Legal

Privacy Policy

How we collect, use, and protect your personal data.

Last updated: 1 March 2025

1. Who We Are

Kelvirox is a UK-based digital platform operated from 8 S Cres Rd, Ardrossan, KA22 8DU, United Kingdom. We provide interactive gaming skill assessments and structured performance tests for informational purposes. References to "we", "us", or "our" in this policy refer to Kelvirox.

For data protection queries, you can contact us at [email protected] or by post to the address above.

2. What Data We Collect

We collect the following categories of personal data:

  • Contact data: Name, email address, and any information you voluntarily provide when submitting our contact form.
  • Assessment data: Response data from assessments you complete on our platform. This is collected anonymously and is not linked to identifiable personal information unless you create an account.
  • Usage data: Pages visited, time on site, browser type, and approximate geographical location (country-level). Collected via analytics tools subject to cookie consent.
  • Cookie data: Session cookies and optional analytics cookies as described in our Cookie Policy.

We do not collect sensitive personal data, financial information, or data relating to children under 13 years of age. If you believe a child under 13 has submitted data to us, please contact us immediately and we will delete it.

3. How We Use Your Data

We use personal data for the following purposes:

  • Responding to enquiries submitted via our contact form (legal basis: legitimate interests).
  • Improving our assessment tools through anonymised, aggregated analysis of response data (legal basis: legitimate interests).
  • Understanding how users navigate our platform to improve the site experience (legal basis: consent, where analytics cookies are accepted).
  • Complying with legal obligations where required.

We do not use your data for automated decision-making or profiling that produces legal or significant effects on individuals.

4. Data Sharing and Third Parties

We do not sell, rent, or trade personal data to third parties. We may share data with:

  • Hosting and infrastructure providers who process data on our behalf under data processing agreements.
  • Analytics service providers, subject to your cookie consent choices.
  • Law enforcement or regulatory authorities if required by law.

All third-party processors we use are required to handle data in compliance with UK GDPR.

5. Data Retention

Contact form submissions are retained for up to 24 months and then securely deleted. Anonymised assessment data used for aggregate benchmarking may be retained indefinitely as it cannot be used to identify individuals. Cookie-based data is retained for the periods specified in our Cookie Policy.

6. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

  • Right of access: You can request a copy of personal data we hold about you.
  • Right to rectification: You can ask us to correct inaccurate data.
  • Right to erasure: You can request deletion of personal data in certain circumstances.
  • Right to restriction: You can ask us to restrict processing of your data while a complaint is resolved.
  • Right to data portability: Where applicable, you can request a machine-readable copy of your data.
  • Right to object: You can object to processing based on legitimate interests.
  • Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at [email protected]. We will respond within one calendar month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

7. Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. However, no internet transmission is entirely secure, and we cannot guarantee the absolute security of data in transit.

8. International Transfers

We store and process data within the United Kingdom and European Economic Area. Where any transfer outside these areas occurs (for example, through third-party services), we ensure appropriate safeguards are in place in accordance with UK GDPR.

9. Changes to This Policy

We may update this Privacy Policy periodically. Where changes are material, we will post a notice on our website. The date at the top of this page indicates when the policy was last revised. Continued use of our platform after changes constitutes acceptance of the revised policy.

10. Contact

For any privacy-related queries, contact us at [email protected] or at: Kelvirox, 8 S Cres Rd, Ardrossan, KA22 8DU, United Kingdom.