Privacy Policy

1. Who We Are

This Privacy Policy relates to Kalura Limited (“we”, “us”, or “our”), a company registered in the United Kingdom. For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Kalura Limited acts as the Data Controller in respect of personal data submitted via our website (https://kalura.site).

2. Data We Collect

We collect information that you directly provide when completing our inquiry, quotation, or consultative forms:

• Contact Information: Full name, business email address, phone number, and physical region.
• Commercial Information: Company name, estimated budget parameters, project scope descriptions, and technical preferences.
• Technical Metadata: Anonymised browser type, IP address (retained temporarily for spam rate-limiting), and timestamp of form submission.

3. Lawful Basis for Processing

We process personal information under the following lawful bases permitted by Article 6 of the UK GDPR:

• Consent: When you voluntarily submit an inquiry and check our affirmative consent acknowledgement.
• Contractual Pre-steps: Where processing is required to formulate a requested quote or engineering scope prior to entering an agreement.
• Legitimate Interests: To protect our edge servers from denial-of-service abuse, rate-limit malicious bot traffic, and optimize web performance.

4. How We Use Your Data

Your data is utilized strictly for professional business purposes:

• Responding to your direct inquiries and delivering technical project proposals.
• Verifying project feasibility and scheduling discovery conversations.
• Maintaining system security and preventing automated form spam.

We never sell, rent, or trade your personal data to external third parties or data brokers.

5. Data Retention

We retain contact inquiry submissions only for as long as necessary to address the requested communication or maintain ongoing business dialogues. If an inquiry does not materialize into an active commercial engagement within 12 months, personal identification records are securely purged or anonymized.

6. Your Rights Under UK GDPR

As a data subject, you possess enforceable statutory rights:

• Right of Access: Request a copy of the personal information held about you.
• Right to Rectification: Request correction of inaccurate or incomplete records.
• Right to Erasure (“Right to be Forgotten”): Request deletion of your personal records where no overriding legal mandate exists.
• Right to Restrict or Object: Object to processing carried out under legitimate interests.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner’s Office (ICO) at ico.org.uk.

7. Contact & Data Inquiries

To exercise any of your data rights or make a privacy inquiry, please contact our data team: