Who we are
karpla.com is operated by Karpla (“Karpla”, “we”, “us” or “our”).
We are the controller of the personal information described in this policy. That means we decide how and why it is used, and we are responsible for looking after it under UK data protection law, including the UK GDPR and the Data Protection Act 2018.
This policy covers our website and the ways people get in touch with us. If we build or manage a website for your business, we may also handle personal information about your customers on your behalf. In that case you are the controller, and how we handle that information is set out in our agreement with you.
Information we collect
We only collect what we need to reply to you, provide our services and keep the website running safely.
Information you give us
- Contact enquiries: your name, email address, what you need help with and anything you include in your message.
- Free website reviews: your email address and the website address you ask us to review. We also keep the results of the review and whether you went on to contact us about it.
- Phone calls, emails and meetings: your contact details and whatever you choose to share with us about your business and what you need.
- Clients: the details we need to deliver and bill for our services, such as business contact details, billing information, domain registration details and account information for services we manage for you.
Information collected automatically
- Technical information: your IP address, browser type and the pages you request. Our hosting provider records this in standard server logs, and we use your IP address for a short time to limit how often the free website review can be used, which protects the service from abuse.
- Information stored in your browser: the website review uses your browser's session storage to remember your results while you move between pages. See our Cookie Policy for details.
We don't ask for sensitive information, such as health data or details about your beliefs, so please don't include it in your messages.
How we use your information and why
UK data protection law says we need a lawful basis for each way we use personal information. This table sets out what we do and the basis we rely on.
- What we do
- Reply to your enquiry and talk to you about what you need
- Lawful basis
- Legitimate interests: responding to people who contact us. If you are asking about becoming a client, also steps taken at your request before entering a contract.
- What we do
- Run your free website review, show you the results and follow up with you about them
- Lawful basis
- Legitimate interests: providing the review you asked for and helping you act on it. You can ask us to stop contacting you at any time.
- What we do
- Provide, manage and bill for our services
- Lawful basis
- Contract, and legal obligation for keeping financial records.
- What we do
- Keep the website secure, prevent abuse and fix problems
- Lawful basis
- Legitimate interests: running a safe and reliable website.
- What we do
- Send you news or offers by email
- Lawful basis
- Consent. We will only do this if you have agreed to it, and you can unsubscribe at any time.
- What we do
- Comply with the law, handle disputes and respond to lawful requests
- Lawful basis
- Legal obligation, and legitimate interests in protecting our business.
Where we rely on legitimate interests, we have considered whether our interests are outweighed by your rights. You can ask us for more detail about this.
How the free website review works
When you request a review, our system visits the public pages of the website you enter, much like a search engine does. It checks things such as content, speed and how easy it is for visitors to get in touch.
- We send the website address to Google's PageSpeed Insights service to measure loading performance.
- We may send the website address, a screenshot of its homepage and our automated findings to OpenAI so it can help write a plain-English summary. We do not send your email address to OpenAI, and our API data is not used to train OpenAI's models.
- The review is an automated first look. It does not make decisions about you that have legal or similarly significant effects.
By requesting a review, you agree that we may contact you about your website and the results. If you'd rather we didn't, just let us know.
International transfers
Some of our providers, including Google and OpenAI, may process information outside the UK, for example in the United States. When this happens, we make sure appropriate safeguards are in place, such as the UK Extension to the EU–US Data Privacy Framework or the UK International Data Transfer Agreement or Addendum.
How long we keep it
We keep personal information only for as long as we need it:
- Enquiries and website review requests that don't lead to working together: up to 24 months after our last contact with you.
- Client records: for as long as we work together, then for six years after, to meet tax and accounting requirements and deal with any questions or claims.
- Rate-limiting data based on your IP address: held temporarily and cleared automatically, usually within a day.
- Session storage in your browser: cleared when you close the tab or browser.
When information is no longer needed, we delete it or make it anonymous.
Keeping it secure
We use appropriate technical and organisational measures to protect your information, including encrypted connections (HTTPS), access controls and choosing providers with strong security practices. No system is completely secure, but if something goes wrong we will act quickly and tell you and the ICO where the law requires it.
Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal information we hold about you;
- ask us to correct information that is wrong or incomplete;
- ask us to delete your information;
- ask us to restrict how we use your information;
- object to us using your information based on legitimate interests, and object at any time to direct marketing;
- ask us to transfer information you gave us to another organisation; and
- withdraw your consent at any time, where we rely on consent.
Some rights only apply in certain circumstances. There is normally no charge, and we will respond within one month. We may need to confirm your identity before acting on a request.
Children
Our website and services are designed for businesses and are not aimed at children. We do not knowingly collect personal information from anyone under 18.
Contact us or make a complaint
To use any of your rights or ask a question about this policy, get in touch:
- Phone: 07985 561397
- Our contact page
If you are unhappy with how we have handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
Changes to this policy
We may update this policy from time to time, for example if we start using a new service. The date at the top of this page shows when it was last changed. If we make significant changes, we will make that clear on the website.
Questions about this page?
Get in touch and we'll explain anything that isn't clear.