Regulatory

Legal Framework & Compliance Documentation

Effective Date: January 1, 2026 · Last Updated: January 1, 2026

Privacy Policy

1. Data Controller

The data controller responsible for the processing of personal data collected through this website is HavenKernelForge, registered at 02130, C. Caraiso 14, Lietor Albacete, Spain. For all privacy-related inquiries, you may contact our designated data protection officer at [email protected].

2. Categories of Personal Data Processed

We collect and process the following categories of personal data in accordance with the EU General Data Protection Regulation (GDPR):

  • Contact Data: Name, email address, and telephone number submitted through our contact form for the purpose of responding to your inquiry.
  • Technical Data: IP address, browser type and version, operating system, referral URLs, and page interaction data collected automatically through server logs and analytics tools.
  • Cookie Data: Session identifiers and preference tokens stored through our cookie consent mechanism, as detailed in our Cookie Policy below.

3. Legal Basis for Processing

All personal data processing activities are conducted under the following legal bases as defined in Article 6(1) GDPR:

  • Consent (Art. 6(1)(a)): Non-essential cookies are processed only after explicit consent is granted through our cookie consent mechanism.
  • Contractual Necessity (Art. 6(1)(b)): Contact form submissions are processed to take steps at your request prior to entering into a potential contract for digital services.
  • Legitimate Interest (Art. 6(1)(f)): Server log data is processed for the purposes of maintaining website security, preventing abuse, and ensuring operational integrity.

4. Data Retention Periods

Contact form submissions are retained for a maximum period of 12 months from the date of submission, unless an ongoing business relationship has been established. Server log data is automatically purged after 90 days. Cookie data persists only for the duration specified in our Cookie Policy or until consent is withdrawn.

5. Data Recipients & Transfers

Personal data may be shared with the following categories of recipients:

  • Hosting infrastructure providers operating within the European Economic Area (EEA).
  • Email delivery services used exclusively for responding to submitted inquiries.
  • Payment processing platforms (Stripe) for handling transactions initiated through our payment portal.

We do not transfer personal data to countries outside the EEA without ensuring appropriate safeguards, including Standard Contractual Clauses (SCCs) as approved by the European Commission.

6. Your Rights Under GDPR

As a data subject, you hold the following rights which may be exercised at any time by contacting [email protected]:

  • Right of Access (Art. 15): Request confirmation of whether we process your personal data and obtain a copy of such data.
  • Right to Rectification (Art. 16): Request correction of inaccurate personal data or completion of incomplete data.
  • Right to Erasure (Art. 17): Request deletion of your personal data where processing is no longer necessary or consent has been withdrawn.
  • Right to Restriction (Art. 18): Request restriction of processing under specific circumstances.
  • Right to Data Portability (Art. 20): Receive your personal data in a structured, commonly used, machine-readable format.
  • Right to Object (Art. 21): Object to processing based on legitimate interests, including direct marketing.

You also have the right to lodge a complaint with the Spanish Data Protection Authority (AEPD) at www.aepd.es if you believe your data protection rights have been infringed.

7. Automated Decision-Making

HavenKernelForge does not engage in automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you.

Cookie Policy

1. What Are Cookies

Cookies are small text files stored on your device when you visit our website. They serve to remember your preferences, maintain session state, and analyze website traffic patterns to improve your experience.

2. Categories of Cookies Deployed

Strictly Necessary Cookies

These cookies are essential for the website to function correctly. They enable core features such as session management and security token validation. These cookies do not require consent under the ePrivacy Directive as they are strictly necessary for the service requested by the user.

Duration: Session-based · Provider: HavenKernelForge

Functional Cookies

These cookies remember your preferences, such as your cookie consent selection, to provide a personalized experience on subsequent visits. They do not track your activity across other websites.

Duration: 365 days · Provider: HavenKernelForge

Analytics Cookies (Optional)

If enabled through the consent mechanism, analytics cookies collect anonymized information about how visitors interact with our website, including pages visited and time spent. This data is aggregated and does not identify individual users.

Duration: 180 days · Provider: Third-party analytics

3. Managing Cookie Consent

Upon your first visit, our cookie consent banner allows you to accept or decline non-essential cookies. You may modify your preference at any time by clearing your browser's local storage for this domain or by revisiting our website where the consent banner will reappear.

4. Third-Party Cookies

Our website may include embedded content from third-party services (such as Google Maps) which may set their own cookies. We do not control the cookie practices of third-party services. Please refer to the respective privacy policies of these services for information on their cookie usage.

