1. Who we are
This website, katoai.com, is operated by Kaze Digital & Data Ltd ("Kaze", "we", "us"), the company behind the KATO AI platform. We are the data controller for the personal data described in this policy.
- Kaze Digital & Data Limited, a private limited company registered in England and Wales, company number 10295168
- Registered office: Unit 10 Homelands Commercial Centre, Vale Road, Bishops Cleeve, Cheltenham, Gloucestershire, GL52 8PX, England
- ICO registration number: ZB266837
- Privacy contact: hello@katoai.com
2. What we collect
Information you give us. If you email us, we receive your name, email address, organisation and anything else you choose to include, so that we can reply.
Website analytics (only with your consent). If you accept analytics cookies, we collect information about how you use the site: pages visited, time on page, how you arrived, approximate location (country or city level), device, browser and operating system. We use two tools for this:
- Google Analytics 4, provided by Google Ireland Limited / Google LLC, which measures site traffic and usage. We do not use Google Analytics for advertising, and Google signals and ad personalisation are not enabled.
- Trace (usetrace.io), which shows us how visitors move through the site: the pages viewed, the channel a visit arrived from (for example search, LinkedIn or a campaign link) and whether the visit led to an enquiry. It uses a random identifier to link visits from the same browser. Trace does not collect names, email addresses or device fingerprints, and its data is stored in London.
If you reject analytics cookies, or make no choice, neither tool is loaded.
Technical data. Like any website, our hosting provider (Microsoft Azure) receives your IP address and basic request information in order to deliver pages to you and keep the service secure. The site's font (Poppins) is loaded from Google Fonts, which means your browser contacts Google's servers and shares your IP address with Google when a page loads.
3. How and why we use it
| Purpose | Data | Lawful basis (UK GDPR) |
|---|---|---|
| Replying to your enquiry and any follow-up discussion | Contact details, message content | Legitimate interests in responding to business enquiries; or steps before entering a contract |
| Understanding and improving how the site is used | Analytics data (Google Analytics, Trace) | Consent, which you can withdraw at any time |
| Hosting, delivering and securing the site | IP address, request logs | Legitimate interests in operating a secure website |
We do not sell personal data, and we do not make decisions about you based solely on automated processing.
4. Cookies and similar technologies
When you first visit, we ask whether you accept analytics cookies. You can change your choice at any time using Cookie settings, which is also linked in the footer of every page.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| kato-cookie-consent | katoai.com | Essential. Remembers your cookie choice (browser local storage, not a cookie). | 6 months |
| _ga | Google Analytics | Analytics. Distinguishes unique visitors. | 2 years |
| _ga_<ID> | Google Analytics | Analytics. Keeps track of your session. | 2 years |
| _tr | Trace | Analytics. Holds a random identifier so visits from the same browser can be linked into one journey. First-party; removed if you withdraw consent. | 13 months |
Analytics cookies are set only after you accept them. If you later withdraw consent, we stop loading the analytics tools and delete the analytics cookies we can reach on this domain.
5. Who we share it with
We share personal data only with service providers who process it on our behalf, under contract, and only for the purposes above:
- Google: Google Analytics (with consent) and Google Fonts.
- Trace (usetrace.io): visitor journey analytics (with consent).
We may also disclose information where the law requires it, or to protect our rights, property or safety.
6. International transfers
Trace stores its data in the UK (London). Google, and some of our other providers, may process data outside the UK, including in the United States. Where they do, we rely on the UK's adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework, where the provider is certified) or the ICO's International Data Transfer Agreement / Addendum to protect your data.
7. How long we keep it
- Enquiries and correspondence: up to 2 years after our last contact, unless we go on to work together.
- Google Analytics data: 14 months, after which it is deleted automatically.
- Trace data: identifiable journey data is kept for up to 12 months and then deleted; after that only anonymised totals are kept. The
_trcookie expires after 13 months. - Hosting logs: kept by our hosting provider for a limited period for security and diagnostics.
8. Your rights
Under UK data protection law you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data deleted;
- restrict or object to our processing;
- data portability, where applicable;
- withdraw consent at any time, for example using Cookie settings.
To exercise any of these rights, email hello@katoai.com. We will respond within one month.
If you are unhappy with how we have handled your data, please contact us first. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
9. Security
We use appropriate technical and organisational measures to protect personal data. Kaze is certified to ISO 27001 and Cyber Essentials Plus.
10. Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed. If we make significant changes, for example adding a new analytics tool, we will ask for your cookie consent again.