Privacy Policy
This Privacy Policy sets out how Klavelio ("we", "us", "our") collects, uses, stores, and protects personal data when you visit klavelio.digital or interact with our services. We are committed to handling your personal data lawfully, fairly, and transparently in accordance with the UK General Data Protection Regulation (UK GDPR) as retained in UK law by the European Union (Withdrawal) Act 2018, and the Data Protection Act 2018.
Please read this policy carefully. By using this website, you acknowledge that you have read and understood how we handle personal data as described below.
1. Who We Are
The data controller for this website is Klavelio, operating at 278-280 City Rd, Sheffield S2 5HP, United Kingdom. You can contact us regarding data protection matters at: [email protected] or by telephone on +44 7450 785710.
Klavelio operates as an educational platform providing general personal finance and household budgeting courses for adults in the UK. We are not authorised or regulated by the Financial Conduct Authority.
2. Personal Data We Collect
The table below sets out the categories of personal data we may collect, the purpose for which each category is collected, and our lawful basis for processing under UK GDPR.
| Data Category | Examples | Purpose | Lawful Basis (UK GDPR) |
|---|---|---|---|
| Contact information | Name, email address | Responding to general enquiries submitted via our contact form | Legitimate interests (Article 6(1)(f)) |
| Message content | Text of enquiry message | Understanding and responding to your enquiry | Legitimate interests (Article 6(1)(f)) |
| Usage data | IP address, browser type, pages visited, time on site | Website analytics and performance monitoring | Consent (Article 6(1)(a)) where analytics cookies are accepted |
| Cookie preference data | Cookie consent status and category preferences | Recording and honouring your cookie consent choices | Legal obligation (Article 6(1)(c)) and legitimate interests |
| Technical data | Device type, operating system, referral source | Ensuring the website functions correctly across devices | Legitimate interests (Article 6(1)(f)) |
We do not collect special category data as defined in Article 9 of UK GDPR, including data concerning health, financial circumstances, political opinions, or biometric data.
3. How We Collect Personal Data
We collect personal data through the following means:
Directly from you when you complete and submit the contact form on our website. The form collects your name, email address, and the content of your message.
Automatically when you visit our website, through cookies and similar technologies. This includes technical data about your device and browsing behaviour. The types of cookies we use are described in our Cookie Policy.
We do not collect personal data from third-party sources or purchase contact lists.
4. How We Use Your Personal Data
We use the personal data we collect for the following purposes:
Responding to enquiries: When you contact us through our contact form, we use your name and email address to respond to your general enquiry. We do not use this information for marketing purposes unless you have separately consented.
Website operation and improvement: We use technical and usage data to ensure the website loads correctly, to identify and fix technical issues, and to understand how visitors navigate the site so we can improve the user experience.
Legal compliance: We may process personal data where necessary to comply with a legal obligation applicable to us under UK law.
We do not use personal data for automated decision-making or profiling as defined in Article 22 of UK GDPR.
5. Data Retention
We retain personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law.
| Data Type | Retention Period | Rationale |
|---|---|---|
| Contact form submissions | Up to 12 months from date of receipt | Sufficient time to complete correspondence and any follow-up |
| Website analytics data | Up to 26 months (aggregated) | Standard analytics retention for trend analysis |
| Cookie consent records | 12 months from consent date | Aligned with cookie consent renewal period |
After the applicable retention period, data is securely deleted or anonymised.
6. Sharing Your Personal Data
We do not sell, rent, or trade personal data to third parties. We may share personal data with the following categories of recipients in limited circumstances:
Service providers: We may share data with trusted third-party service providers who assist in operating our website, including hosting providers and analytics platforms. These providers are bound by data processing agreements and may only process data on our instructions.
Legal requirements: We may disclose personal data if required to do so by law, court order, or a regulatory authority with jurisdiction over us in the United Kingdom.
Where we transfer personal data outside the United Kingdom, we ensure appropriate safeguards are in place in accordance with Chapter V of UK GDPR, including the use of standard contractual clauses approved by the UK Information Commissioner's Office (ICO) or reliance on adequacy regulations.
7. Your Rights Under UK GDPR
Under the UK GDPR and the Data Protection Act 2018, you have the following rights in relation to your personal data:
| Right | Description |
|---|---|
| Right of access | You may request a copy of the personal data we hold about you (Subject Access Request). |
| Right to rectification | You may ask us to correct inaccurate or incomplete personal data we hold about you. |
| Right to erasure | You may ask us to delete your personal data where it is no longer necessary for the purpose it was collected, or where you withdraw consent. |
| Right to restrict processing | You may ask us to restrict how we use your personal data in certain circumstances. |
| Right to data portability | Where processing is based on consent or contract and carried out by automated means, you may request your data in a structured, commonly used format. |
| Right to object | You may object to processing based on legitimate interests, including any direct marketing. |
| Rights related to automated decision-making | You have the right not to be subject to solely automated decisions that produce significant effects, though we do not engage in such processing. |
To exercise any of these rights, please contact us at [email protected]. We will respond within one calendar month of receiving your request. We may need to verify your identity before processing your request.
8. Cookies
Our website uses cookies and similar technologies. A cookie is a small text file placed on your device when you visit a website. We use cookies for essential website functionality, analytics, and to remember your preferences.
You can manage your cookie preferences at any time through the cookie consent tool on this website. For full details of the cookies we use, their purposes, and durations, please see our Cookie Policy.
9. Security
We implement appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include secure hosting environments and access controls.
However, no method of transmission over the internet or electronic storage is entirely secure. While we take reasonable steps to protect your data, we cannot guarantee absolute security.
10. Links to Other Websites
Our website may contain links to third-party websites. This Privacy Policy applies only to klavelio.digital. We are not responsible for the privacy practices of third-party websites and encourage you to read their privacy policies before providing any personal data.
11. Children's Privacy
Our website and educational content are directed at adults aged 18 and over. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that we have inadvertently collected personal data from a child under 18, we will take steps to delete it promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The date at the top of this page indicates when the policy was last revised. We encourage you to review this policy periodically. Continued use of the website following any update constitutes acceptance of the revised policy.
13. Complaints
If you have concerns about how we handle your personal data, please contact us in the first instance at [email protected]. We will endeavour to address your concern promptly.
You also have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner's Office (ICO), at any time. The ICO can be contacted at:
Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Website: ico.org.uk. Helpline: 0303 123 1113.