PRIVACY POLICY

We process your personal data confidentially and in accordance with applicable law, including the General Data Protection Regulation (GDPR)
and the Danish Act on Electronic Communications Networks and Services (the Cookie Order). Below you can read how we collect,
protect and use your data when you visit our B2B website and contact us.

1. Data Controller

KIND DESIGN STUDIOS is the data controller responsible for the processing of personal data we receive about you through our website.

Business Registration number: 20402741

Address:Gothersgade 139, 3. 1123 Copenhagen K, Denmark

E-mail:info@kindcph.com

Website: www.kindcph.com

2. Purpose and Legal Basis

We collect and process personal data for the following business purposes:

Communication: Responding to enquiries and messages submitted via our contact form or by e-mail, as well as follow-up in connection with specific project or collaboration enquiries (GDPR Art. 6(1)(f) — legitimate interest, and where relevant Art. 6(1)(b) — necessary for steps
taken prior to entering into a contract).

Marketing and optimisation: Analysis of website traffic and targeting of our B2B campaigns (GDPR Art. 6(1)(a) — consent). The underlying cookies are only set on the basis of your prior consent given via our cookie banner, in accordance with the Cookie Order.

3. Categories of Personal Data

We primarily process ordinary personal data relating to contact persons at prospective B2B clients, as well as website visitors:

Name, e-mail address, phone number and company name when you contact us directly.

Online identifiers: IP address, cookie ID and behaviour on our website (e.g. which pages you visit and how long you stay).

We do not process sensitive personal data through our website.

4. Disclosure and Transfer of Data

We only disclose the data collected via the website to external partners (data processors) where necessary to operate the site:

Squarespace Ireland Ltd.: Our platform and hosting provider. Data is stored on secure servers, and any transfers to Squarespace entities
outside the EU/EEA take place in accordance with the EU's Standard Contractual Clauses (SCCs).

Google LLC (Google Analytics): Used to analyse website traffic. Data is transferred to the US on the basis of the EU-U.S.
Data Privacy Framework (DPF).

Meta Platforms, Inc. (Meta Pixel): Used to target advertising and measure the effectiveness of our B2B campaigns on Facebook and
Instagram. Meta Platforms, Inc. is certified under the EU-U.S. Data Privacy Framework, and transfers to the US take place on this basis.

We never sell or rent your data to third parties.

Please note: Cookies are only set on our website (including for Google Analytics and Meta Pixel)
on the basis of your prior consent via the cookie banner.

5. Retention and Deletion

We retain the data you provide via the website for as long as necessary to fulfil the purposes described above:

Enquiries via the website: General e-mails and enquiries submitted via our contact form or by e-mail are typically deleted within 6 months
of the dialogue concluding, unless the enquiry develops into a concrete project or collaboration discussion, in which case the data
may be retained for a longer period for follow-up purposes.

Google Analytics & Meta Pixel: Data collected via cookies on the website is automatically deleted after a set period (typically
14 months for Google Analytics). You can also delete your cookies manually in your own browser at any time.

6. Your Rights

Under the GDPR, you have a number of rights in relation to our processing of your data:

Access: You have the right to obtain access to the data we process about you.

Rectification: You have the right to have incorrect or incomplete data corrected.

Erasure: You have the right to be deleted from our systems, where the law permits.

Objection: You have the right to object to our processing of your data, including its use for direct marketing.

Restriction: You have the right to have the processing of your data restricted in certain cases.

Data portability: You have the right to receive the data you have provided to us in a structured, commonly used and machine-readable format.

Withdrawal of consent: You have the right to withdraw your consent at any time (e.g. by changing your cookie settings),
without affecting the lawfulness of processing based on consent given before its withdrawal.

To exercise your rights, please contact us at info@kindcph.com. You also always have the right to lodge a complaint
with the Danish Data Protection Agency (Datatilsynet, www.datatilsynet.dk).

7. Changes to this Privacy Policy

We may update this privacy policy from time to time, for example as a result of changes in legislation or in our use of third-party tools.
The version in force at any given time will always be available on our website.

Last updated: August 2026