Privacy policy.

1. Data controller

Klarvant Ltd is the data controller responsible for your personal data. Our contact details are: Klarvant Ltd, Company No. 13737105, email info@klarvant.com , website klarvant.com.

2. Information we collect

Information you provide directly

We collect information you provide when you request a demo, create an account, contact us, subscribe to our services, or use our platform. This can include your name, email address, company name, job title, phone number, domain names, account credentials, billing information, and any configuration settings, preferences, saved searches, and reports you create.

Information collected automatically

When you access our website or services, we automatically collect device information (IP address, browser type, operating system, device identifiers), usage data (pages visited, time spent, features used, referral sources), general geographic location based on IP address, and information from cookies and similar technologies, as described in our cookie policy.

Information from third parties

We may receive information about you from publicly available internet data (for asset discovery purposes), analytics providers, payment processors, and resellers where you are referred to us or engage through a reseller.

3. How we use your information

Legal basis for processing

We process your personal data on the grounds of contract performance (to provide our services and meet our obligations), legitimate interests (to improve our services, prevent fraud, and ensure security), legal obligation (to comply with applicable law), and consent (where you have given explicit consent for specific processing).

Purposes of processing

We use your information to provide our services, process transactions, communicate with you and provide support, improve our platform, send marketing with your consent, protect against fraud and security threats, meet legal and regulatory requirements, and understand how our services are used.

4. How we share your information

We do not sell your personal data. We may share it with third-party service providers who process data on our behalf (cloud hosting, payment processors, analytics providers, communication platforms, and customer support tools), all bound by data protection agreements and acting only on our instructions. We may disclose information where required to comply with legal obligations, court orders, or government requests, to enforce our Subscriber Agreement, to protect the rights, property, or safety of Klarvant, our users, or others, or to prevent fraud or security threats. In the event of a merger, acquisition, reorganisation, or sale of assets, your personal data may be transferred to the successor entity, subject to the same protections.

5. International data transfers

Your personal data may be transferred to and processed in countries outside the UK and European Economic Area. When we transfer data internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the UK Information Commissioner's Office (ICO), data processing agreements with service providers, and adequacy decisions recognising equivalent data protection standards.

6. Data retention

We retain your personal data only as long as necessary for the purposes described in this policy or as required by law. Account data is held for the duration of your account plus six years for legal and tax purposes; customer data as specified in your subscription agreement, typically with a 30-day export period post-termination; marketing data until you unsubscribe or request deletion; website analytics typically for 26 months; and transaction records for six years. After the retention period, we securely delete or anonymise your personal data.

7. Your data protection rights

Under UK GDPR you have the right of access, the right to rectification, the right to erasure, the right to restrict processing, the right to data portability, the right to object to processing (including for direct marketing), and the right to withdraw consent where processing is based on it. You also have the right to lodge a complaint with the ICO (ico.org.uk, 0303 123 1113) if you believe we have not handled your personal data properly. To exercise any of these rights, contact info@klarvant.com . We will respond within one month.

8. Data security

We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit (TLS/SSL) and at rest (AES-256), role-based access controls with multi-factor authentication and least-privilege principles, network security (firewalls, intrusion detection, DDoS protection), continuous monitoring and logging, incident response procedures, regular penetration testing and vulnerability assessments, and security awareness training for all staff.

9. Cookies and tracking technologies

We use cookies and similar technologies to enhance your experience, analyse usage, and deliver personalised content. For detail on the cookies we use and how to manage them, see our cookie policy.

10. Children's privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal data, please contact us and we will take steps to delete it.

11. Third-party links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites, and we encourage you to review their privacy policies before providing any personal data.

12. Marketing communications

With your consent, we may send you marketing communications about our services, features, and promotions. You can opt out at any time by clicking the unsubscribe link in any marketing email, contacting info@klarvant.com , or updating your account preferences. Even if you opt out of marketing, we will still send essential service-related messages.

13. Automated decision-making

Our platform uses automated processing and AI to analyse digital assets and assess risks. However, we do not make solely automated decisions that produce legal effects or significantly affect you without human oversight. Risk assessments and recommendations are tools to support your decision-making, not to replace it.

14. Changes to this policy

We may update this policy from time to time to reflect changes in our practices, technology, or legal requirements. We will post the updated policy with a new "Last updated" date and, for material changes, notify you by email or a prominent notice on our platform.

15. Contact us

If you have questions, concerns, or requests regarding this policy or our data practices, contact Klarvant Ltd, Company No. 13737105, at info@klarvant.com .