5. Browser Configuration

You may configure your browser to block or alert you about cookies. Please note that disabling strictly necessary cookies may impair the functionality of this website. Consult your browser's help documentation for instructions on cookie management.

Refund Policy

1. Scope

This Refund Policy applies to all services provided by HavenKernelForge as described in our service catalog. By engaging our services, you acknowledge and agree to the terms outlined in this policy.

2. Milestone-Based Refund Structure

All projects are executed according to defined phase milestones. Refunds are evaluated based on the completion status of each project phase:

  • Before Phase 1 Commencement: Full refund of all payments made, minus any non-recoverable administrative costs (maximum 5% of total project value).
  • During Phase 1 (Discovery & Mapping): Refund of fees attributable to phases not yet commenced, minus the proportionate cost of Phase 1 work completed.
  • During Phase 2 (Core Engineering): No refund for completed engineering work. Refund may be applicable for undelivered subsequent phases, subject to review of work-in-progress assets.
  • During Phase 3 (Deployment & Delivery): No refunds are applicable once deployment has been initiated, as this constitutes final delivery of the engineered system.

3. Refund Request Process

Refund requests must be submitted in writing to [email protected] within 14 calendar days of the triggering event. Requests must include the project identifier, a description of the grounds for the refund request, and supporting documentation where applicable. We will acknowledge receipt within 3 business days and provide a substantive response within 20 business days.

4. Non-Refundable Items

The following are non-refundable: completed discovery and audit deliverables, third-party licenses procured on the client's behalf, domain registrations, and hosting fees already incurred. Custom algorithmic models and trained machine learning systems that have been delivered to the client are non-refundable due to the nature of intellectual property transfer.

5. EU Consumer Rights

Nothing in this policy limits your statutory rights under EU consumer protection regulations, including the right to a remedy for defective services as defined in the Consumer Rights Directive (2011/83/EU).

Terms of Service

1. Acceptance of Terms

By accessing, browsing, or using the services provided by HavenKernelForge ("the Company"), registered at 02130, C. Caraiso 14, Lietor Albacete, Spain, you ("the Client") agree to be bound by these Terms of Service. If you do not agree to these terms, you must discontinue use of our services immediately.

2. Scope of Services

All services are delivered according to the specifications defined in the applicable service agreement or statement of work (SOW) issued prior to project commencement. The Company reserves the right to modify delivery timelines if the Client fails to provide required materials, feedback, or access within agreed-upon windows. Such delays will result in a corresponding extension of the delivery schedule without penalty to the Company.

3. Payment Terms

Invoices are issued according to the milestone schedule defined in the project SOW. Payment is due within 14 calendar days of invoice date unless otherwise specified. Late payments accrue interest at a rate of 8% per annum in accordance with EU Directive 2011/7/EU on late payments in commercial transactions. The Company may suspend work on any project where payment is more than 14 days overdue.

4. Intellectual Property

Upon full payment of all applicable invoices, the Client receives a perpetual, non-exclusive license to use all custom-designed assets, code, and documentation delivered as part of the project. The Company retains the right to use anonymized project data, architectural patterns, and general methodologies for portfolio and case study purposes unless explicitly prohibited in the project SOW.

5. Confidentiality

Both parties agree to maintain the confidentiality of proprietary information shared during the course of the engagement. This obligation survives the termination of the service agreement for a period of 36 months. Confidential information shall not be disclosed to third parties without prior written consent, except as required by law.

6. Limitation of Liability

The Company's total aggregate liability under any service engagement shall not exceed the total fees paid by the Client for the specific service giving rise to the claim. The Company shall not be liable for indirect, incidental, consequential, or punitive damages, including but not limited to loss of profits, data, or business opportunities.

7. Termination

Either party may terminate a service agreement with 30 days' written notice. In the event of termination by the Client, all work completed up to the date of termination shall be delivered and invoiced accordingly. Termination for cause (material breach) may be effected immediately upon written notice if the breaching party fails to remedy the breach within 14 days of notification.

8. Governing Law & Jurisdiction

These Terms of Service are governed by the laws of the Kingdom of Spain and the applicable regulations of the European Union. Any disputes arising from or in connection with these terms shall be subject to the exclusive jurisdiction of the courts of Albacete, Spain, without prejudice to the Client's right to bring proceedings in the courts of their country of residence under EU Regulation 1215/2012.

9. Amendments

The Company reserves the right to amend these Terms of Service at any time. Material changes will be communicated via email to registered Clients at least 30 days before they take effect. Continued use of the services following the effective date of any amendment constitutes acceptance of the modified terms.

For legal inquiries, data subject requests, or compliance questions:

[email protected]