Back to home
Legal

Privacy Policy

Last updated: May 31, 2026

This Privacy Policy explains how SiteCraft Digital Ltd., a company registered in England and Wales and trading as "Kyur"("we", "us", "our"), collects, uses, shares and protects personal data. We are the data controller of personal data we process about visitors to our website, prospects and clients.

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, and with the EU GDPR where applicable.

1. Data we collect

  • Contact data: name, email, company, role, phone number when you book a call or contact us.
  • Booking and meeting data: scheduling details and notes you provide via Cal.com.
  • Billing data: name, billing address, VAT/tax ID, and payment confirmation data provided by our payment processor Paddle. We do not store full card details.
  • Communications: emails, messages, and call notes exchanged with us.
  • Project data: information, files, credentials and content you share with us to deliver the Services.
  • Technical data: IP address, device type, browser, pages visited, referrer, and similar information collected via cookies and server logs.

2. How we use your data

  • To respond to enquiries and schedule consultations.
  • To provide, manage and improve the Services.
  • To process payments, invoicing and tax compliance (via Paddle as merchant of record).
  • To send service-related communications and, where permitted, marketing.
  • To comply with legal, regulatory and accounting obligations.
  • To protect the security and integrity of our website and systems.

3. Legal bases

We rely on the following legal bases under UK/EU GDPR: contract (to deliver Services you have requested), legitimate interests (to operate, secure and grow our business in a balanced way), legal obligation(e.g. tax and accounting), and consent (e.g. for non-essential cookies and certain marketing).

4. Sharing your data

We share personal data with trusted third parties who help us operate, including:

  • Paddle.com Market Ltd — payment processing and merchant of record.
  • Cal.com, Inc. — scheduling and meeting management.
  • Cloud and infrastructure providers — hosting, email, analytics and storage.
  • Professional advisers — accountants, lawyers, auditors.
  • Authorities — where required by law or to protect our rights.

We do not sell personal data. We require processors to handle data under contract and with appropriate safeguards.

5. International transfers

Some of our service providers are located outside the UK or EEA. Where personal data is transferred internationally, we rely on appropriate safeguards such as UK/EU Standard Contractual Clauses or adequacy decisions.

6. Retention

We keep personal data only for as long as necessary for the purposes described above, including to meet legal, tax and accounting requirements. Typical retention is up to 7 years after the end of our business relationship for financial records, and shorter periods for marketing and website analytics data.

7. Your rights

Subject to applicable law, you have the right to:

  • Access your personal data and request a copy.
  • Correct inaccurate or incomplete data.
  • Request deletion or restriction of processing.
  • Object to processing based on legitimate interests or direct marketing.
  • Receive your data in a portable format.
  • Withdraw consent at any time where processing is based on consent.

To exercise these rights, contact hello@kyur.tech. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies

Our website uses essential cookies required for the site to function, and may use analytics cookies to understand usage. You can control cookies via your browser settings. Where required by law, we will request your consent before setting non-essential cookies.

9. Security

We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, or alteration. No system is fully secure, and we cannot guarantee absolute security.

10. Children

Our Services are intended for businesses and are not directed at children under 16. We do not knowingly collect personal data from children.

11. Changes

We may update this Privacy Policy from time to time. The latest version will always be posted on this page with an updated date.

12. Contact

SiteCraft Digital Ltd. (trading as Kyur)
Email: hello@kyur.tech