Privacy Policy
Effective June 2, 2026
This policy explains how KUMALU handles personal data when you visit this website or contact us. We collect only what we need and do not sell your information.
Data controller
The data controller is KUMALU (hello@kumalu.com). For privacy questions or to exercise your rights, contact us at the email below.
What we process
If you submit the audit form or email us, we process the details you provide—such as business name, email address, business type, and any package you select. Our hosting and analytics providers may process limited technical data (for example, page views and device type) to operate and improve the site.
Legal basis
We process form and email inquiries to respond to your request and prepare our audit (contractual steps under GDPR Art. 6(1)(b)). If you opt in on the form, we send occasional tips by email under your consent (Art. 6(1)(a)). We rely on legitimate interest (Art. 6(1)(f)) for essential site operation, security, and aggregated, cookieless analytics.
How we use your data
We use your inquiry to reply, deliver the audit, and improve our services. If you opt in, we may email you occasionally with practical tips on keeping customers—you can unsubscribe from any message. Form submissions are stored in our internal tools so our team can follow up. We do not sell or share your data with advertisers.
Retention period
Inquiry data is kept for up to 24 months after our last contact with you, or until you ask us to delete it—whichever comes first. Marketing emails stop when you unsubscribe or withdraw consent. Aggregated analytics data is retained according to our providers' standard periods.
Processors
We use trusted processors to run this site: Vercel (hosting and privacy-friendly analytics) and Notion (storing audit form submissions). They process data only on our instructions and under data protection agreements.
Your rights
If you are in the EEA or UK, you may request access, correction, deletion, restriction, or portability of your personal data, and object to processing based on legitimate interest. You may also lodge a complaint with your local data protection authority. We will respond to requests within one month.
Cookies
We set one functional cookie to remember your language preference. Our analytics tool does not use advertising cookies or cross-site tracking. Because we do not use non-essential cookies, we do not show a cookie consent banner.
Contact
Privacy questions or requests: hello@kumalu.com