Privacy Policy — Khodora Ltd

1. Who we are

Khodora Ltd ("Khodora", "we", "us") is a software development company registered in England and Wales under company number 17161279, with its registered office at 66 Paul Street, London, England, EC2A 4NA.

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Khodora Ltd is the data controller of personal data collected through this website (khodora.co.uk) and in the course of our business relationships.

You can contact us about anything in this policy at info@khodora.co.uk or on +44 7462 214847.

2. The data we collect

We keep data collection to a minimum. Depending on how you interact with us, we may process:

Contact details — your name, email address, telephone number and organisation, when you email or call us.
Correspondence — the content of emails and notes from calls or meetings, so we can respond properly and keep an accurate record of our dealings.
Contract and billing information — details reasonably required to prepare proposals, contracts and invoices if you become a client.
Technical data — basic server logs (IP address, browser type, pages requested, timestamps) generated when you visit this website, used solely for security and to keep the site running reliably.

This website does not include a contact form, does not run advertising, and does not use analytics or tracking cookies.

3. How and why we use your data

We rely on the following lawful bases under UK GDPR:

Contract — to prepare proposals, deliver services and manage our agreement with you.
Legitimate interests — to respond to enquiries, maintain business records, and protect the security of our website and systems. We balance these interests against your rights.
Legal obligation — to keep accounting records and comply with tax, company and other laws applicable to a UK limited company.

We do not sell personal data, and we do not send marketing emails unless you have specifically asked us to keep in touch.

4. Client project data

When we build or maintain software for clients, we may have incidental access to personal data held in client systems. In that context we act as a data processor under the client's instructions, governed by a written agreement. We access such data only to the extent necessary to perform the work, and we never use it for any other purpose.

5. Who we share data with

We share personal data only with:

Service providers — such as email hosting, cloud infrastructure and accounting software providers, who process data on our behalf under contracts that meet UK GDPR requirements.
Professional advisers — accountants, insurers or solicitors, where necessary.
Authorities — where we are required to by law.

Where a provider stores data outside the UK, we ensure appropriate safeguards are in place, such as UK adequacy regulations or the International Data Transfer Agreement.

6. How long we keep data

Enquiries that don't proceed — up to 12 months, then deleted.
Client records — for the duration of our engagement and then 6 years, to meet contractual, tax and legal obligations.
Server logs — routinely rotated and deleted within 90 days.

7. How we protect data

We apply the same standards to our own data that we apply to the systems we build for clients: encryption in transit and at rest, access limited to those who need it, multi-factor authentication on all business accounts, and prompt application of security updates.

8. Your rights

Under UK GDPR you have the right to:

Access the personal data we hold about you.
Have inaccurate data corrected.
Have your data erased in certain circumstances.
Restrict or object to certain processing.
Receive your data in a portable format.
Withdraw consent, where processing is based on consent.

To exercise any of these rights, email info@khodora.co.uk. We respond within one month. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk, though we'd appreciate the chance to resolve any concern directly first.

9. Cookies

This website does not set cookies for analytics, advertising or tracking. Any cookies that may be set are strictly necessary for the website to function.

10. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or the law. The "last updated" date at the top of this page shows when it was most recently revised. Significant changes will be highlighted on this page.