Privacy Policy & Cookie Policy

Using the kafle.co.uk website means you accept the terms of the following Privacy Policy and Cookie Policy. Please read its provisions carefully. The table of contents below will help you navigate it. This document explains how we take care of your data, how we process it, to whom we entrust it, and many other important matters related to personal data.

§1 General Provisions

This Privacy Policy and Cookie Policy defines the rules for processing and protecting personal data submitted by Users, as well as cookies and other technologies used on the kafle.co.uk website.

The administrator of the website and personal data processed through it is Kafle Ltd, registered at 7 Carnoustie Close, PR2 7ER Preston, Company Registration Number: XXX XXX XXX XXX. Contact: hello@kafle.co.uk, tel. +44 7523 775890.

§2 Definitions

Administrator – Kafle Ltd, 7 Carnoustie Close, PR2 7ER Preston, CRN: XXX XXX XXX XXX.

User – any entity visiting and using the Website.

Website – the website located at kafle.co.uk.

Newsletter – a free service provided electronically by the Administrator to the User by sending electronic messages through which the Administrator informs about events, services, products, and other elements relevant from the Administrator's perspective and/or for the purpose of direct marketing.

User Account – a user account created on the website, enabling access to purchased services and products.

Forms – sections of the Website that allow the User to enter personal data for specified purposes, e.g. newsletter sign-up, placing an order, or contact.

GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation).

§3 Personal Data and Principles of Processing

Who is the administrator of your personal data?

The administrator of Users' personal data is Kafle Ltd, 7 Carnoustie Close, PR2 7ER Preston, CRN: XXX XXX XXX XXX.

Is providing data voluntary? What are the consequences of not providing it?

Providing data is voluntary; however, failure to provide certain information — generally marked as mandatory on the Administrator's pages — will result in the inability to perform a given service or achieve a specific goal.

If the User provides non-mandatory or excessive data that the Administrator does not need to process, such processing is based on Article 6(1)(a) GDPR (consent). The User consents to the processing of such data and to the anonymisation of data the Administrator does not require but which the User has nonetheless provided.

For what purposes and on what legal basis do we process your personal data?

The User's personal data on the Administrator's Website may be processed for the following purposes and on the following legal bases:

  • performing a service or contract, sending an offer at the User's request — Article 6(1)(b) GDPR;
  • issuing invoices and fulfilling tax obligations — Article 6(1)(c) GDPR;
  • granting discounts or informing about promotions — Article 6(1)(a) GDPR (consent);
  • handling complaints or claims related to a contract — Articles 6(1)(b) and 6(1)(c) GDPR;
  • establishing, pursuing, or defending against claims — Article 6(1)(f) GDPR (legitimate interest);
  • telephone contact for service-related matters — Article 6(1)(b) GDPR;
  • telephone contact for presenting offers and direct marketing — Article 6(1)(a) GDPR (consent) and/or Article 6(1)(f) GDPR (legitimate interest) for existing clients;
  • creating GDPR-related registers — Articles 6(1)(c) and 6(1)(f) GDPR;
  • archiving and evidential purposes — Article 6(1)(f) GDPR;
  • analytical purposes, including analysis of data collected automatically via cookies (e.g. Google Analytics, Facebook Pixel) — Article 6(1)(f) GDPR;
  • use of cookies — Article 6(1)(a) GDPR (consent);
  • managing the Website and the Administrator's profiles on other platforms — Article 6(1)(f) GDPR;
  • publishing User reviews of the Administrator's services — Article 6(1)(a) GDPR (consent);
  • internal administrative purposes related to managing contact with the User — Article 6(1)(f) GDPR;
  • sending the newsletter — Article 6(1)(f) GDPR and applicable electronic communications law (consent);
  • tailoring content displayed on the Website to individual needs and continuously improving quality — Article 6(1)(f) GDPR;
  • direct marketing of own or recommended third-party products and services — Article 6(1)(f) GDPR;
  • building own user databases — Article 6(1)(f) GDPR;
  • managing the company's social media pages and interacting with users — Article 6(1)(f) GDPR;
  • commenting on the Website — Article 6(1)(a) GDPR (consent).

How is data collected?

Only data that the User provides themselves is collected and processed (with the exception of data collected automatically via cookies and server logs, as described below).

During a visit to the Website, data relating to the visit itself is collected automatically, e.g. the User's IP address, domain name, browser type, operating system type, etc. (server logs). Automatically collected data may be used to analyse user behaviour, gather demographic data, or personalise the content of the Website in order to improve it. This data is processed solely for the purposes of website administration and is not associated with individual users' personal data.

What are your rights?

Users have the following rights at any time under Articles 15–21 GDPR:

  • right of access to their data;
  • right to data portability;
  • right to rectification of data;
  • right to erasure of data, where there is no legal basis for processing;
  • right to restriction of processing;
  • right to object to processing based on the Administrator's legitimate interest;
  • right to lodge a complaint with a supervisory authority (in the UK, the Information Commissioner's Office — ICO) if you believe that processing of your data is contrary to applicable data protection law;
  • right to be forgotten, where further processing is not required by applicable law.

The Administrator notes that these rights are not absolute and do not apply to all data processing activities. To exercise your rights, please contact the Administrator at hello@kafle.co.uk or in writing at the registered address, specifying the scope of your request. A response will be provided within no more than 30 days from receipt of the request.

Can you withdraw your consent?

If the User has given consent to a specific activity, it may be withdrawn at any time, which will result in the removal of the email address from the Administrator's mailing list and the cessation of the specified activities. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

In some cases, data may not be completely deleted and will be retained to defend against potential claims for a period consistent with the applicable statute of limitations, or in order to fulfil legal obligations.

Do we transfer your data to third countries?

