Privacy Policy
Website: kaiverona.co.uk
Last updated: 11 May 2026
1. Introduction
Welcome to kaiverona.co.uk ("the Website"). Your privacy matters. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
By using this Website, you agree to the collection and use of information in accordance with this policy.
2. Who We Are
The data controller for this Website is:
Kai Verona
Email: media@kaiverona.co.uk
Website: https://kaiverona.co.uk
If you have any questions about how your data is handled, please contact us at the email address above.
3. What Data We Collect
We collect and process the following categories of personal data:
3.1 Contact Form Data
When you use our contact form, we collect:
Your name
Your email address
Any message or information you choose to include
Submissions made through the contact form are processed and stored via Brevo (our CRM and email platform), who act as a data processor on our behalf.
3.2 Email Newsletter
If you subscribe to our newsletter or mailing list, we collect:
Your email address
Your name (where provided)
We use Brevo to manage our mailing list and send email communications.
3.3 CRM and Client Data
We use Brevo as a Customer Relationship Management (CRM) tool to store and manage contact information for clients and leads. This may include your name, email address, and any other details you have shared with us in the course of a business relationship.
3.4 Analytics and Cookies
We use cookies and analytics tools to understand how visitors use the Website. Depending on your cookie preferences, this may include data collected by:
Google Analytics – Tracks page views, session duration, traffic sources, and general browsing behaviour. Data may be transferred to and processed in the United States by Google LLC. Google relies on Standard Contractual Clauses (SCCs) as the safeguard for international data transfers.
Meta Pixel (Facebook/Instagram) – Tracks visitor behaviour on our Website to help us measure the effectiveness of our advertising and, where applicable, to show relevant ads on Meta platforms. Data is transferred to and processed in the United States by Meta Platforms, Inc. Meta relies on Standard Contractual Clauses (SCCs) for international data transfers.
Analytics and tracking cookies are only placed on your device after you have given your consent via our cookie consent banner.
4. How We Use Your Data
We use the data we collect for the following purposes:
DataPurposeLegal BasisContact form dataTo respond to your enquiryLegitimate interests (Article 6(1)(f) UK GDPR)CRM / client dataTo manage our business relationships and communicationsLegitimate interests (Article 6(1)(f) UK GDPR)Newsletter emailTo send you marketing communications you have opted intoConsent (Article 6(1)(a) UK GDPR)Google AnalyticsTo understand how the Website is used and improve itConsent (Article 6(1)(a) UK GDPR)Meta PixelTo measure ad performance and enable targeted advertisingConsent (Article 6(1)(a) UK GDPR)
We will not use your personal data for any purpose incompatible with those listed above without first obtaining your consent.
5. Cookies
Cookies are small text files stored on your device when you visit a website. We use the following types of cookies:
Essential cookies – Required for the Website to function correctly. These do not require your consent.
Analytics cookies – Set by Google Analytics to help us understand how visitors interact with the Website.
Marketing/tracking cookies – Set by Meta Pixel to track interactions and support advertising campaigns.
When you first visit the Website, you will be shown a cookie consent banner. Analytics and marketing cookies are only placed after you accept them. You can change your cookie preferences at any time, and you can also control or delete cookies through your browser settings.
6. Data Sharing and Third Parties
We do not sell, rent, or trade your personal data. We work with the following trusted third-party service providers who process data on our behalf:
ProviderPurposeLocationSafeguardBrevo (formerly Sendinblue)Email marketing, CRM, contact form dataFrance (EU)UK GDPR adequacy (EU)Google AnalyticsWebsite analyticsUSAStandard Contractual Clauses (SCCs)Meta Platforms, Inc.Advertising pixel / ad performance trackingUSAStandard Contractual Clauses (SCCs)
Each of these providers is contractually required to handle your data securely and only for the purposes we specify. Where providers are located outside the UK, appropriate safeguards are in place as described above.
We may also disclose your data if required to do so by law or in response to a valid request from a public authority.
7. International Data Transfers
Some of our third-party providers (Google, Meta) are based in the United States. The UK has not issued a general adequacy decision for the US, so we rely on Standard Contractual Clauses (SCCs) — a legally recognised mechanism under UK GDPR — to ensure your data is protected when transferred internationally.
Brevo is headquartered in France, which is covered by the UK's adequacy decision for EU countries.
8. How Long We Keep Your Data
We retain your personal data only for as long as necessary:
Contact form enquiries – Up to 2 years from the date of your enquiry, unless a longer retention period is required in connection with an ongoing business relationship.
CRM records – Retained for the duration of our business relationship and for up to 3 years thereafter, unless you request deletion sooner.
Newsletter subscribers – Until you unsubscribe or withdraw consent.
Analytics data – As configured within Google Analytics (typically up to 14 months in aggregate, anonymised form).
Meta Pixel data – Subject to Meta's own data retention policies.
When data is no longer needed, it is securely deleted or anonymised.
9. Your Rights
Under UK GDPR, you have the following rights regarding your personal data:
Right of access – You can request a copy of the personal data we hold about you.
Right to rectification – You can ask us to correct inaccurate or incomplete data.
Right to erasure – You can ask us to delete your personal data in certain circumstances.
Right to restrict processing – You can ask us to limit how we use your data.
Right to data portability – You can request your data in a structured, commonly used format.
Right to object – You can object to us processing your data where we rely on legitimate interests.
Right to withdraw consent – Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact us at media@kaiverona.co.uk. We will respond within one calendar month.
You also have the right to lodge a complaint with the UK's supervisory authority:
Information Commissioner's Office (ICO)
Website: https://ico.org.uk
Helpline: 0303 123 1113
10. Data Security
We take reasonable technical and organisational steps to protect your personal data from unauthorised access, loss, or disclosure. These include secure connections (HTTPS) and limiting access to data to those who need it.
However, no method of transmission over the internet is entirely secure, and we cannot guarantee absolute security.
11. Links to Other Websites
Our Website may contain links to third-party websites. This Privacy Policy applies only to kaiverona.co.uk. We are not responsible for the privacy practices of other websites and encourage you to review their policies.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. Where changes are significant, we may also notify you by email (if we hold your email address). We encourage you to review this page periodically.
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact:
Kai Verona
Email: media@kaiverona.co.uk
Website: https://kaiverona.co.uk