 450 Park Avenue, Suite 1200 New York, NY 10022

Response Time: We will respond to all privacy inquiries within 30 days.

Data Protection Officer: While we do not have a formal DPO, privacy inquiries are handled by our management team with data protection expertise.

Escalation: If you are not satisfied with our response, you may have the right to file a complaint with your local data protection authority.