Privacy policy.

Who we are

Kefilab is a digital strategy and design studio based in London, UK. Our website is kefilab.com. Kefilab is registered with the Information Commissioner’s Office (ICO) as a data controller — registration reference ZC207164. If you have questions about this policy, contact us at hello@kefilab.com.

What we collect

When you use this site or deal with us, we may collect:

• →Information you submit through our contact form (name, email, business name, project details)
• →Email correspondence — if you email us directly, we keep your message and our reply, including your name, email address, and anything you choose to include
• →Analytics data — pages visited, time on site, referral source. Collected via PostHog (EU-hosted). No personally identifiable data unless you submit a form.
• →Cookies — we use a minimal set. Analytics cookies only load after you accept via our cookie banner.

How we use it, and our lawful bases

• →To respond to enquiries and discuss potential work — our lawful bases are legitimate interests and, where you’re asking about working with us, taking steps to enter a contract (UK GDPR Article 6(1)(b) and 6(1)(f))
• →To understand how the site is used so we can improve it — analytics cookies run only with your consent (Article 6(1)(a)); cookieless traffic measurement relies on legitimate interests (Article 6(1)(f))
• →We do not sell your data. We do not share it with third parties except the services listed below.

Business contacts and prospects

We hold business contact details — name, role, firm, and email address — for people who enquire about our services or whom we contact about them. At present this lives only in our email correspondence; we do not run a marketing database or CRM. Our lawful basis is our legitimate interest in promoting our services to businesses. If you’d rather not hear from us, reply or email hello@kefilab.com and we’ll stop. If the way we hold this data changes, we’ll update this notice.

Third-party services

• →Netlify — hosts this site. May collect server logs. See Netlify’s privacy policy.
• →PostHog (EU-hosted) — analytics. Data stored in the EU. Opt-out via our cookie banner.
• →Ahrefs Web Analytics — cookieless traffic analytics. No cookies set, no personally identifiable data collected. See the Ahrefs privacy policy.

International transfers

Some of the services we use store data outside the UK. PostHog is hosted in the EU, which is covered by the UK’s adequacy regulations for the EEA. Netlify is a US provider; where personal data reaches the US it is protected by the UK–US data bridge (the UK Extension to the EU–US Data Privacy Framework) or, where a provider is not certified under it, by the UK’s International Data Transfer Agreement or Addendum. Fonts are self-hosted — no font requests go to Google or any other third party.

How long we keep it

• →Enquiries and email correspondence — for as long as the conversation is live, then reviewed and deleted when no longer needed; typically no more than two years for people who don’t become clients
• →Records connected to client work — up to six years after the engagement ends, in line with the limitation period for legal claims
• →Analytics data — up to 12 months

Your rights

Under UK GDPR, you have the right to:

• →Access the personal data we hold about you
• →Correct data that is inaccurate or incomplete
• →Have your data deleted
• →Restrict or object to how we use it — including any use based on legitimate interests
• →Receive a copy of data you’ve given us in a portable format
• →Withdraw consent at any time, where we rely on consent (such as analytics cookies)

Exercising your rights and complaints

Email hello@kefilab.com and we’ll respond within 30 days. If you’re not happy with how we handle your data, you also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) — visit ico.org.uk or call 0303 123 1113.

Contact

Kefilab, 301 Bath Road, Hounslow, London TW3 3DB, United Kingdom. ICO registration reference: ZC207164. hello@kefilab.com