This policy explains how I collect, use and store personal information when you use kaal.uk (the "site") and my related services. Please read it alongside my terms of service.
Who I am
Kaal is a one-person web design studio run by Andy, based in the UK. When I say "I", "me" or "Kaal", I mean that studio. I'm the controller of the personal data described here.
For anything privacy-related, email hello@kaal.uk.
What I collect
Information you give me
- Preview brief: brand type, goals, budget, business or project name, a short description of what you offer, your name and email, and optionally your current website and after-launch preference (Kaal Care or self-host).
- General contact form: your name, email and message.
- Client onboarding form (only once a project goes ahead): contact details, your approved plan, business and brand information, website scope, your after-launch path, domain or hosting details as relevant, and launch preferences.
- Kaal Care: if you subscribe, the information needed to host your site, register or manage a domain, set up DNS and give ongoing support. For example, contact details, your domain name and technical configuration.
- Emails you send me, and anything you attach.
Information collected automatically
- Server logs: my hosting provider records standard technical data when pages load or forms are sent, such as IP address, browser type and timestamps. This keeps the site running and secure.
- Analytics, only if you accept: Google Analytics records which pages you visit, how you arrived, your device and browser type, approximate location (country or city) and how you interact with the site. Google Analytics 4 doesn't store your IP address.
How I use it
- To reply to your enquiry and deliver what you ask for: previews, builds, Kaal Care and file handovers.
- To run and secure the site, and any client sites I host under Kaal Care.
- To register, renew or transfer domains connected with Care, and to contact you about launch, support and your subscription.
- If you consent, to understand how the site is used so I can improve its content and performance.
I don't use your information for automated decision-making, and I don't sell it.
Lawful bases (UK GDPR)
- Contract: handling your brief, building your site and providing Kaal Care, including the steps you ask me to take before we agree a project.
- Legitimate interests: replying to general enquiries, keeping the site secure and keeping basic business records.
- Consent: Google Analytics cookies. You can withdraw consent at any time.
- Legal obligation: keeping accounting and tax records.
Cookies & analytics
When you first visit, a banner asks whether you're happy for Google Analytics to run. Nothing non-essential loads until you choose Accept analytics. If you choose Essential only, no analytics cookies are set. You can change your mind at any time using , also in the footer of every page. If you withdraw consent, the Analytics cookies are removed.
| Name | Type | Purpose | Lasts |
|---|---|---|---|
kaal_cookie_consent_v2 | Essential (stored in your browser, not a cookie) | Remembers your cookie choice | 12 months, then I ask again |
_ga | Analytics (only with consent) | Google Analytics: tells visits apart | 2 years |
_ga_<ID> | Analytics (only with consent) | Google Analytics: keeps track of your session | 2 years |
The site's fonts are hosted on kaal.uk itself, so loading a page doesn't send your details to a font service. I also use Google Search Console and Bing Webmaster Tools to see how the site appears in search results. They report on searches in aggregate and don't place cookies on your device.
Who I share it with
I use a small number of service providers who process data on my instructions:
- Netlify: website hosting and form handling. Your form submissions are stored with Netlify.
- Google: Google Analytics, only if you accept analytics.
- My email provider: for messages you send to hello@kaal.uk.
- Domain registrars and DNS providers: only when needed to deliver Kaal Care.
I only share information beyond this if the law requires it. I never sell personal information.
International transfers
Some of these providers process data outside the UK, for example in the United States. Where that happens, transfers are covered by appropriate safeguards, such as UK adequacy regulations, the UK Extension to the EU–US Data Privacy Framework, or the UK International Data Transfer Addendum to standard contractual clauses.
How long I keep it
- Enquiries and previews that don't go ahead: only as long as needed to deal with your enquiry, then deleted.
- Client projects and Kaal Care: for as long as we're working together, then as long as needed for legal, tax and accounting purposes.
- Domain records: as the registrar requires, for the life of your Care subscription, and as needed to complete a transfer if Care ends.
- Google Analytics data: up to 14 months, after which Google deletes it automatically.
Your rights
Under UK data protection law you can ask me to give you a copy of your data, correct it, delete it, restrict how I use it or move it to someone else. You can also object to some processing, and withdraw consent at any time. To do any of this, email hello@kaal.uk. I'll respond within one month.
If you're unhappy with how I've handled your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk. I'd appreciate the chance to put things right first.
Children
The site isn't aimed at children under 16, and I don't knowingly collect their personal data.
Changes to this policy
If I change this policy, I'll update the date at the top of this page. If a change significantly affects how I use your data, I'll make it clear on the site.