Privacy Notice

This notice explains how EHS Protect Ltd ("Kavorly", "we") handles personal data in connection with the kavorly.com marketing website. It covers visitors to this website only. If you are a customer using the Kavorly Compliance or Kavorly Ops application, the data we process on your behalf inside the product is governed by the separate platform Privacy Policy and Data Processing Agreement presented to you in the application — not by this notice.

1. Who is responsible

EHS Protect Ltd is the data controller for personal data collected through this website. We are registered in Scotland (company number SC849512), registered office 5 South Charlotte Street, Edinburgh, EH2 4AN, and registered with the ICO under ZC095086. For any privacy question, contact hello@ehsprotect.com.

2. The short version

This is a deliberately privacy-light website. We do not use advertising cookies, analytics cookies, tracking pixels, social-media trackers or fingerprinting of any kind. We do not build profiles of visitors, and we do not sell personal data — ever. The only personal data we receive is what you choose to send us when you get in touch, plus the standard technical logs our hosting provider keeps to serve and secure the site.

3. What we collect, and why

a. When you contact us

When you submit the "book a walkthrough" / contact form on this website, the details you provide — your name, work email address, organisation name, your area of interest, and anything you write in the message — are sent to and stored on a server we operate, and forwarded to our team by email so we can respond. We use this information only to respond to you and to discuss the products, and we retain it for no longer than necessary for that purpose. (If the form cannot reach our server, it falls back to opening a pre-filled message in your own email application, which you then choose whether to send.) Lawful basis: our legitimate interest in responding to enquiries, and taking steps at your request prior to entering a contract.

b. Technical / server logs

Our hosting provider (IONOS) automatically records standard technical information when a page is requested — such as your IP address, the time of the request, the page requested, and your browser type. This is used to deliver the site, keep it secure, and diagnose faults. Lawful basis: our legitimate interest in operating a secure, functioning website.

c. The free tools

The calculators and readiness checks run entirely inside your browser. The figures and answers you enter are processed on your own device and are never transmitted to us or stored on our servers. A single preference — your light/dark theme choice — may be saved in your browser's local storage; see our Cookies & Storage notice.

We do not knowingly collect any special-category data through this website, and you should not send any to us via the contact form.

4. Who we share it with

We keep sharing to the minimum needed to run the website:

• IONOS — website hosting and server logs. Hosted in the UK. IONOS SE is a German company subject to the GDPR.
• Email provider — when you email us, your message is handled by our business email service (Microsoft 365) so that we can read and reply to it.

We may disclose personal data if required to do so by law, regulation or valid legal process. We do not use your data for third-party advertising, and we do not sell it.

5. International transfers

Website hosting is within the UK. Where a provider we rely on processes limited data outside the UK/EEA, we rely on appropriate safeguards — the UK's adequacy arrangements where they apply, and otherwise the UK International Data Transfer Addendum and/or the EU Standard Contractual Clauses.

6. How long we keep it

Enquiry emails are kept for as long as needed to deal with your enquiry and any resulting relationship, and then in line with our normal business-record retention, after which they are deleted. Server logs are kept only for a short period for security and diagnostics before being rotated out. The theme preference stays in your browser until you clear it.

7. Your rights

Under UK GDPR you have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to our processing, and to data portability, in each case subject to the legal conditions that apply. To exercise any of these, email hello@ehsprotect.com and we will respond within one month. If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113 — though we would appreciate the chance to put things right first.

8. Children

This website is aimed at businesses and is not directed at children. We do not knowingly collect personal data from anyone under 16 through this website.

9. Changes to this notice

We may update this notice to reflect changes to the website or the law. The current version, with its effective date, is always the one published here.

10. Contact

EHS Protect Ltd, 5 South Charlotte Street, Edinburgh, EH2 4AN. Email: hello@ehsprotect.com. Company No. SC849512 (Scotland). ICO registration ZC095086.