Privacy information
Effective October 20, 2026
About this notice
Koku & Co., based in Cerritos, California, operates kokuand.co. This notice explains how we handle information from this website and inquiries sent to us. It does not describe how our clients handle information on their own websites.
Information you send us
When you send a project inquiry or request a website review, we ask for your name, email address, business or website details, and a message. A project inquiry can also include the kinds of help you are interested in.
We use these details and subsequent correspondence to understand your request, respond, and arrange any agreed follow-up or work. The website stores a private record of your submission and sends a notification containing your details to our contact email address. Sending a form does not sign you up for a mailing list. Please do not send passwords, payment details or sensitive information about your customers through these forms.
Website operation and service providers
Hostinger hosts our website and creates daily backups of its files and database. Its technical and security logs can include IP addresses, requested page addresses, request times, browser and device information, and general location. These records support website delivery, troubleshooting and security.
Google Workspace handles our email, including inquiry notifications sent through Google’s email relay. We use Google Analytics only if you allow it, as explained below. Information is available to authorized people handling our work and to these providers as needed to deliver their services. We may also disclose relevant information when required by law or to address a legal claim or security incident.
Our current hosting server is in Arizona, with hosting backups in Boston, United States. Google and its service providers may process information in other countries where they operate. See Hostinger’s data-processing terms and Google Workspace’s data-processing terms for their processing and transfer commitments.
Your analytics choice
Google Analytics loads only after you choose to allow it. You can decline analytics and still browse the website or send an inquiry. You can change your choice using “Analytics preferences” in the footer.
If allowed, analytics uses browser identifiers and cookies to measure page visits, engagement and completed inquiries, along with browser, device and general geographic information. Google receives technical connection information, including your IP address, when its service loads. Our website tag disables advertising personalization, and our property does not use Google Signals.
Our form-completion events record the type of form, not the name, email address, business details or message you enter. Our code removes query strings and fragments from page addresses and sends only the referring site’s origin, rather than its full page address.
We save your choice in your browser for 180 days, unless you clear stored data. Analytics cookies are configured to expire after 180 days and may renew when you return with analytics allowed. Separately, our Google Analytics retention settings are two months for event data and 14 months for user data; new activity renews the user retention period. Most standard aggregated reports are not subject to those settings. See Google’s retention explanation.
Withdrawing your choice stops future analytics collection by this website and attempts to clear its analytics cookies. It does not automatically erase information already collected. Browser “Do Not Track” signals do not automatically change this website’s analytics choice; please use the footer control. Google’s services also operate across other websites, and its own handling of information is described in How Google uses information from sites that use its services.
A short-lived form receipt
After a successful form submission, the website sets a receipt cookie that expires after five minutes. It contains a random token rather than your form details. It helps identify a completed submission and avoid counting it twice. A corresponding temporary record is cleared when used or scheduled for cleanup after expiry. Analytics reporting still depends on your choice.
How long information is kept
We adopted the inquiry-retention schedule below on October 20, 2026. Our initial review and removal of identified legacy spam from active records are complete. Copies in Trash, backups and recovery exports follow the separate handling described below.
Our policy is to keep project inquiries and website-review requests that do not become client work for 12 months after our last meaningful conversation. If there is no reply, we count from the date of the inquiry. We review records monthly, with eligible records due for removal within 30 days after that period ends.
Obvious spam and irrelevant unsolicited messages are due for removal within 30 days, unless needed for a security investigation. If you ask us to reconnect later, we keep the necessary details for that follow-up and set a review date.
If we work together, necessary correspondence becomes part of the project record and follows a separate retention schedule. We may also need to preserve relevant information for a complaint, dispute, legal requirement, or preservation hold.
These periods apply to inquiry records in active use. After removal, copies may remain in Trash, provider recovery systems or backups under separate expiry processes. Manual recovery exports also need separate review and removal; they do not automatically expire with provider backups. We restrict recovery copies and reapply recorded removal decisions if data is restored. We do not promise that every recovery copy is erased immediately or by a single fixed date.
Technical and security logs follow the providers’ operational, security and legal retention processes, separately from our inquiry schedule. Analytics has the settings described above. Legal preservation requirements can affect removal.
Access, corrections and privacy questions
Contact us about privacy at hello@kokuand.co to ask about information you sent us, request access or a correction, or request deletion. Tell us which inquiry or information your request concerns. We may verify that the request is yours before disclosing or changing records, normally using the email address associated with your inquiry.
We handle requests under applicable privacy law and explain any information we need to retain, including relevant legal or contractual records. The rights available and any exceptions depend on the law that applies to your circumstances. You can withdraw optional analytics permission at any time through the footer control.
Changes to this notice
We will post updates here with a revised date. For material changes to how we use or disclose information, we will provide an appropriate additional notice, such as a prominent website notice or an email where we have your address, and seek consent when required.