This privacy policy describes what Kansas Company Search collects when a reader opens a page, what it does with that information, and how a reader can ask for it to be removed. The policy applies to every page on the site and to messages sent to the address published on the contact page. It does not apply to the Kansas Secretary of State website or to any other site a reader reaches through a link.
The Kansas Company Search site is a reference library, and it is built to be read without an account, a login, or a form. That design limits what the site can collect in the first place, and the sections below describe the small amount that remains.
Who This Policy Covers
The policy covers a visitor who reads a page, a reader who sends an email, and a person who appears in a message. It does not cover an employee of a business named on a page, because the site does not hold employment records. It also does not cover a business that advertises on the site, since an advertiser handles its own data under its own policy.
Where a reader arrives through a search engine or a social platform, that platform has already handled data before the reader reaches this site. The policy of that platform governs that earlier stage, and this policy begins when a page on this site loads.
What Information Is Collected
The site collects two categories: technical information that a web server records automatically, and information a reader chooses to send in a message. There is no third category, because the site does not run a survey, a membership, or a checkout. A reader who never sends a message leaves only the technical record.
The site does not ask for a name, a postal address, a phone number, or a filing number. A page can be read from beginning to end without supplying any of those details, and no content is held behind a form.
Information You Send
A message to the site contains the email address it was sent from, the text of the message, and any attachment the reader adds. The site uses those details to answer the question. A reply goes to the address that sent the message, and the address is not added to a list for later contact.
A reader should not send a social security number, a bank detail, a password, or a scanned identification document. The site does not need any of those to answer a question about a page, and a message that contains one is deleted once the question is closed.
Log Data
The web server records the page requested, the time of the request, the browser type, the referring page, and an Internet Protocol address. The record is used to diagnose a fault, measure load, and detect abusive traffic. It is not used to identify an individual reader or to build a profile of a person’s interests.
Log entries are kept for a short period and then discarded on a rolling basis. A log entry may be retained longer when it is needed to investigate an attack on the site, and in that case it is kept only for the investigation.
Cookies and Similar Technologies
The site uses a small number of cookies. A cookie is a text file that a site stores in a browser so that a later request can be recognized. Some cookies are needed for the site to function, and others measure traffic in aggregate. A separate cookies policy lists the categories and sets out how to remove them.
The site does not use a cookie to track a reader across other websites, and it does not sell cookie data. Where a third-party service sets its own cookie, that service is named in the cookies policy so a reader can decide whether to allow it.
Analytics
Traffic measurement is used to see which pages are read and which pages are abandoned. The reports show totals and trends, not a list of named visitors. A page that is read often may be expanded, and a page that is never opened may be merged into another page or removed.
Analytics data is not combined with a message a reader sends. A correction from a reader is handled on its own merits, and the traffic report plays no part in whether the correction is accepted.
How Information Is Used
Technical data is used to keep the site available and to fix a fault. Message data is used to answer the message and to correct a page where the message shows an error. Nothing is used to send a newsletter, because the site does not publish one.
Data is not used to make a decision about a reader’s credit, employment, insurance, or access to a service. A records site has no reason to make such a decision, and the policy rules it out so that a reader does not have to guess.
Legal Basis for Processing
Where a legal basis is required, the site relies on a legitimate interest in publishing and maintaining a reference page, and on the reader’s consent where a cookie is optional. A message is processed because the reader asked for an answer, which is the purpose the reader supplied the details for.
A reader can withdraw consent for an optional cookie at any time through the browser settings. Withdrawal does not affect a use that happened before the consent was withdrawn, and it does not affect a use that rests on another basis.
Sharing and Disclosure
The site does not sell personal information and does not trade it. It does not share a message with an advertiser or a data broker. A message may be shared with a service provider that hosts the email, and that provider is bound to use it only to deliver and store the mail.
Information may be disclosed where the law requires it, such as in response to a valid legal request. Where a request is overbroad, the site asks for it to be narrowed before producing anything, and it discloses only what the request actually covers.
Service Providers
The site depends on a hosting provider, a content management system, and an email provider. Each one processes data on the site’s behalf and under its own terms. A provider that cannot meet a reasonable standard for confidentiality is replaced rather than tolerated.
A provider may store data outside Kansas or outside the United States. Where that happens, the transfer relies on the provider’s contractual safeguards, and the site does not send more data than the service needs to work.
Data Retention
Log data is kept for a short rolling period. A message and its reply are kept while the question is open and for a limited time afterward, so that a follow-up can be answered without starting over. A reader can ask for earlier deletion, and the request is honored unless a legal obligation requires the record to be kept.
Analytics reports are kept in aggregate form, which no longer identifies a visitor. An aggregate count of page views is not personal information, and it may be retained to show how a page performed over a year.
Security
The site is served over an encrypted connection, and administrative access requires a password and a second factor where the platform supports one. Software is updated when a security release appears. A reader can check for the padlock in the browser before sending a message, although email itself is not encrypted end to end.
No system is perfectly secure, and the site does not claim otherwise. A reader who suspects that a message was intercepted should say so in a new message, and the site will describe what was sent and when, without asking the reader to resend sensitive material.
Your Rights
A reader may ask what personal information the site holds, ask for a copy, ask for a correction, or ask for deletion. The request should name the email address that was used, because that is the only identifier the site has. A reply confirms what was found and what was done.
A reader may also object to a use or ask for it to be restricted. Where the site has no further basis to keep the data, the request is granted. Where a legal obligation applies, the reply says so and names the obligation rather than refusing without a reason.
Children
The site is written for adults who are dealing with business records, and it is not directed at children. It does not knowingly collect information from a child, and it does not run a feature that would attract one. A parent who believes a child sent a message can ask for it to be deleted, and it will be removed.
Because there is no account and no form, the site has no way to verify an age. The policy relies on the subject matter, which is business filing and public records, to keep the audience where it belongs.
International Visitors
A reader outside the United States can open every page. The site is operated from the United States, and the data described here is processed under United States law. A visitor in a jurisdiction with additional rights can still send a request, and the site will answer it in the same way it answers a domestic request.
A transfer of data to the United States may be necessary for the site to respond. A reader who does not want that transfer should not send a message, because the site cannot answer a question without receiving it.
External Links
A page may point to a state office or another agency so a reader can reach the record. The destination has its own policy, and this one ends where the link begins. A reader who follows a link should read the policy on the page that opens, because the site cannot describe how another office handles data.
A link is not an endorsement of everything on the destination site. It is a pointer to a record or a form that the page describes. Where a destination changes its address, the link is updated or removed rather than left to break.
Do Not Track
Browsers offer a signal that asks a site not to track a visitor. The site does not run a cross-site tracker, so the signal does not change what happens on a page. Analytics are configured to avoid identifying a visitor, which is the outcome the signal is meant to produce.
A reader who wants stronger control can block cookies in the browser or use a privacy extension. The pages remain readable when cookies are blocked, because the text does not depend on a cookie to load.
Changes to This Policy
The policy is revised when a service changes or when the law requires a new disclosure, and the date shown above the first section records that revision. Where a change affects what is collected, the new practice is described in plain words and the previous wording is available on request.
An earlier version can be requested by email, and the reply will quote the section that moved. A change that alters what is collected is announced where a reader found the policy. The terms and conditions page covers the rules for using the site, which sit alongside this policy.
Contact Information
Questions about this policy, a request for a copy of the data held, or a request for deletion can be sent to the address below. State the email address that was used and the action requested, and the reply will confirm what was done. A request that concerns a page rather than personal data can be sent to the same address.
- Website: kansascompanysearch.us
- Email: info@kansascompanysearch.us
