Skip to content
KavanaStock
← Back to KavanaStock

GDPR & Data Protection

Last updated: April 2026

KavanaStock is committed to protecting your personal data and complying with the UK GDPR and Data Protection Act 2018. This page explains your rights and how your data is handled.


1. Who We Are

KavanaStock is operated by Magdalena Piotrowska of 80 Rippleton Road, Manchester, M22 9UW, who is the data controller for your personal data. You can contact us at kavanastock@gmail.com.

2. Your Rights Under GDPR

You have the following rights regarding your personal data:

  • Right to access - You can request a copy of your data.
  • Right to rectification - You can correct inaccurate data.
  • Right to erasure - You can request deletion of your data.
  • Right to restrict processing - You can limit how your data is used.
  • Right to data portability - You can request your data in a transferable format.
  • Right to object - You can object to certain uses of your data.
  • Right to withdraw consent - Where we rely on your consent (e.g. optional emails, analytics cookies), you can withdraw it at any time.

3. Legal Basis for Processing

We process your data under the following legal bases:

  • Contract - To provide access to your account and platform features.
  • Legitimate interests - To improve the platform and ensure security.
  • Legal obligation - To comply with applicable laws, including tax and accounting requirements.
  • Consent - For optional features such as marketing emails and analytics cookies.

4. Data Retention

We retain your data only as long as necessary to provide the service.

If you delete your account, your personal data will be removed within a reasonable timeframe, except for records we're required to retain for legal reasons - for example, billing and transaction records may be kept for up to 6 years to meet UK tax and accounting obligations.

5. Data Security

We take reasonable technical and organisational measures to protect your data, including:

  • Secure password hashing
  • Protected access to user data
  • Use of trusted third-party services (e.g. Stripe)

6. Third-Party Processors

We use trusted third-party services to operate the platform:

  • Stripe - for subscription payments and billing
  • Hostinger - for hosting and infrastructure
  • Google Analytics - for understanding platform usage, only after you accept analytics cookies

These providers process data in accordance with their own privacy policies.

7. International Data Transfers

Some of our service providers (for example, Stripe) may process data outside the UK or EEA. Where this happens, we rely on legally approved safeguards - such as Standard Contractual Clauses / the UK International Data Transfer Addendum, or transfers to countries covered by a UK adequacy decision - to keep your data protected to UK standards.

8. How to Exercise Your Rights

To request access, correction, deletion, or anything else covered above, please contact: kavanastock@gmail.com. We'll normally respond within one month.

9. Complaints

If you believe your data is being misused, you have the right to lodge a complaint with your local data protection authority. In the UK, this is the Information Commissioner's Office (ICO), at ico.org.uk. We'd appreciate the chance to address your concern directly first, but you're not required to contact us before contacting the ICO.

10. Updates

We may update this GDPR notice from time to time. If we make a material change, we'll ask you to actively review and re-accept the updated notice before you can continue using the platform - simply continuing to use the platform is not treated as acceptance of a material change.