Who we are
This policy is issued by Matt Kenney's Design Company LLC, doing business as Matt Kenney's Design Co. ("MKDC", "we", "us"). We are a design and development studio in the USA, run by Matt Kenney, who is responsible for your information.
This policy explains what we do with your information. Where the law requires your consent for something, we will ask for it separately. Using the site is also covered by our Website Terms of Use.
Who this policy covers
- Visitors to kenneys.net
- People who leave an email on the coming-soon page or book a call
- Clients and the people who work with them
- Subcontractors who work with us
What we collect
Coming-soon signup
Your email address and the time you submitted it. The form also has a hidden field that catches bots, and a per-visitor limit that uses your IP address to block abuse.
Booking a call
Your name, email, a description of your project, the call time you choose and your time zone.
Working together
Company name, job title, phone number, billing details, your brand assets, content and other project materials, and our emails and messages with you.
Call notes
See [06].
Payments
You pay by Zelle, or another method named in your proposal, through your own bank. We see your name, the amount, the date and the email or phone number linked to your Zelle account. We never see your bank login or card details.
Visit statistics
We count visits with Vercel Web Analytics. For each page view it records the page (its address without anything after a "?"), the site that sent you, your approximate location (country, region and city), and your device type, operating system and browser. It sets no cookies and doesn't store your IP address: Vercel tells visits apart with a code made from your request and discards it after 24 hours. We see totals, not people.
Server logs
Our host, Vercel, records standard request data (IP address, browser type, page requested, time) in short-lived logs so the site can run and stay secure.
We do not buy data about you, and we do not collect anything from your device beyond what is described here.
How we use it
- To reply to you and set up a call
- To scope, deliver and support your project
- To invoice and keep accounting records
- To tell you when the new kenneys.net launches (signup list only). We don't send a newsletter; studio news goes on LinkedIn and X.
- To keep the site running, secure and free of spam
- To see, in totals, how many people visit and which pages and links bring them
- To meet legal obligations and protect our rights
If EU or UK law applies to you, our legal bases are: contract (replying to you and delivering your project), legitimate interests (running and securing the site, counting visits in totals and keeping business records), consent (the coming-soon signup) and legal obligation (tax and accounting records).
Cookies and browser storage
Our site does not set cookies and does not use advertising pixels, heatmaps, session recording or tracking scripts. Our one measurement tool, Vercel Web Analytics, counts visits without cookies and without identifying you (see [03]).
Your browser keeps a few small things on your own device only:
- Your booking form draft and, after you book, your booked time for the confirmation page (sessionStorage). Both clear when you close the tab.
- Your progress in the site's hidden easter eggs (localStorage)
- Your motion setting, only if you turn motion off, so the site stays still as you move between pages (sessionStorage). It clears when you close the tab.
None of these is sent to us. You can clear them in your browser settings.
Fonts
Most of our fonts are hosted by us. Adobe Fonts are loaded live from Adobe (use.typekit.net) on every page, so Adobe receives the standard request data any web request carries, including your IP address. Adobe's privacy notice for Adobe Fonts explains what it does with it.
Do Not Track
We don't track you across other websites, so there is nothing for a Do Not Track signal to switch off. No third party tracks your activity across sites through our pages.
AI tools and call notes
Call notes
We use Granola, an AI note-taking tool, on client calls. It transcribes the call as it happens and writes a summary. No audio recording is kept. We ask at the start of every call, and if you'd rather not, we turn it off. Transcripts are kept with your project records, and Granola's setting that lets it use them to improve its models is switched off.
AI tools in our work
We use AI tools for things like code, drafts and visual exploration, on settings or plans that don't let the provider train on what we put in. We don't put sensitive personal data (such as ID numbers, health details or financial account details) into AI tools, and we will honor a written request not to use AI tools on specific confidential materials.
Who we share information with
We do not sell, rent or trade your information. We share it only with the providers below, and only what each one needs to do its job.
| Provider | What it does | What it receives |
|---|---|---|
| Vercel | Hosts the site, stores the signup list and counts visits | Signup emails and times, server logs, anonymous visit statistics, and the code we build for you |
| Resend | Delivers booking and signup notices to our inbox | The content of those notices, including your name and email |
| Adobe Fonts | Serves fonts on the site | Standard request data, including your IP address |
| Granola | AI call notes | Live call audio to transcribe (not stored), transcripts and summaries |
| Wayfront | Client records and invoicing | Name, company, email, invoices and payment status |
| Zelle and our bank | Receive payments | Your name, the amount and date, and the email or phone number on your Zelle account |
| Our email provider | Our inbox | Emails you send us |
| Design and AI tools (for example Figma, Adobe Creative Cloud and AI assistants) | Making the work | Project materials, and personal data only where it appears in them |
| Subcontractors | Help deliver specific projects | Only the project materials they need, kept confidential |
We may also share information if the law requires it, to protect our rights or someone's safety, or if the business is sold or merged (your information stays protected under this policy).
Client confidentiality
Your project materials are confidential. Only Matt Kenney and any subcontractor on your project can see them, and subcontractors agree to keep them confidential. We won't disclose your confidential information except to the providers in [07], as the law requires, or with your written permission. Our Client Services Agreement has the full confidentiality terms.
How we protect information
We're a small studio and we keep it simple:
- The site is served over HTTPS
- The signup list sits in a private, access-controlled store at Vercel
- Hosting, email, payments and client records are handled by established providers, not on our own servers
- Our accounts use strong, unique passwords and multi-factor authentication
- Only Matt and any subcontractor on your project can see your project files
No system is perfectly secure. If we learn of a breach affecting your information, we will tell you promptly and follow the notification laws that apply.
How long we keep it
- Signup emails: until you unsubscribe, or 24 months after the launch announcement, whichever comes first
- Booking details: 12 months if no project follows
- Contracts, approvals and invoices: 10 years
- Project files and key emails: 5 years after the project ends
- Working files and drafts: may be deleted when the project ends
- Call transcripts: 12 months after the project ends, unless you ask us to delete them sooner
- Server logs: kept by Vercel for a short period under its own settings
Your choices and rights
You can always ask us to:
- Tell you what information we hold about you
- Correct it
- Delete it (we may need to keep records the law requires, such as invoices)
- Give you a copy in a usable format
- Stop emailing you: use the unsubscribe link, or email contact@kenneys.net with "unsubscribe" in the subject. We act within 10 business days.
Email contact@kenneys.net. We may ask you to confirm it's really you. We answer within 45 days. If we need more time we'll tell you why and take up to 45 more. If we say no, we'll tell you why, and you can ask us to look again by replying to that email.
If you're in California, Nevada, Delaware or another state with a website privacy law, this policy is meant to give you what those laws require. If you're in the EU or UK, you also have the right to object to or restrict some processing, and to complain to your local data protection authority.
International transfers
We're in the United States, and so are most of our providers. If you're in the EU, the UK or another place with data transfer rules, your information is transferred to and processed in the US. Where our providers offer recognized transfer safeguards, such as the EU-US Data Privacy Framework or standard contractual clauses, we rely on them. Ask us if you want details for a specific provider.
Children
Our site and services are for businesses and adults. We don't knowingly collect information from anyone under 18, and nothing on the site is aimed at children under 13. If you think a child has given us information, email us and we'll delete it.
Changes to this policy
When we change this policy we update the date and version at the top. For significant changes we'll also email active clients and anyone on the signup list. Earlier versions are available on request.