Privacy policy

Who we are

kene.world is a trading name of Psychedelic Science, the sole proprietorship (eenmanszaak) of Steven Fülle, François de Veijestraat 8 B, 6221 AB Maastricht, Netherlands (KvK 97581879, BTW NL005279311B75).

For the purposes of data protection law, the proprietor named above is the data controller for the personal data described here. We have not appointed a Data Protection Officer, which is not required at our scale. For anything about your data, email steven@psychedelic.science.

The data we collect

When you join our list — your email address; your name if you give it (optional); whether you ticked the box saying you work with a gallery, store or retreat centre; and a record of your consent: the time you gave it and a one-way hash of your IP address.
When you send us a message — your name, email address and whatever you write in the message. This is emailed to us and not stored on this website.
When you simply read the site — our web server keeps standard access logs (IP address, time, page requested, browser) for security and troubleshooting, and our analytics counts the visit without cookies and without any personal data. See Cookies and analytics.

We do not sell anything on this website, so there is no order, address or payment data, and we never see or handle card details.

Why, and our legal bases

To send you the emails you asked for — your consent, Article 6(1)(a) GDPR. You can withdraw it at any time, which does not affect anything we sent before you did.
To reply to your message — our legitimate interest in answering people who contact us, and taking steps at your request, Article 6(1)(b) and (f).
To keep the site up and secure, and to count visits — our legitimate interest in running a working, non-abused website, Article 6(1)(f), balanced against your rights. The analytics collects no personal data at all.
To prove consent if we are ever asked to — our legal obligation under Article 7(1) GDPR to demonstrate that you consented.

Double opt-in and consent records

Joining the list takes two deliberate steps. You submit the form with the consent box ticked — it is never pre-ticked — and we then email you a confirmation link. Until you click that link you are not subscribed, and we do not email you again.

To be able to demonstrate that consent, we record when you gave it, when you confirmed it, and a one-way cryptographic hash of the IP address you used. A hash cannot be turned back into your IP address; it exists only so that two records can be compared.

Every email we send carries a working one-click unsubscribe link and a List-Unsubscribe header. We do not use tracking pixels, and we do not record whether you opened an email or which links you clicked.

We never sell your personal data. We share it only with the providers who make this site work, under contract and on our instructions:

Hetzner Online GmbH (Germany) — the server this website and our mailing-list software run on. Your data is stored on a machine in Germany.
Resend — sends our email. We use their EU region.

The mailing-list software (Listmonk) and the analytics (Umami) are open-source and run on our own server — they are not third-party services and your data is not shared with anyone to use them. This site loads no third-party fonts, scripts, embeds or trackers of any kind.

We may also disclose data where the law requires it, or to protect our rights.

International transfers

Your data is stored in Germany. Resend is US-incorporated and may process some data in the United States; where data leaves the EU/EEA we rely on a recognised safeguard — the EU–US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses — so it keeps an equivalent level of protection.

How long we keep it

Mailing-list data — until you unsubscribe. When you do, we keep a minimal record that you unsubscribed so we do not email you again by mistake; you can ask us to erase that too.
Unconfirmed signups — if you never click the confirmation link, the record is deleted within 30 days.
Messages you send us — kept in our email for as long as the conversation is useful, and deleted on request.
Server access logs — rotated and deleted within 14 days.

Your rights

Under the GDPR you have the right to:

access the data we hold about you;
have it corrected;
have it erased;
restrict or object to how we use it;
receive a copy in a portable format;
and, where we rely on consent, withdraw it at any time.

For the mailing list you can do most of this yourself: every email has an unsubscribe link, and from the preferences page linked in it you can export or permanently wipe your record without asking us. Otherwise, email steven@psychedelic.science and we will respond within one month.

If you are unhappy with how we handle your data you can complain to the Dutch supervisory authority, the Autoriteit Persoonsgegevens, or to the data protection authority in your own EU/EEA country.

Cookies and analytics

This website sets no cookies. Not for analytics, not for advertising, not for preferences. That is why you were not shown a cookie banner — there is nothing to consent to.

We count visits with Umami, which we run ourselves on our own server. It is cookieless: it records the page visited, the referring site, and coarse information such as country, browser and screen size. It does not store an identifier on your device, does not follow you between websites, and does not collect personal data.

Security

The site is served over HTTPS only. Our mailing-list administration is password-protected and not publicly accessible, consent IPs are stored hashed rather than in the clear, and the database is backed up nightly to the same German server. No method of transmission or storage is ever completely secure, so we cannot guarantee absolute security — but we act quickly if anything goes wrong, including making any notification the law requires.

Children

This website is intended for adults. We do not knowingly collect personal data from children. If you believe a child has given us their data, contact us and we will delete it.

Changes and contact

We may update this policy as our practices or the law change; the date at the top shows the current version. Questions, requests or concerns: steven@psychedelic.science, or write to the address in our legal notice.