Privacy Policy

At Kannerlux, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share your information when you use our platform.

We comply with the General Data Protection Regulation (GDPR) and Luxembourg's data protection laws. Our data controller is registered with the Commission Nationale pour la Protection des Données (CNPD) in Luxembourg.

We collect the following types of personal data:

We use your personal data for the following purposes:

• Platform operation: To provide marketplace, services, and forum features
• Communication: To send transactional emails, notifications, and updates about your account or listings
• Verification: To review documents for verified service provider badges
• Safety & moderation: To monitor and moderate content, detect fraud, and enforce our Terms & Conditions
• Feedback & support: To investigate, reproduce, and fix the ideas and bugs you send us through the feedback panel
• Analytics: To understand how users interact with the platform and improve our services
• Legal compliance: To comply with applicable laws and respond to lawful requests from authorities

Cookies & Tracking Technologies

We use cookies and similar technologies to enhance your experience, analyze usage, and remember your preferences. Cookies are small text files stored on your device.

Google Analytics

On kannerlux.com we use Google Analytics 4, provided by Google Ireland Limited, which acts as our processor. It records the pages you visit, how you got there, and general device, browser and approximate location information (derived from your IP address, which Google does not store). We have turned off Google signals and ad personalisation, and we do not use this data for advertising.

Google Analytics is only loaded after you click "Accept" in the cookie bar. Until then, and if you decline, it is not loaded at all: no analytics cookies (_ga, _ga_*) are set and no data is sent to Google. The cookies expire after 13 months, and Google Analytics keeps the collected data for at most 14 months. We store your choice in a klx_consent cookie for 12 months.

You can withdraw or change your consent at any time using the "Cookie settings" link in the site footer; declining removes the analytics cookies from your browser.

You can also control cookies through your browser. Disabling essential cookies may affect platform functionality.

Kannerlux does not sell your personal data. We may share your information only in the following circumstances:

• Service providers: We work with trusted third-party service providers (e.g., hosting, email, analytics) who process data on our behalf under strict confidentiality agreements
• Feedback tickets: Feedback submitted through the feedback panel, including your name, account email, the technical context listed above, and any screenshot, is passed to Atlassian (Jira), the issue tracker our team uses to track and resolve it
• Legal obligations: We may disclose data if required by law, court order, or to protect our rights and the safety of users
• Business transfers: In the event of a merger, acquisition, or sale, user data may be transferred to the new owner

Our hosting and core data processing take place within the EU. Where a processor operates outside the EU, the transfer is covered by an EU-approved safeguard such as the European Commission's Standard Contractual Clauses.

As a user in the EU, you have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you
• Right to rectification: Correct inaccurate or incomplete data
• Right to erasure ("right to be forgotten"): Request deletion of your data under certain conditions
• Right to restriction: Limit how we process your data
• Right to data portability: Receive your data in a structured, machine-readable format
• Right to object: Object to processing of your data for certain purposes
• Right to withdraw consent: Withdraw consent at any time where processing is based on consent

To exercise these rights, email [email protected] with the subject "Privacy request". We will respond within 30 days.

Data Retention

We retain your personal data only as long as necessary to provide our services and comply with legal obligations:

• Active accounts: Data is retained while your account is active
• Closed accounts: Most data is deleted within 90 days, except where retention is required by law (e.g., tax records, dispute resolution)
• Transaction records: Retained for up to 7 years for accounting and legal purposes

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Updates will be posted on this page with a revised "Last updated" date. We encourage you to review this policy periodically.