Privacy Policy
Kindred Enterprises Ltd ("Kindred", "we", "us", "our"), trading as CineOS Registered in England & Wales · Company No. 13719173 · Registered office: London, United Kingdom. Trading as CineOS via cineos.co. Contact: [email protected]
_Last updated: 30 June 2026._
This Privacy Policy explains how Kindred collects, uses, and protects your personal data when you use our website at cineos.co and our related services (the "Service"). We handle your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
Kindred Enterprises Ltd, trading as CineOS, is a company registered in England & Wales (Company No. 13719173) and is the data controller responsible for your personal data. If you have any questions about this policy or how we handle your data, contact us at [email protected].
2. The data we collect
We collect and process the following categories of personal data:
- Account & identity data — your name, email address and profile picture, collected when you sign up or sign in with Google.
- Contact & enquiry data — your name, email and message content, collected when you submit a form or contact us.
- Usage data — pages visited, features used, approximate location, and device and browser type, collected automatically via analytics and cookies.
- Communications — emails and messages you exchange with us, collected directly from you.
2.1 Sign in with Google
When you choose to sign in using Google, Google shares a limited set of profile information with us — your name, email address, and profile picture — solely to create and authenticate your account. We do not receive your Google password, and we do not access your Gmail, Google Drive, contacts, or any other Google services. Kindred's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
3. How we use your data and our legal basis
We use your personal data for the following purposes, relying on the lawful bases set out under UK GDPR:
- To create and manage your account and authenticate sign-in — performance of a contract.
- To provide, operate and improve the Service, including delivering CineOS audits and reports — legitimate interests.
- To respond to your enquiries and provide support — legitimate interests / contract.
- To send service-related and, where you have opted in, marketing communications — consent / legitimate interests.
- To maintain security and prevent fraud or abuse — legitimate interests / legal obligation.
- To comply with our legal and regulatory obligations — legal obligation.
4. Service providers and data sharing
We do not sell your personal data. We share it only with trusted service providers ("data processors") who help us run the Service, under contracts that require them to protect your data:
- Supabase — database, authentication and backend hosting.
- Vercel — website and application hosting.
- Google — authentication (Sign in with Google).
- Resend — transactional and notification email delivery.
We may also disclose your data where required by law, to enforce our terms, or to protect the rights, safety and property of Kindred or others.
5. International transfers
Some of our service providers are located outside the UK. Where we transfer personal data internationally, we rely on appropriate safeguards such as UK adequacy regulations or the International Data Transfer Agreement (or Addendum to the EU Standard Contractual Clauses) to ensure your data remains protected.
6. Data retention
We keep your personal data only for as long as necessary for the purposes set out in this policy, including to satisfy any legal, accounting or reporting requirements. When you close your account, we delete or anonymise your data unless we are required to retain it by law.
7. Your rights
Under UK GDPR you have the right to access your data; to request correction or erasure; to restrict or object to processing; to data portability; and to withdraw consent at any time where processing is based on consent. To exercise any of these rights, contact [email protected]. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.
8. Cookies
We use cookies and similar technologies to operate the website, remember your preferences, keep you signed in, and understand how the Service is used. You can control cookies through your browser settings; disabling some cookies may affect how the Service works.
9. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. No method of transmission or storage is completely secure, but we work to protect your data and review our measures regularly.
10. Children
The Service is not directed to individuals under the age of 16, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.
11. Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you.
12. Contact us
Kindred Enterprises Ltd, trading as CineOS · [email protected] · London, United Kingdom.