KLOPA / PRIVACY
Privacy policy.
This notice explains how Klopa handles personal information when you visit this website or get in touch.
Last updated: 6 November 2026
Who is responsible
Klopa is an independent IT consultancy run by Kyran Poole and is responsible for the personal information described in this notice. For a privacy question, a request about your information, or a copy of the transfer safeguards described below, email privacy@klopa.co.uk.
Information we use
If you use the contact form, we receive your name, email address, and message, plus a company name if you choose to provide one. If you email us directly, we receive your email address, the information you include, and any correspondence that follows. Please do not send passwords or sensitive personal information through the form.
When you visit the site, our hosting service processes technical details needed to deliver and protect it, including an IP address, browser information, and request data. When the contact form is available, Cloudflare Turnstile checks browser and device signals for automated abuse. Turnstile does not receive the words you enter into the form.
Why we use it
We use enquiry details to answer your question, discuss requested services, and keep relevant correspondence. If you ask about becoming a client, the lawful basis is taking steps at your request before a contract. For other business enquiries, it is our legitimate interest in responding. We use technical information and Turnstile signals to operate and protect the website on the basis of our legitimate interest in a secure, reliable service.
Providing an enquiry is optional. We need a way to contact you and enough detail to respond; without those, we may be unable to help. We do not add form enquiries to a marketing list, sell them, or make decisions about you solely by automated means.
Who handles the information
Microsoft Azure Static Web Apps delivers the site and runs the managed contact-form API. Azure handles hosting requests and service data. Cloudflare Turnstile receives the signals needed to verify the form and protect it from abuse; see Cloudflare’s Turnstile Privacy Addendum. If you submit the form, the API sends your name, email address, optional company name, and message to Resend, which delivers the enquiry to Klopa’s email provider and mailbox. Kyran then handles the correspondence. We share information with these providers only for those purposes, or where disclosure is required by law.
Processing outside the UK
Azure distributes the static website globally. The managed contact API is configured in Azure’s East US region, so form submissions are processed in the United States before delivery. Resend also stores message content and delivery logs in the United States, regardless of the email sending region. Cloudflare may process security signals internationally as described in its addendum. Your email provider may also process correspondence outside the UK, depending on its service arrangements.
For restricted transfers, the relevant provider’s UK transfer terms and safeguards apply, including an applicable UK adequacy arrangement or contractual protections such as the UK Addendum to standard contractual clauses. You can ask privacy@klopa.co.uk for information about the safeguards relevant to your enquiry. The Azure function region describes where the form API runs; it does not mean every copy of site or provider data stays in East US.
How long we keep it
Klopa deletes its copies of enquiries that do not become client work within 24 months of the last exchange, unless a legal obligation or an ongoing dispute requires longer retention. If an enquiry becomes client work, we keep related records while needed to provide the service and then for applicable business, tax, or legal obligations. We review those records when the work ends.
Service providers may keep their own delivery, security, and technical logs under their published retention arrangements. Deleting correspondence from Klopa’s mailbox does not immediately erase provider logs or backups. If you ask us to delete your information, we will also assess whether a request to a provider is appropriate and available.
Cookies and basic site statistics
We do not currently run advertising or browser-based visitor analytics. Azure’s built-in monitoring provides aggregate site-hit and error counts, which we use to understand basic traffic and keep the site working. A site hit is not a unique visitor count. When enabled, the form uses Turnstile’s browser challenge and a short-lived verification token for security. Turnstile may use a clearance cookie if pre-clearance is enabled in its configuration; we do not use that token for advertising. If we add visitor analytics or optional technologies, we will update this notice and provide any choices required by law.
Your rights
Depending on the circumstances, you can ask to see, correct, or delete your personal information, restrict its use, or request a portable copy. You can object to processing based on our legitimate interests, including the operation and protection of the site and our response to general business enquiries. Email privacy@klopa.co.uk and we will respond to your request. You can also complain to the Information Commissioner’s Office if you are unhappy with how we handle your information.