Privacy policy

The controller of the personal data described here is Skill Tech Consulting Limited (registration number 76164705), registered at 7-F, MW Tower, 111 Bonham Strand, Sheung Wan, Hong Kong SAR, China, trading as Kiberry. If you have a question about this policy or about your data, write to sl@kiberry.ai.

The company has no establishment in the European Union. Its representative in the EU under Article 27 of the GDPR is Askhat Urazbaev, based in Cyprus. You or a supervisory authority can contact the representative about any matter covered by this policy at askhat@kiberry.ai.

We receive personal data when you submit a form on this site. The site also handles technical data needed to serve requests and protect the forms from abuse. This site does not run visitor profiling or analytics.

When you submit a form — the contact form, the diagnostics request, or a programme registration — we receive the fields you filled in. Depending on the form, that is your name, work email, company, job title, the phone number or Telegram username you chose as a contact method, and the message you wrote. Everything in the message field is up to you: please do not send us data you would not want in an email.

Along with the submission we process two technical signals to keep the forms from being abused: your IP address, used to limit how many forms can be sent from one address in ten minutes, and a hidden field intended to catch automated submissions. For the rate limit we store a keyed hash of your IP address, not the address itself, as a counter that expires after ten minutes. Server access logs, if enabled by the hosting setup, are separate from this rate limit.

When you take the self-assessment, your answers and place in the questionnaire are saved in this browser tab so you can continue after a reload. The assessment calculates your results in the browser; it does not send your answers to us.

For form submissions, our legal basis is your consent — Article 6(1)(a) of the GDPR. You give it with the checkbox next to the submit button, and you can withdraw it at any time (see clause 07). Withdrawing consent does not affect the lawfulness of what we did before you withdrew it.

For the anti-abuse signals in clause 02, our legal basis is our legitimate interest in keeping the site working and free of automated submissions — Article 6(1)(f). To limit this processing, the rate-limit record holds a keyed hash of the IP address rather than the address, and expires after ten minutes.

We use the details you send to read and answer your enquiry and discuss the work you ask us about. If the conversation continues, we keep it in the mailbox we use for client correspondence. The services involved in delivering and storing it are listed in clause 05.

The form delivery code uses Resend to send your submission to sl@kiberry.ai, a mailbox hosted by Zoho Mail. The organisations that handle a submitted form are:

• Resend — delivers the email that carries your form submission to our mailbox.
• Vercel — hosts the site and runs the code that receives your submission.
• Zoho (Zoho Mail) — receives and stores the message in the mailbox we use to reply.
• Upstash — holds the ten-minute rate-limit counter, keyed by a hash of your IP address.

Where they process it. Vercel runs the code that receives your submission in its United States region (Washington, D.C.); pages are delivered from the Vercel location nearest to you. Resend stores the emails it delivers, including their content and delivery logs, in the United States. Upstash keeps the rate-limit counter in its European Union region (Frankfurt). Zoho keeps our mailbox in its data centres in the European Union; in rare cases Zoho support staff in India may access it to resolve a technical problem.

How transfers outside the EEA are protected. Each provider processes your data on our behalf under its data processing terms. Transfers to the United States are covered by the EU Standard Contractual Clauses; Vercel and Resend are also certified under the EU–U.S. Data Privacy Framework. Zoho’s support access from India is covered by Standard Contractual Clauses between Zoho’s group companies. You can ask us for a copy of these safeguards at the address in clause 01.

Our rule is to delete enquiry correspondence 12 months after our last exchange. If the conversation becomes part of active client work, we keep the relevant correspondence while that work continues or a legal obligation requires it, then delete it. The rate-limit counter in clause 02 expires after ten minutes. You can ask us to delete your data sooner — see clause 07.

Under the GDPR you can ask us to:

• tell you what data about you we hold, and give you a copy;
• correct anything that is wrong;
• delete it;
• restrict what we do with it;
• hand it to you, or to someone else, in a machine-readable form;
• stop processing it where we rely on a legitimate interest.

You can also withdraw your consent at any time. One email to sl@kiberry.ai is enough to make a request — there is no form to fill in. We will respond without undue delay, normally within one month. If a request needs more time, we will tell you why.

If you think we have handled your data badly, you can complain to a supervisory authority in the EU country where you live or work. You may contact us first, but you do not have to.

We do not use advertising or analytics cookies on this site. The self-assessment uses your browser’s session storage to keep your answers in the current tab. You can clear them with “Start again” on the results page.

When this policy changes, we update the date at the top. If we change how we handle information you have already sent, we will tell you about a material change where we can contact you.

Email sl@kiberry.ai, or message us on Telegram. For anything else about working with us, the contact page is the place to start.