Legal

Privacy Policy

1. Who we are

Kairoflow Solutions ([Company legal name], [registration number]) is an AI automation and software services business with offices in Sydney, Australia ([Australian entity name], ABN [number], Unit 13/11 Croydon St, Lakemba NSW 2195) and Dhaka, Bangladesh ([Bangladesh entity name], trade licence [number], Gulshan, Dhaka). In this policy, "we", "us" and "our" mean Kairoflow Solutions. You can contact us about privacy at [privacy@yourdomain.com].

2. What we collect

We collect only what we need to respond to you and deliver our services:

  • Contact details you give us, such as your name, company, work email and website.
  • Details you enter in our proposal builder, such as your platform, tools, needs, timeline and notes.
  • Booking details, such as your chosen audit time and time zone.
  • Messages you send us by email, chat or WhatsApp.
  • Basic usage data, such as pages visited and device type, if you accept analytics cookies.
  • Business data you share with us during a project, such as store, CRM or support data, which we handle as described in our project agreement.

3. How we use it

  • To reply to enquiries, prepare proposals and book audit calls.
  • To scope, build, test and support the systems you ask us to build.
  • To send service messages about your project.
  • To improve our website and services.
  • To meet legal, tax and accounting duties.

4. Legal bases (UK and EU visitors)

Where UK GDPR or EU GDPR applies, we rely on your consent (for example analytics cookies and marketing emails), steps taken at your request before a contract and performance of a contract (proposals, bookings and projects), our legitimate interests (running and improving our business) and legal obligations.

5. Who we share it with

We do not sell your personal information. We share it only with service providers who help us run our business, under contracts that protect it:

  • Email and calendar: [e.g. Google Workspace].
  • Website hosting and forms: [provider].
  • CRM and automation tools: [e.g. HubSpot, n8n, Make].
  • Payment and accounting: [provider].
  • Professional advisers and authorities where the law requires it.

6. International transfers

Our team works from Australia and Bangladesh, and our providers may store data in other countries. When we transfer personal information across borders, we use appropriate safeguards such as contractual commitments and choose providers with recognised security standards.

7. How long we keep it

We keep enquiry and proposal data for up to [24 months] unless you become a client. Client project data is kept for the length of the project and [12 months] after, unless our agreement says otherwise or the law requires longer. You can ask us to delete your data sooner.

8. Your rights

Depending on where you live, you can ask to access, correct, delete or receive a copy of your personal information, object to or restrict how we use it, and withdraw consent at any time. This includes rights under UK and EU GDPR, the Australian Privacy Principles and US state laws such as the California Consumer Privacy Act. Email [privacy@yourdomain.com] and we will reply within 30 days. You can also complain to your local data protection authority.

9. Security

We protect information with access controls, encryption in transit, least-access API keys and regular reviews. We do not use your customers' data to train public AI models. No system is perfectly secure, and we will tell you promptly if a breach affects your data.

10. Cookies

We use essential cookies to run the site and, only with your consent, analytics cookies to understand how it is used. You can change your choice at any time through [cookie settings link].

11. Children

Our services are for businesses and are not directed at children under 16. We do not knowingly collect their personal information.

12. Changes to this policy

We may update this policy from time to time. We will post the new version on this page with a new "last updated" date, and tell clients about significant changes.

13. Contact

Sydney office: [Australian entity name], Unit 13/11 Croydon St, Lakemba NSW 2195, Australia, +61 414 963 498. Dhaka office: [Bangladesh entity name], Gulshan, Dhaka, Bangladesh, +880 1789 367999. Email: [privacy@yourdomain.com].