Legal
Privacy Policy
Last updated September 2026
This page is a starting template and should be legally reviewed before publication.
Overview
This Privacy Policy describes how information may be collected when you visit the ASH KREAM website or submit an enquiry. The site is designed to minimise data collection.
Enquiry Information
If you submit a contact form, the information you provide is used solely to review and respond to your enquiry. Do not submit unnecessary personal or sensitive information.
Age Confirmation Storage
When you confirm your age, a simple confirmation value may be stored in your browser’s local storage. This value stays on your device.
Administrative Access Security Logs
When an authorised administrator signs in to the private admin area, the site may record security audit logs for account protection and fraud prevention. Those logs may include the time of the attempt, whether it succeeded or failed, the source IP address, browser and device information derived from the request User-Agent, and a coarse country or region only when that information is already provided by the hosting platform. Passwords, password hashes and session secrets are never written to these logs. This monitoring applies to administrative access only and is not used to track ordinary website visitors.
Retention
Enquiry records should be retained only as long as needed to manage the request, then deleted or securely archived. Administrators may delete personal data when it is no longer required. Administrative security logs are retained only as needed for account-security review.
Your Rights
Depending on your location, you may have rights to access, correct or request deletion of personal information you have submitted. Use the Contact page to make such requests.
Changes
This Privacy Policy may be updated from time to time. The last-updated date reflects the latest revision.