Privacy notice

1. Controller

2. Hosting and server logs

This website is hosted and delivered using our hosting provider. When you access the website, technically necessary connection data may be processed, including the IP address, request time, requested page, transferred data volume, browser and device information, and referrer information.

Processing is necessary to deliver the website, maintain stability and security, and prevent abuse. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of this website.

3. Contact by email

The website links to your own email client and does not operate an embedded contact form. If you email us, we process the information you provide to respond to your request and discuss possible pre-contractual steps.

The legal basis is Article 6(1)(b) GDPR where communication serves to initiate a contract, otherwise Article 6(1)(f) GDPR and our legitimate interest in answering business enquiries. Data is deleted after the request is resolved unless statutory retention duties or legitimate interests require otherwise.

4. Audience measurement and attribution

Our aggregated CTA measurement

We measure only whether a meeting or email link was activated. We may process the event name, page, link position, referring domain and campaign parameters such as utm_source, utm_medium, utm_campaign and utm_content. Names, email addresses, free text, documents and case contents are not sent to this measurement.

Data is aggregated by day without visitor identifiers and deleted automatically after 180 days. We do not use analytics cookies or local/session browser storage for this measurement. Global Privacy Control and Do Not Track signals are respected.

Ahrefs Web Analytics

On public production pages we use Ahrefs Web Analytics, which loads a script from analytics.ahrefs.com. According to Ahrefs, the service operates without cookies or persistent identifiers by default. It may process the page viewed, referrer, browser and device information, language, approximate location derived from the IP address, page views and general interactions.

We use this information to understand aggregate usage, entry pages, referrals and the broad technical and regional distribution of visits. For more information, see the Ahrefs Web Analytics documentation and Ahrefs privacy policy. The legal basis is Article 6(1)(f) GDPR and our legitimate interest in evaluating the clarity and use of this business offering with minimal personal data.

5. Meeting booking through HubSpot

Links for process assessments open an external HubSpot meeting page. The page is not embedded, so this website does not load HubSpot resources before you intentionally follow the link. HubSpot then processes technically necessary connection data under its applicable terms.

If you book a meeting, we process the contact and appointment data you provide to handle your enquiry and conduct pre-contractual communication. The legal basis is Article 6(1)(b) GDPR. Further details are available in the HubSpot privacy policy.

6. Cookies, local storage and external media

We do not use non-essential cookies, local or session browser storage for analytics, or embedded external media. The Ahrefs analytics script is loaded as an external resource.

7. Recipients and international processing

Technical and analytics data may be received by the service providers used for hosting, analytics and meeting booking. Processing may take place outside the European Economic Area under the safeguards described in the data-processing terms applicable to our accounts.

8. Your rights

Subject to the statutory requirements, you have rights of access, rectification, erasure, restriction of processing, data portability and objection. You may withdraw consent with future effect and lodge a complaint with a supervisory authority.

Send questions or requests to info@kalo.build.

9. Last updated

31 August 2026