We only set the cookies the site needs to work. We count visits with Umami, which sets no cookies and cannot identify you. Cookie policy

Kerf Audio
Account

Policies

Privacy policy

Last updated 22 October 2026

Draft for legal review. Not legal advice.

Who is responsible

Kerf Audio, Grain & Graft, Brook Mill, Parker Street, Macclesfield, SK11 7BQ, is the controller for personal data collected on this site. Contact: connect@kerfaudio.com.

What we collect and why

  • Account: your email, name if you give it, and password (stored hashed). Needed to provide your downloads and licences (contract).
  • Orders and licences: what you bought, when, licence records and the computers you activate. Needed to supply the product (contract) and keep records (legal obligation).
  • Contact messages: your name, email and message, to reply (legitimate interests).
  • Newsletter: your email and interests, only after you confirm (consent). Unsubscribe from any email.
  • Visit statistics: pages viewed and actions taken, counted with Umami without cookies or anything that identifies you (legitimate interests).
  • Support tickets: what you send us, including screenshots, to help you (contract). Screenshots are deleted after 90 days.
  • Security logs: IP addresses with login, download and activation events, to prevent abuse (legitimate interests). IP addresses are deleted after 90 days.

Payments

Paddle processes payments as merchant of record and is the controller for payment data. See Paddle’s privacy notice. We receive your email, the products bought and the order totals.

Who else sees it

Each under contract: xCloud on Hetzner servers in the EU (hosting), Emailit (sending email), xCloud Mail (our mailboxes), Cloudflare (DNS and file delivery) and Paddle (payments). Visit statistics stay on our own Umami server. Emailit runs in its own data centre in Prague, in the EU. Cloudflare and xCloud are US companies. Where data leaves the UK, it goes to the EU, which the UK recognises as protecting it adequately, or is covered by the provider’s transfer safeguards: for Cloudflare, the UK Extension to the EU-US Data Privacy Framework and standard contractual clauses with the UK Addendum. We do not sell personal data.

How long we keep it

Account and licence data while your account is open. Order records for six years for tax purposes. If you ask us to close your account, we delete its data within 30 days, apart from the order records we must keep. Newsletter details until you unsubscribe; after that we keep only your email address, so we do not write to you again.

Your rights

Under UK GDPR you can ask for a copy of your data, correction, deletion, restriction, portability, and object to processing based on legitimate interests. Write to connect@kerfaudio.com. You can complain to the ICO at ico.org.uk.

Cookies

See the cookie policy.