Privacy Policy

1. Who we are (data controller)

Kyma Horizon Ltd is the data controller responsible for your personal data. We are registered in England & Wales (company no. 16443332), with a registered office at 26 Partington Close, Archway, London, N19 3DZ, England. Kyma Horizon Ltd is the owner and operator of the Bare Planet brand and the Terra platform.

For any question about this policy or about how we handle your data, contact us at hello@bareplanet.eu.

2. What data we collect

• Identity and contact data you give us through the contact / "register your interest" form: your name, organisation (optional), email address, and any message you choose to send.
• Technical data automatically collected when you visit the site, such as your IP address, device and browser type, and language preference.
• Usage data about how you interact with the site, where applicable.

We do not collect special category data, and we do not knowingly collect personal data from children.

3. How and why we use your data (legal bases)

We process your personal data only where we have a lawful basis under Article 6 of the GDPR:

• To respond to your enquiry and contact you about Terra — on the basis of your consent, which you give when you submit the form, and our legitimate interest in responding to people who contact us.
• To operate, secure, and improve the website — on the basis of our legitimate interests in running our business.
• To comply with legal and regulatory obligations — where required by law.

Where we rely on consent, you can withdraw it at any time by contacting us; this does not affect the lawfulness of any processing carried out before withdrawal.

4. Who we share your data with

We do not sell your personal data. We share it only with trusted service providers who help us run our business, and only as far as necessary:

• Resend — email delivery, so we can receive and reply to your form submissions.
• OVHcloud — European hosting and infrastructure.

These providers act as our processors and handle data on our instructions. We take steps to keep data within the UK and the European Economic Area, or to ensure equivalent safeguards are in place.

5. International transfers

Our infrastructure is designed to keep data within the United Kingdom and the European Economic Area. Where a transfer outside these areas is necessary, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or the European Commission's Standard Contractual Clauses.

6. How long we keep your data

We keep enquiry data only for as long as necessary to respond to you and for our legitimate business records, after which it is deleted or anonymised. Technical and usage data is retained for shorter periods.

7. Your rights

Under the UK GDPR and the EU GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased in certain circumstances;
• restrict or object to our processing of your data;
• data portability;
• withdraw consent at any time, where processing is based on consent;
• lodge a complaint with a supervisory authority.

To exercise any of these rights, contact us at hello@bareplanet.eu. You can also complain to the UK Information Commissioner's Office (ICO) at ico.org.uk, or to the data protection authority in your country of residence.

8. Cookies

This site uses a small number of cookies. For full details, please see our Cookie Policy.

9. Data security

We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or misuse.

10. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top reflects the most recent version.

11. Contact

Questions, requests, or complaints: hello@bareplanet.eu.