Privacy Policy

1. Who we are

KoraKit (“we”, “us”, “our”) is an online platform providing free business startup tools for entrepreneurs and small businesses in the United Kingdom.

KoraKit is developed, owned and operated by Bristol Website Design Ltd, who act as the Data Controller for the purposes of UK data protection legislation.

For our company details and contact information, please visit:

https://bristol-website-design.co.uk/

If you have any questions regarding this Privacy Policy, you can contact us at info@korakit.com.

2. What data we collect

We only collect information that is necessary to provide and improve the KoraKit service.

This may include:

Account information

• First name
• Last name
• Email address
• Password (stored only as a secure hashed value)
• Business information

Company name

• Business industry
• Business location
• Website address
• Brand colours and other business preferences you choose to save

Optional saved payment information

If you choose to save your payment details for use with the Invoice Generator, we may securely store:

• Account name
• Sort code
• Account number
• Company billing details

This information is optional and is only stored to allow future invoices to be automatically pre-populated.

Usage information

We may collect technical information such as:

• IP address
• Browser type
• Device information
• Login history
• Pages and tools used

Communications

Any information you provide when contacting us.

3. What we do not store

We have intentionally designed KoraKit to minimise the amount of personal information we retain.

Unless we introduce additional features in future, we do not permanently store:

client details entered into the Invoice Generator
invoice line items
invoice descriptions
generated invoice content
Information entered into these tools is processed only for the purpose of generating the requested document and is not retained after generation.

Likewise, business plans, competitor analysis results and similar generated content are not retained unless you specifically save them in your account (if such functionality becomes available).

4. Legal basis for processing

We process your personal data on the following legal grounds under UK GDPR:

Contract: Processing necessary to deliver our services to you (Article 6(1)(b)).

Consent: Where you have opted in to marketing communications (Article 6(1)(a)). You may withdraw consent at any time.

Legitimate interests: To improve our platform, prevent fraud and ensure security (Article 6(1)(f)).

Legal obligation: Where we are required by law to retain or disclose data (Article 6(1)(c)).

5. How we use your data

To create and manage your account.

To provide, personalise and improve our services.

To send transactional emails (e.g. email verification, password resets).

To send marketing communications where you have opted in.

To monitor and analyse usage to improve the platform.

To detect, prevent and address security issues.

6. Data sharing

We do not sell, rent or trade your personal information.

KoraKit’s website, application, hosting infrastructure, databases and AI services are operated directly by Bristol Website Design Ltd.

We will only disclose personal information:

• Where required by law;
• Where necessary to establish, exercise or defend legal claims; or
• Where required to protect the security and integrity of our systems.

7. Data retention

We retain your information only while your account remains active.

You may permanently delete your KoraKit account at any time using the account settings.

Once an account is deleted, your personal information is removed from our active systems.

Any remaining copies contained within routine encrypted system backups are retained only for the duration of the applicable backup retention period before being automatically overwritten.

8. Your rights

Under UK GDPR, you have the right to:

Access your personal data.

Rectify inaccurate or incomplete data.

Erase your personal data (“right to be forgotten”).

Restrict or object to processing.

Data portability — receive your data in a structured, machine-readable format.

Withdraw consent at any time where processing is based on consent.

To exercise these rights, email us at info@korakit.com.

9. Cookies

We use cookies and similar technologies for authentication, analytics and to remember your preferences. For full details, see our Cookie Policy.

10. Security

We implement appropriate technical and organisational measures to protect your personal data, including encryption of passwords, secure HTTPS connections and regular security reviews.

We take the security of your information seriously.

We use appropriate technical and organisational measures to protect personal data, including:

• encrypted HTTPS connections;
• secure password hashing;
• restricted administrative access;
• server security monitoring;
• regular software updates; and
• secure hosting infrastructure operated by Bristol Website Design Ltd.

Where users choose to save company payment details for invoice generation, these details are stored securely and are used solely to pre-populate future documents.

11. International transfers

KoraKit is hosted and operated by Bristol Website Design Ltd.

We do not routinely transfer your personal information outside the United Kingdom.

Should this change in the future, we will ensure that any international transfers comply with applicable UK data protection legislation.

12. Changes to this policy

We may update this policy from time to time. We will notify you of significant changes by email or by posting a notice on our platform. The “last updated” date above indicates when this policy was last revised.

13. Contact & complaints

If you have questions or complaints about how we handle your data, please contact us at info@korakit.com.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection.