Privacy Policy

At Kavvara (“we”, “our”, or “us”), we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit kavvara.com or engage with our services. Please read this policy carefully. If you disagree with its terms, please discontinue use of our site.

1. Information We Collect

We may collect information about you in a variety of ways depending on how you interact with us.

1.1 Information You Provide Directly

• Contact form submissions — name, email address, company name, and project description when you reach out via our contact form.
• Email correspondence — any information you share when communicating with our team directly.
• Service engagements — business details, project requirements, and payment information when you engage us for a project.

1.2 Information Collected Automatically

• Log data — IP address, browser type, operating system, referring URLs, and pages viewed.
• Cookies and tracking technologies — session cookies, analytics identifiers, and preference cookies. See our Cookie Policy for full details.
• Device information — hardware model, operating system version, and unique device identifiers.

1.3 Information from Third Parties

We may receive information about you from analytics providers (such as Google Analytics), advertising partners, or social media platforms if you interact with our content on those platforms.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To respond to your inquiries and provide requested services.
• To send project updates, invoices, and relevant business communications.
• To improve our website, services, and user experience through analytics.
• To comply with legal obligations and enforce our agreements.
• To send occasional marketing emails about our services, with your consent where required by law.
• To detect, prevent, and address fraud or security issues.

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

3. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data under the following legal bases:

• Contractual necessity — to fulfill a service agreement with you.
• Legitimate interests — to operate and improve our business, provided these are not overridden by your rights.
• Consent — for marketing communications and certain cookies, which you may withdraw at any time.
• Legal obligation — where processing is required by applicable law.

4. Sharing Your Information

We may share your information with trusted third parties only as described below:

• Service providers — companies that assist us in operating our website and business (e.g., hosting providers, email platforms, payment processors). These parties are contractually obligated to keep your data confidential.
• Analytics providers — such as Google Analytics to help us understand website usage (data is anonymized where possible).
• Legal requirements — if required by law, court order, or governmental authority.
• Business transfers — in the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.

5. Data Retention

We retain your personal information only as long as necessary to fulfill the purposes outlined in this policy, or as required by law. Contact form data is typically retained for up to 3 years. Client project data is retained for the duration of the engagement plus 5 years for legal and accounting purposes.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you.
• Rectification — request correction of inaccurate or incomplete data.
• Erasure — request deletion of your personal data where we have no legitimate reason to continue processing it.
• Restriction — request that we limit how we process your data in certain circumstances.
• Portability — receive your data in a structured, commonly used format.
• Objection — object to processing based on legitimate interests, including direct marketing.
• Withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting prior processing.

To exercise any of these rights, contact us at privacy@kavvara.com. We will respond within 30 days.

7. International Data Transfers

Your information may be transferred to and processed in countries other than your own. Where such transfers occur, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses approved by the European Commission) to protect your data.

8. Security

We implement industry-standard security measures to protect your personal information, including encryption in transit (TLS), access controls, and regular security audits. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

9. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any third-party sites you visit.

10. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy periodically. When we do, we will revise the “Last updated” date at the top of this page. We encourage you to review this policy regularly. Continued use of our services after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

• Email: privacy@kavvara.com
• Website: kavvara.com/contact