Privacy Policy

Website: kaiketsu.tech Effective Date: 11 June 2026 Last Updated: 11 June 2026

1. Introduction

Kaiketsu Technology Limited ("we", "us", or "our") operates the website at kaiketsu.tech (the "Website"). We are committed to protecting your personal information and your right to privacy.

This Privacy Policy explains what information we collect, how we use it, what rights you have in relation to it, and how to contact us if you have concerns. Please read it carefully.

If you have any questions about this policy, please contact us using the details in Section 13.

2. Who We Are

For the purposes of applicable data protection laws — including the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR 2016/679), and the Data Protection Act 2018 — Kaiketsu Technology Limited is the data controller in respect of any personal data collected through this Website.

3. What Data We Currently Collect

At present, this Website does not actively collect personal data from visitors. There are no registration forms, contact forms, newsletter sign-ups, payment systems, or user accounts on the Website.

However, as with most websites, certain limited technical data may be automatically recorded by our hosting infrastructure as a by-product of serving web pages. This may include:

This technical data is generally held for a short period (typically 30–90 days) and is not used to identify you as an individual unless required for security or legal purposes.

4. Future Use of Analytics

We may in future introduce web analytics tools (such as Google Analytics, Plausible, or similar services) to help us understand how visitors use the Website. Should we do so:

• We will update this Privacy Policy before any analytics are activated
• Where required by law, we will obtain your prior consent via a cookie consent mechanism
• We will provide clear information about what is being collected and by whom
• You will always have the ability to opt out

Typical analytics data includes pages visited, time spent on the site, approximate geographic location (country/region level), device type, and traffic source. Analytics data is generally aggregated and does not identify you personally.

5. Legal Bases for Processing (UK & EU GDPR)

Where we process personal data, we rely on one or more of the following lawful bases under UK/EU GDPR Article 6:

• Legitimate Interests (Article 6(1)(f)) — for server log data collected automatically to maintain security and diagnose technical issues, where our interests are not overridden by your rights
• Consent (Article 6(1)(a)) — for any analytics or non-essential cookies, where we will seek your prior, freely given, specific, and informed consent
• Legal Obligation (Article 6(1)(c)) — where we are required to process data to comply with applicable law

6. Cookies

6.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They are widely used to make websites work, or work more efficiently.

6.2 Cookies We Use

Currently, the Website only uses cookies that are strictly necessary for the Website to function (e.g., session cookies set by the hosting platform). These do not require your consent under UK/EU law.

6.3 Future Analytics Cookies

If analytics are introduced in future, we will update this section with full details of cookies used, their purpose, provider, and duration, and will implement a cookie consent banner where required.

6.4 Managing Cookies

You can control and delete cookies through your browser settings. Please note that disabling cookies may affect the functionality of some websites. For guidance, visit www.aboutcookies.org or www.allaboutcookies.org.

7. How We Share Your Data

We do not sell, trade, or rent your personal data to third parties.

We may share limited data only in the following circumstances:

• Hosting and infrastructure providers — our Website host may process server log data on our behalf as a data processor, under appropriate contractual obligations
• Analytics providers — if analytics are introduced in future, subject to updated notice and, where required, your consent
• Legal requirements — where we are required to disclose information by law, court order, or to protect the rights, property, or safety of Kaiketsu Technology Limited or others
• Business transfers — in the event of a merger, acquisition, or sale of assets, personal data may be transferred, with appropriate safeguards and notice to you

8. International Data Transfers

If data is transferred outside the UK or the European Economic Area (EEA) — for example, to a hosting or analytics provider based in the United States — we will ensure that appropriate safeguards are in place, such as:

• UK Adequacy Regulations or EU adequacy decisions
• Standard Contractual Clauses (SCCs) approved by the UK ICO or European Commission
• UK International Data Transfer Agreements (IDTAs)
• Any other approved transfer mechanism under applicable law

Where we engage US-based service providers, we will assess their compliance with the EU-US Data Privacy Framework and applicable US state privacy laws where relevant.

9. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, or as required by law:

• Server log data: typically retained for 30–90 days, then deleted or anonymised
• Analytics data (if introduced): typically retained in aggregated or anonymised form; retention periods will be set out in the updated policy
• Legal compliance data: retained for as long as required by applicable law

10. Your Rights

Depending on your location, you may have the following rights regarding your personal data. We will respond to verified requests within the timeframes required by law (generally one month under UK/EU GDPR, or 45 days under US state laws such as the CCPA/CPRA).

10.1 Rights Under UK & EU GDPR

If you are located in the UK or EEA, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate or incomplete data
• Erasure ("Right to be Forgotten") — request deletion of your personal data where there is no legitimate reason for us to continue processing it
• Restriction — request that we restrict processing of your data in certain circumstances
• Data Portability — receive your personal data in a structured, commonly used, machine-readable format
• Object — object to processing based on legitimate interests or for direct marketing purposes
• Withdraw Consent — where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing
• Automated Decision-Making — not be subject to solely automated decisions that produce significant legal or similarly significant effects

10.2 Rights Under US State Privacy Laws

If you are a resident of California (CCPA/CPRA), Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), or other US states with applicable privacy laws, you may have the right to:

• Know — be informed about the categories and specific pieces of personal data collected about you
• Delete — request deletion of personal data we have collected from you
• Correct — request correction of inaccurate personal data
• Opt Out — opt out of the sale or sharing of personal data (we do not sell or share personal data)
• Non-Discrimination — not receive discriminatory treatment for exercising your privacy rights

California "Shine the Light" (Cal. Civ. Code § 1798.83): California residents may request information about personal data shared with third parties for direct marketing purposes. We do not share personal data for direct marketing purposes.

10.3 How to Exercise Your Rights

To exercise any of these rights, please contact us using the details in Section 13. We may need to verify your identity before processing your request. There is no fee for making a request, though we may charge a reasonable fee or decline requests that are manifestly unfounded or excessive.

11. Children's Privacy

This Website is not directed at children under the age of 13 (or 16 where required by applicable law, including under the UK Age Appropriate Design Code). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take steps to delete it promptly.

12. Supervisory Authority and Complaints

UK Users

If you are located in the UK and have concerns about how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• Website: www.ico.org.uk
• Helpline: 0303 123 1113

EU Users

If you are located in the EEA, you have the right to lodge a complaint with the data protection authority in your member state of residence or place of work.

US Users

If you are a US resident and wish to exercise your rights or make a complaint, please contact us directly using the details in Section 13. Applicable state laws may also provide the right to appeal our decisions or contact a relevant state authority.

We would always appreciate the opportunity to address your concerns directly before you contact a supervisory authority.

13. Contact Us

If you have any questions, concerns, or requests in relation to this Privacy Policy or our data practices, please contact us at:

Kaiketsu Technology Limited

Website: kaiketsu.tech

Email: privacy@kaiketsu.tech

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we do, we will revise the "Last Updated" date at the top of this page.

We encourage you to review this policy periodically. Where changes are material, we will take reasonable steps to notify you (for example, by posting a prominent notice on the Website).

This Privacy Policy was last updated on 11 June 2026.