Privacy policy

1. Summary

This pilot website is intentionally simple. It does not run advertising, analytics, behavioural tracking, chat widgets, social pixels, or newsletter signup forms. It does not ask you to create an account. If you contact us by email, we process the information you provide to respond and assess the enquiry.

2. Information we collect

Contact information you choose to provide

If you use the sourcing request form or email partners@kipala.co, we receive the information you provide and standard email or technical metadata. The form asks for details such as your name, email address, organisation, buyer type, country, delivery region, product description, quantity, budget, timeline, requirements, and consent.

Technical logs and abuse filtering

The website is served through Cloudflare. Cloudflare and our hosting providers may process standard technical request data such as IP address, user agent, requested URL, referrer, timestamp, security signals, and delivery status to operate, secure, and protect the website. The request form uses a short-lived hashed browser/network identifier and a submission counter to limit spam and abuse.

Information we do not collect through this site

• We do not use cookies for advertising or analytics on this site.
• We do not ask for payment details through this site.
• We do not ask for sensitive personal or health information.
• We do not create user profiles for behavioural advertising.

3. How we use information

We may use contact and technical information to:

• Reply to partner, buyer, supplier, or research enquiries
• Assess whether a product category, market, or partner fits the pilot
• Protect the website from abuse, fraud, bots, and security threats
• Meet legal, accounting, or record-keeping obligations
• Keep a record of business communications

4. Legal bases

Where data protection law based on the UK GDPR or EU GDPR applies, we generally rely on:

• Consent, where you choose to send us an enquiry or personal data
• Legitimate interests, to operate and secure the website and assess relevant business enquiries
• Legal obligation, where retention or disclosure is required by law

5. Sharing

We do not sell personal data. We may share limited information with service providers that host the website, provide email, security, storage, or support services, or with professional advisers and authorities where permitted or required by law.

Current service providers include Cloudflare for website delivery, security, and request storage; Google Workspace for business email and document collaboration; and Telegram for minimal operator push notifications. Telegram notifications contain only high-level request metadata, such as an internal request ID, country, category, buyer type, quantity, and required date. They do not include your name, email address, organisation, delivery details, product description, or additional requirements.

6. Third-party links

This website may link to third-party websites, suppliers, product pages, or platform documentation. Those third parties may have their own privacy policies and may collect data or set cookies when you visit them. Please review their policies before providing information.

7. Retention

Sourcing request submissions are retained for up to 180 days in the request-capture service, and longer only if needed for an active enquiry, business relationship, legal obligation, or operational record. Business enquiries are retained only as long as needed for the purpose described in this policy and our legitimate business, legal, or operational needs. Technical logs and abuse-filter counters are retained according to the service provider’s standard retention and security settings; abuse-filter counters expire after a short period.

8. Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to processing, or to request a copy of your personal data. To exercise these rights, email partners@kipala.co.

9. International transfers

Our service providers may process data in countries outside your own. We rely on provider safeguards and appropriate transfer mechanisms where required.

10. Children

This website and pilot are intended for business and professional users. We do not knowingly collect data from children.

11. Changes

This policy may change as the pilot develops, especially if we add enquiry forms, analytics, affiliate links, or product catalogues. Material changes will update the “last updated” date above.

12. Contact

Privacy questions may be sent to partners@kipala.co.