Legal

Privacy notice

How KloudForm Ltd handles personal data collected through this website, under the UK GDPR and the Data Protection Act 2018.

Draft — needs legal review. This page is a working draft that has not yet been reviewed by a qualified lawyer. Items marked [TODO] need to be confirmed before it is relied on.

Last updated: 20 October 2026 [TODO: confirm on publication]

Who we are

KloudForm Ltd (“KloudForm”, “we”, “us”) is a company registered in the UK, company number 11807615, and is the controller of the personal data described in this notice. Registered office: [TODO: registered office address]. ICO registration number: [TODO: confirm data protection fee registration].

Contact us about privacy at [email protected].

This notice covers this website only. Use of the KloudForm products is covered by the agreements and notices that come with them.

What we collect

DataSourceWhyLawful basis
Email address, and optionally your name, organisation, role and messageThe early-access form, or an email you send usTo reply to you and manage early accessLegitimate interests in responding to enquiries; steps prior to a contract where you ask to use the product
Which page you came from (for example “download”)The early-access formTo understand which pages lead to requestsLegitimate interests
IP address, browser details, requested URLs and timestampsOur hosting provider’s logsTo deliver and secure the websiteLegitimate interests in running a secure website

We ask you to confirm that we may contact you about early access. You can withdraw that at any time by emailing us, and we will stop contacting you. [TODO: confirm with counsel whether consent or legitimate interests is the primary basis for follow-up contact, and whether PECR applies to any marketing.]

Cookies and tracking

This website does not set cookies and does not use analytics or advertising trackers. [TODO: update if analytics are added.]

Who we share it with

We do not sell your personal data. We use these service providers (processors), who act on our instructions:

  • Cloudflare, Inc.: website hosting and delivery, and running the form endpoint.
  • Supabase, Inc.: database storage for early-access requests, hosted in the London (eu-west-2) region. [TODO: confirm project region.]
  • Google: web fonts are loaded from Google Fonts, so your browser sends your IP address to Google when pages load. [TODO: consider self-hosting fonts.]
  • Our email provider, when we correspond with you. [TODO: name provider.]

International transfers

Some providers may process data outside the UK. Where they do, we rely on UK adequacy regulations or the UK International Data Transfer Agreement or Addendum. [TODO: confirm for each provider.]

How long we keep it

We keep early-access requests for as long as we need them to manage early access, and for no more than [TODO: retention period, for example 24 months] after our last contact with you, unless you become a customer. Hosting logs are kept according to our hosting provider’s standard retention.

Your rights

Under the UK GDPR you have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing, to data portability, and to withdraw consent where we rely on it. To exercise any of these, email [email protected]. We will respond within one month.

If you are unhappy with how we handle your data, please contact us first. You also have the right to complain to the Information Commissioner’s Office (ICO): ico.org.uk/make-a-complaint, telephone 0303 123 1113.

Security

Early-access requests are stored in a database that is not publicly readable and is written only by our server-side form handler. Connections to this website are encrypted.

Changes

We will post any changes to this notice on this page and update the date above.