Your information, handled with care.

KR8A is the furniture brand responsible for this website.

Our official privacy mailbox is awaiting owner confirmation. Early-access collection remains closed until it is published.

Launch review pending: the owner must confirm the legal operator and contact address. We have not published an unverified registered name, company number or VAT number.

Vercel hosts the site and processes connection information, including IP addresses and request details, to deliver pages, diagnose faults and prevent abuse. We rely on our legitimate interests in providing a secure, working website for this processing. We do not use technical logs to build advertising profiles.

The approved site fonts are served from KR8A’s own domain. There is no visitor connection to Google Fonts. The current website has no advertising tags, GA4, session recording, room-photo uploads, checkout or payment collection.

If enabled for the public launch, Vercel Web Analytics measures public page visits and broad collection interest. Vercel Speed Insights measures loading speed, responsiveness and visual stability. Both remain off until you opt in through Privacy choices; refusing or withdrawing does not affect the site or email signup.

Measurement uses public paths, event names, browser/device information, referral information and service-generated visitor statistics. Our filters remove URL queries and fragments, reject unknown paths and exclude private page views and configurator data. A new email confirmation can send one event with a fixed, token-free status path after the server confirms success.

We do not include email addresses, names, room measurements, photographs or IP addresses in custom event properties. Vercel still receives network information when a permitted request reaches its service. It describes Web Analytics as cookieless and discards its visitor hash after 24 hours; that is separate from the retention of aggregate reports. Our basis for optional measurement is your consent. You can change the two measurement preferences independently using the Privacy choices button.

The form is currently closed; it does not send emails or store signups. When enabled, it asks for your email address and an unticked agreement to receive KR8A launch and product updates. Email consent is separate from optional website measurement. You can use one without agreeing to the other.

Resend sends the verification email only after you request it. You are added to the KR8A contact segment only after pressing the confirmation button. We keep your email address, initial consent time, confirmation time and consent wording version. Our lawful basis for launch and product updates is consent. We do not sell the list.

Links use encrypted, time-limited tokens. Cloudflare Turnstile checks for automated abuse after you start the enabled form. Upstash Redis holds short-lived keyed hashes for request limits, withdrawal protection and confirmation locks; these pseudonymous identifiers are not analytics. Security processing serves our legitimate interests in preventing abuse.

The proposed launch schedule is to review the early-access list monthly and remove contacts after 24 months without a new consent or relevant interaction. The owner must approve and operate that review before signup opens. Unsubscribed addresses may be retained in a restricted suppression record for as long as needed to prevent further marketing, with an annual necessity review. They are not an active mailing list.

Unconfirmed addresses are not added to the contact segment, but Resend processes the requested verification email and associated delivery records. Its standard email/log retention is currently 30 days; the applicable account terms and settings must be checked before activation. Confirmation tokens expire after 48 hours.

Our rate-limit keys expire after one hour or less; contact locks after 60 seconds and pending-withdrawal markers after 48 hours. The essential result cookie expires after five minutes. Your browser privacy choice lasts up to six months. Configurator drafts remain on your device until you delete them or clear site storage.

Hosting/security log retention and aggregate-report retention depend on the selected Vercel plan. The owner must record the actual settings and review periods before production activation. We do not promise that changing a preference removes historic aggregate counts or provider security records immediately.

Our service providers are Vercel for hosting and optional measurement, Resend for email and contact management, Cloudflare for form security, and Upstash for temporary abuse-prevention records when signup is configured. Access should be restricted to authorised KR8A operators and the providers needed to run those services.

Providers may process information outside the UK. Resend says stored data is held in the United States; selecting a European sending region does not relocate its storage. Before live collection, KR8A must document the providers, regions, subprocessors and a valid UK transfer mechanism for each restricted transfer. These may include applicable UK adequacy arrangements or an IDTA/UK Addendum with the required assessment. We do not claim a safeguard has been checked merely because a provider offers an EU agreement.

Provider information: Vercel privacy, Resend data processing, Cloudflare Turnstile privacy and Upstash privacy.

You may ask for access, correction, erasure, restriction or portability of your information where the relevant right applies. You can object to processing based on legitimate interests. You can withdraw consent at any time; this does not change the lawfulness of earlier processing.

Use the unsubscribe link in a KR8A email to stop updates, or contact the official privacy mailbox for help or deletion. Confirmation emails include a cancellation/unsubscribe link, and future marketing must include Resend’s working unsubscribe facility. Requests should not require a new account. We may ask for proportionate identity checks and will normally respond within one month, subject to applicable legal extensions.

You can raise a concern with us and complain to the Information Commissioner’s Office. There are no automated decisions with legal or similarly significant effects in this pre-launch website.