Regulatory
Legal Framework & Compliance Documentation
Effective Date: January 1, 2026 · Last Updated: January 1, 2026
Privacy Policy
1. Data Controller
The data controller responsible for the processing of personal data collected through this website is HavenKernelForge, registered at 02130, C. Caraiso 14, Lietor Albacete, Spain. For all privacy-related inquiries, you may contact our designated data protection officer at [email protected].
2. Categories of Personal Data Processed
We collect and process the following categories of personal data in accordance with the EU General Data Protection Regulation (GDPR):
- Contact Data: Name, email address, and telephone number submitted through our contact form for the purpose of responding to your inquiry.
- Technical Data: IP address, browser type and version, operating system, referral URLs, and page interaction data collected automatically through server logs and analytics tools.
- Cookie Data: Session identifiers and preference tokens stored through our cookie consent mechanism, as detailed in our Cookie Policy below.
3. Legal Basis for Processing
All personal data processing activities are conducted under the following legal bases as defined in Article 6(1) GDPR:
- Consent (Art. 6(1)(a)): Non-essential cookies are processed only after explicit consent is granted through our cookie consent mechanism.
- Contractual Necessity (Art. 6(1)(b)): Contact form submissions are processed to take steps at your request prior to entering into a potential contract for digital services.
- Legitimate Interest (Art. 6(1)(f)): Server log data is processed for the purposes of maintaining website security, preventing abuse, and ensuring operational integrity.
4. Data Retention Periods
Contact form submissions are retained for a maximum period of 12 months from the date of submission, unless an ongoing business relationship has been established. Server log data is automatically purged after 90 days. Cookie data persists only for the duration specified in our Cookie Policy or until consent is withdrawn.
5. Data Recipients & Transfers
Personal data may be shared with the following categories of recipients:
- Hosting infrastructure providers operating within the European Economic Area (EEA).
- Email delivery services used exclusively for responding to submitted inquiries.
- Payment processing platforms (Stripe) for handling transactions initiated through our payment portal.
We do not transfer personal data to countries outside the EEA without ensuring appropriate safeguards, including Standard Contractual Clauses (SCCs) as approved by the European Commission.
6. Your Rights Under GDPR
As a data subject, you hold the following rights which may be exercised at any time by contacting [email protected]:
- Right of Access (Art. 15): Request confirmation of whether we process your personal data and obtain a copy of such data.
- Right to Rectification (Art. 16): Request correction of inaccurate personal data or completion of incomplete data.
- Right to Erasure (Art. 17): Request deletion of your personal data where processing is no longer necessary or consent has been withdrawn.
- Right to Restriction (Art. 18): Request restriction of processing under specific circumstances.
- Right to Data Portability (Art. 20): Receive your personal data in a structured, commonly used, machine-readable format.
- Right to Object (Art. 21): Object to processing based on legitimate interests, including direct marketing.
You also have the right to lodge a complaint with the Spanish Data Protection Authority (AEPD) at www.aepd.es if you believe your data protection rights have been infringed.
7. Automated Decision-Making
HavenKernelForge does not engage in automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you.
Refund Policy
1. Scope
This Refund Policy applies to all services provided by HavenKernelForge as described in our service catalog. By engaging our services, you acknowledge and agree to the terms outlined in this policy.
2. Milestone-Based Refund Structure
All projects are executed according to defined phase milestones. Refunds are evaluated based on the completion status of each project phase:
- Before Phase 1 Commencement: Full refund of all payments made, minus any non-recoverable administrative costs (maximum 5% of total project value).
- During Phase 1 (Discovery & Mapping): Refund of fees attributable to phases not yet commenced, minus the proportionate cost of Phase 1 work completed.
- During Phase 2 (Core Engineering): No refund for completed engineering work. Refund may be applicable for undelivered subsequent phases, subject to review of work-in-progress assets.
- During Phase 3 (Deployment & Delivery): No refunds are applicable once deployment has been initiated, as this constitutes final delivery of the engineered system.
3. Refund Request Process
Refund requests must be submitted in writing to [email protected] within 14 calendar days of the triggering event. Requests must include the project identifier, a description of the grounds for the refund request, and supporting documentation where applicable. We will acknowledge receipt within 3 business days and provide a substantive response within 20 business days.
4. Non-Refundable Items
The following are non-refundable: completed discovery and audit deliverables, third-party licenses procured on the client's behalf, domain registrations, and hosting fees already incurred. Custom algorithmic models and trained machine learning systems that have been delivered to the client are non-refundable due to the nature of intellectual property transfer.
5. EU Consumer Rights
Nothing in this policy limits your statutory rights under EU consumer protection regulations, including the right to a remedy for defective services as defined in the Consumer Rights Directive (2011/83/EU).
Terms of Service
1. Acceptance of Terms
By accessing, browsing, or using the services provided by HavenKernelForge ("the Company"), registered at 02130, C. Caraiso 14, Lietor Albacete, Spain, you ("the Client") agree to be bound by these Terms of Service. If you do not agree to these terms, you must discontinue use of our services immediately.
2. Scope of Services
All services are delivered according to the specifications defined in the applicable service agreement or statement of work (SOW) issued prior to project commencement. The Company reserves the right to modify delivery timelines if the Client fails to provide required materials, feedback, or access within agreed-upon windows. Such delays will result in a corresponding extension of the delivery schedule without penalty to the Company.
3. Payment Terms
Invoices are issued according to the milestone schedule defined in the project SOW. Payment is due within 14 calendar days of invoice date unless otherwise specified. Late payments accrue interest at a rate of 8% per annum in accordance with EU Directive 2011/7/EU on late payments in commercial transactions. The Company may suspend work on any project where payment is more than 14 days overdue.
4. Intellectual Property
Upon full payment of all applicable invoices, the Client receives a perpetual, non-exclusive license to use all custom-designed assets, code, and documentation delivered as part of the project. The Company retains the right to use anonymized project data, architectural patterns, and general methodologies for portfolio and case study purposes unless explicitly prohibited in the project SOW.
5. Confidentiality
Both parties agree to maintain the confidentiality of proprietary information shared during the course of the engagement. This obligation survives the termination of the service agreement for a period of 36 months. Confidential information shall not be disclosed to third parties without prior written consent, except as required by law.
6. Limitation of Liability
The Company's total aggregate liability under any service engagement shall not exceed the total fees paid by the Client for the specific service giving rise to the claim. The Company shall not be liable for indirect, incidental, consequential, or punitive damages, including but not limited to loss of profits, data, or business opportunities.
7. Termination
Either party may terminate a service agreement with 30 days' written notice. In the event of termination by the Client, all work completed up to the date of termination shall be delivered and invoiced accordingly. Termination for cause (material breach) may be effected immediately upon written notice if the breaching party fails to remedy the breach within 14 days of notification.
8. Governing Law & Jurisdiction
These Terms of Service are governed by the laws of the Kingdom of Spain and the applicable regulations of the European Union. Any disputes arising from or in connection with these terms shall be subject to the exclusive jurisdiction of the courts of Albacete, Spain, without prejudice to the Client's right to bring proceedings in the courts of their country of residence under EU Regulation 1215/2012.
9. Amendments
The Company reserves the right to amend these Terms of Service at any time. Material changes will be communicated via email to registered Clients at least 30 days before they take effect. Continued use of the services following the effective date of any amendment constitutes acceptance of the modified terms.
For legal inquiries, data subject requests, or compliance questions:
[email protected]