Privacy Policy
Last updated: 7 February 2026
Kasvu Consulting (“Kasvu”, “we”, “us”, or “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect personal data when you visit our website www.kasvu.consulting(the “Website”) or engage with us.
This policy is drafted in accordance with the EU General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679).
1. Data Controller
Kasvu Consulting
Website: www.kasvu.consulting
Email: contact@kasvu.consulting
Kasvu Consulting acts as the Data Controller for personal data processed through this Website.
2. Personal Data We Collect
We may collect and process the following categories of personal data:
2.1 Information You Provide Voluntarily
- Name
- Email address
- Company name
- Phone number (if provided)
- Any information submitted via contact or enquiry forms
- Information shared via email communication
2.2 Information Collected Automatically
When you visit our Website, we may automatically collect:
- IP address (anonymised where applicable)
- Browser type and version
- Operating system
- Device information
- Pages visited and time spent on the Website
- Referring URLs
3. Purposes of Processing
We process personal data for the following purposes:
- Responding to enquiries and contact requests
- Providing consulting and advisory services
- Business development and professional communication
- Website performance, security, and analytics
- Compliance with legal and regulatory obligations
4. Legal Bases for Processing
Under GDPR, we rely on the following legal bases:
- Consent (Article 6(1)(a)) – where you explicitly consent (e.g., cookies, analytics, contact forms)
- Legitimate Interest (Article 6(1)(f)) – to respond to enquiries, maintain business relationships, and improve our Website
- Contractual Necessity (Article 6(1)(b)) – where processing is required to provide requested services
- Legal Obligation (Article 6(1)(c)) – where required by applicable laws
5. Contact Forms & Communications
When you submit a contact form:
- The data is used solely to respond to your enquiry
- Data is not used for unsolicited marketing
- Submissions are stored securely and accessible only to authorised personnel
Contact forms include an explicit consent mechanism acknowledging this Privacy Policy.
6. Cookies & Tracking Technologies
6.1 What Are Cookies?
Cookies are small text files placed on your device to enhance user experience and analyse Website usage.
6.2 Types of Cookies Used
- Strictly Necessary Cookies – required for Website functionality
- Analytics Cookies – help us understand Website performance and usage
- Functional Cookies – remember preferences (if enabled)
6.3 Cookie Consent
Non-essential cookies are only placed after obtaining your explicit consent via a cookie consent banner. You can manage or withdraw your consent at any time.
Detailed information is available in our Cookie Policy.
7. Analytics
We may use privacy-focused analytics tools (e.g., Google Analytics with IP anonymisation enabled) to understand how visitors use our Website.
Analytics data:
- Is processed in aggregated form
- Does not identify individual users
- Is collected only after consent
8. Data Sharing & Third Parties
We do not sell or rent personal data.
Personal data may be shared only with:
- IT and hosting service providers
- Website analytics providers (subject to consent)
- Legal or regulatory authorities when required by law
All third parties are contractually bound to comply with GDPR.
9. International Data Transfers
If personal data is transferred outside the European Economic Area (EEA), appropriate safeguards are implemented, such as:
- Standard Contractual Clauses (SCCs)
- GDPR-compliant data processing agreements
10. Data Retention
We retain personal data only for as long as necessary:
- Contact enquiries: up to 24 months
- Business communications: duration of the business relationship
- Legal obligations: as required by applicable law
Data is securely deleted or anonymised after the retention period.
11. Your Rights Under GDPR
You have the right to:
- Access your personal data
- Rectify inaccurate data
- Request erasure (“right to be forgotten”)
- Restrict processing
- Object to processing
- Data portability
- Withdraw consent at any time
To exercise your rights, contact us at contact@kasvu.consulting.
12. Data Security
We implement appropriate technical and organisational measures to protect personal data against:
- Unauthorised access
- Loss or destruction
- Alteration or disclosure
13. Supervisory Authority
If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority in the EU member state of your residence or workplace.
14. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised “Last updated” date.
15. Contact
For privacy-related questions or requests:
Email: contact@kasvu.consulting
Website: www.kasvu.consulting