Privacy Policy

Effective September 30, 2026

This Privacy Policy explains how Puku Cloud (“Puku Cloud,” “we,” “us”) collects, uses and shares personal information when you visit pukucloud.dev, contact us, or buy our services. It does not cover websites we build for clients; each client site has its own privacy policy.

1. Information we collect

Information you give us

Contact details — name, business name, email address and phone number when you email us, book a call or become a client.
Project content — logos, photos, text, product details and other materials you send us to build your site.
Billing information — when you pay, Stripe collects your card details directly. We receive limited information such as your name, email, billing address, the last four digits of your card and payment status. We never see or store full card numbers.

Information collected automatically

Server and security logs — our host, Cloudflare, processes technical data such as IP address, browser type and pages requested to deliver the site and protect it from abuse.
Analytics (only with your consent) — if you allow analytics, we use Cloudflare Web Analytics, which reports aggregated visit statistics without cookies or cross-site tracking.

2. How we use information

To respond to enquiries and schedule calls.
To provide our services: building, hosting, maintaining and supporting websites, stores and dashboards.
To process payments, send invoices and receipts, and keep accounting records.
To secure our website and services and prevent fraud.
To improve our website (only using analytics you’ve consented to).
To comply with legal obligations.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

We share personal information only with service providers who help us run our business, under contracts that limit their use of it:

Cloudflare — website hosting, DNS, security and privacy-friendly analytics.
Stripe — payment processing and billing.
Google Workspace (Gmail, Google Drive, Docs, Sheets and Meet) — email, file storage, documents and video calls.

We may also disclose information if required by law, to protect our rights or the safety of others, or as part of a business transfer such as a merger or acquisition.

4. Cookies and similar technologies

We keep this simple:

Strictly necessary — we store your cookie choice in your browser’s local storage (key puku_consent) for up to 180 days. Cloudflare may set security cookies to protect the site from bots.
Analytics — off unless you opt in. Cloudflare Web Analytics does not use cookies.
Marketing — we don’t currently use any advertising or social media tags.

You can change your choice at any time using (also in the footer of every page). We honor the Global Privacy Control signal as an opt-out of any sale or sharing of personal information.

5. Data we process for clients

When we build and maintain a website, store or dashboard for a client, we may process personal information about that client’s customers (for example, order data in an analytics dashboard). In that role we act as a service provider (or “processor”) and handle the data only on the client’s instructions and under our agreement with them. If you are a customer of one of our clients, please contact that business directly with privacy requests; we will help them respond.

6. Data retention

We keep personal information only as long as needed for the purposes above: enquiry emails for up to two years if you don’t become a client, client records for the length of the relationship plus the period required for tax and accounting purposes, and security logs according to Cloudflare’s standard retention.

7. Your privacy rights

Depending on where you live (for example California, other U.S. states with privacy laws, the EU/EEA or the UK), you may have the right to:

Know and access the personal information we hold about you.
Correct inaccurate information.
Delete your information.
Receive a copy of your information in a portable format.
Opt out of the sale or sharing of personal information and of targeted advertising (we do neither).
Withdraw consent at any time, without affecting earlier processing.
Not be discriminated against for exercising these rights.

To make a request, email hello@pukucloud.dev with the subject “Privacy request.” We will verify your identity before acting and respond within the time the law requires (generally 30–45 days). You may use an authorized agent. If you are in the EU/EEA or UK, you may also complain to your local data protection authority.

8. Security

We use HTTPS everywhere, two-factor authentication on our accounts, least-privilege access and reputable providers. No method of transmission or storage is completely secure, but we work to protect your information and will notify you of a breach where the law requires.

9. Children

Our services are for businesses and are not directed to children under 16. We do not knowingly collect personal information from children.

10. Changes to this policy

We may update this policy from time to time. We will change the effective date above and, for material changes, notify clients by email.

11. Contact us

Puku Cloud · hello@pukucloud.dev