Privacy Policy

Last updated: 15 July 2026.

Kovara Group is the controller for personal data collected through this website and related enquiry channels unless another Kovara contracting entity or client agreement states otherwise. You can contact us about privacy matters at info@kovaragroup.com.

If you are in the United Kingdom, you also have the right to complain to the Information Commissioner's Office. If you are outside the UK, you may contact your local data protection authority.

We collect personal data that you give us directly, data generated by website use, and limited technical data needed to keep the website secure and reliable.

• Contact and business details: name, work email, telephone number, company, role and enquiry type.
• Message and proposal details: information you choose to provide in contact, demo, proposal, newsletter or career forms, including uploaded supporting files where enabled.
• Technical and security data: IP address, browser type, device data, server logs, form security signals and spam-prevention results.
• Analytics data: page views, approximate location, device/browser information and performance data, only where you consent to analytics cookies or similar technologies.
• Recruitment data: CVs, portfolio links, work history and related information where you apply for a role.

We only use personal data where we have a lawful basis under UK GDPR, EU GDPR or other applicable privacy laws.

• Responding to enquiries: to answer questions, route demo requests, prepare proposals and follow up with you. The lawful basis is legitimate interests, pre-contract steps, or contract performance.
• Providing services: to scope, deliver, support and improve software, AI, SaaS, ControlOps or construction services. The lawful basis is contract performance and legitimate interests.
• Security and fraud prevention: to protect the website, verify form submissions, prevent spam and maintain audit logs. The lawful basis is legitimate interests and legal obligations.
• Marketing and newsletters: to send updates where you have consented or where lawful soft opt-in rules apply. You can opt out at any time.
• Analytics and improvement: to understand website performance and content effectiveness. We use Google Analytics only after consent.
• Recruitment: to assess applications and communicate about roles. The lawful basis is pre-contract steps, legitimate interests and legal obligations.

We do not sell personal data. We may share it with trusted suppliers and professional advisers where needed to operate the website, manage enquiries, deliver services, host infrastructure, send email, run analytics, process files, prevent abuse, comply with law, or protect legal rights.

Suppliers are required to protect personal data, use it only for agreed purposes and follow appropriate security and confidentiality obligations. Examples may include website hosting, email hosting, analytics, CRM, cloud infrastructure, security tooling, accountancy, legal advisers and delivery partners.

Where personal data is transferred outside the UK, EEA or your local jurisdiction, we use appropriate safeguards where required. These may include adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to EU Standard Contractual Clauses, EU Standard Contractual Clauses, transfer risk assessments and supplier due diligence.

We keep personal data only for as long as reasonably necessary for the purpose it was collected, including legal, accounting, security and dispute-resolution requirements.

• Website enquiries and proposal requests are normally kept for up to 24 months after the last meaningful contact unless they become part of a client relationship.
• Client, supplier and project records may be kept for up to 7 years or longer where required by law or contract.
• Recruitment records are normally kept for up to 12 months unless you consent to a longer talent-pool period or law requires otherwise.
• Security logs are normally kept for a limited period appropriate to the risk and operational need.
• Analytics data retention follows the Google Analytics settings used by Kovara and applies only after consent.

Depending on your location and the circumstances, you may have rights to access, correct, erase, restrict or object to use of your personal data, request portability, withdraw consent, object to direct marketing and complain to a supervisory authority.

To exercise a right, contact info@kovaragroup.com. We may need to verify your identity before acting on a request.

We use technical and organisational measures designed to protect personal data, including access controls, encryption in transit, secure hosting, validation, rate limiting and monitoring. No online system can be guaranteed completely secure.

Cookies and similar technologies are explained in our Cookie Policy. Non-essential analytics cookies are not used until you consent.

We may update this Privacy Policy as services, laws or processing activities change. The latest version will be published on this page.