User data may be transferred outside the United Kingdom or the European Union to third countries. The Administrator uses external service providers including Facebook, Google, LinkedIn, Microsoft, and MailerLite. Data may be transferred to the United States in connection with storage on American servers. Google and Facebook apply GDPR-equivalent compliance mechanisms (e.g. certificates) or standard contractual clauses. Detailed information is available in the respective providers' privacy policies:

How long do we store your data?

User data will be stored by the Administrator for the duration of the relevant service and additionally:

  • for the duration of service delivery and cooperation, and for the period of limitation of claims — for data provided by contractors and clients;
  • for the duration of pre-contract negotiations — for data provided in enquiries;
  • for the period required by law, including tax law — for data related to legal obligations;
  • until an effective objection is raised under Article 21 GDPR — for data processed on the basis of legitimate interest, including direct marketing;
  • until consent is withdrawn or the processing purpose is achieved — for data processed on the basis of consent;
  • until outdated or no longer useful — for data processed for analytical, statistical, or cookie purposes;
  • for up to 3 years in the case of persons who have unsubscribed from the newsletter, for the purpose of defending against potential claims, or after 1 year of subscriber inactivity.

§4 Forms

The Administrator uses the following types of forms on the Website:

Newsletter sign-up form — requires the User's first name and email address. These fields are mandatory. Following submission, the User must confirm their wish to subscribe. Data collected in this way is added to the mailing list for the purpose of sending newsletters. Subscription implies acceptance of this Privacy Policy and consent to receive marketing communications electronically. Consent is voluntary but necessary for sending the newsletter and may be withdrawn at any time.

The mailing system used to send the newsletter records all User activity related to emails sent to them (date and time of opening, link clicks, unsubscription moment, etc.).

Contact and enquiry form — allows the User to send a message to the Administrator electronically. Personal data such as first name, surname, email address, and the content of the message are processed in accordance with this Privacy Policy for the purpose of contacting the User. After contact is concluded, data may be archived as a legitimate interest of the Administrator.

Comment form — any data entered in the comment form is provided voluntarily if the User wishes to leave a comment. By submitting a comment, the User consents to the processing of that data: first name, surname, email, IP address. The email address is used solely to prevent spam and is not shared with third parties. The Administrator is not responsible for the content of comments and reserves the right not to publish spam, offensive, unlawful, or unsolicited content.

Order form — when placing an order, the User must provide certain data in accordance with the sales terms and conditions for the purpose of order fulfilment, legal compliance, accounting, claims handling, and direct marketing. This typically includes: first name, surname, company name, VAT number, address, and email address.

§5 Disclaimer and Intellectual Property

Content presented on the Website does not constitute specialist advice and does not relate to any specific factual situation. If you require assistance with a specific matter, please contact a qualified professional or the Administrator using the contact details provided. The Administrator accepts no liability for the use of content on the Website or for actions or omissions taken on the basis of it.

All content on the Website is subject to the intellectual property rights of the respective creators and/or the Administrator (e.g. photographs, texts, videos, free materials, etc.). The Administrator does not permit copying of this content in whole or in part without explicit prior consent.

§6 Technical Requirements

To use the Administrator's website, you will need: a device with internet access, an active email address, a web browser capable of displaying web pages, and software enabling the viewing of content in the formats presented (e.g. PDF, video, mp3, mp4).

§7 Cookie Policy

Like most websites, the Administrator's Website uses cookies and other tracking technologies to improve the site for visiting users. The Website does not automatically collect any information other than that contained in cookies.

Cookies are small text files stored on your end device (computer, tablet, smartphone) when you use the Website. These may be first-party cookies (originating directly from this Website) or third-party cookies (originating from other websites).

Cookies allow the content of the Website to be tailored to your individual needs and help to create statistics showing how users navigate the site, enabling improvements to the Website's content, structure, and appearance.

The Administrator uses the following third-party cookies on the Website:

Facebook Conversion Pixel — for managing Facebook advertising and remarketing. This tool, provided by Meta Platforms, Inc. and its affiliates, helps measure the effectiveness of ads and understand user behaviour on the Website. Information collected via the Facebook Pixel is anonymous and does not allow for your personal identification.

Google Analytics — for analysing Website statistics. Google Analytics uses its own cookies to analyse the actions and behaviours of Website Users. This tool is provided by Google LLC. No personally identifiable data is processed through Google Analytics. For more information, visit: https://support.google.com/analytics.

Abandoned cart and user activity cookies — for directing advertising communications related to incomplete orders, which constitutes the Administrator's legitimate interest.

The Website may also embed content from external platforms such as YouTube or Vimeo. These third parties may record certain data about content playback performed by the User.

The Website uses two types of cookies: session cookies, which are deleted when the browser is closed, and persistent cookies, which are stored on the User's device and enable the browser to be recognised on subsequent visits, for a period defined in the cookie parameters or until deleted by the User.

Users may change their cookie settings at any time through their browser settings, including blocking automatic cookie handling or being notified each time a cookie is placed. The Administrator informs Users that limiting or disabling cookies may affect some features available on the Website.

§8 Cookie Consent

On your first visit to the Website, you must accept cookies or take other available actions as indicated in the notification in order to continue using the Website's content. Continued use of the Website constitutes consent. If you do not wish to consent, please leave the Website. You may also change your browser settings, disable, or delete cookies at any time. Information on how to do this can be found in your browser's "Help" section.

§9 Server Logs

Using the Website involves sending requests to the server on which the Website is hosted. Every request to the server is recorded in server logs. Logs include the User's IP address, server date and time, information about the web browser and operating system used by the User. Logs are saved and stored on the server solely for the purposes of website administration and their content is not disclosed to anyone other than persons and entities authorised to administer the server. The Administrator does not use server logs to identify Users in any way.