Privacy Policy

This Privacy Policy explains how Kalduna (“Kalduna”, “we”, “us” or “our”) collects, uses, shares and protects your personal data when you use the Kalduna website at www.kalduna.com and related services (the “Platform”). It should be read together with our Terms & Conditions. By using the Platform you agree to the practices described here.

1. Data we collect

We collect the following categories of data:

• Account data — your name, email address, phone or WhatsApp number, password (stored in encrypted form), role (Client or Practitioner) and preferred language.
• Practitioner profile data — the information you choose to publish, such as your biography, disciplines and specialties, certifications, pricing, locations, service area, availability, photographs and links.
• Activity data — reviews you write, practitioners you save, messages or enquiries you send, and requests you submit.
• Technical and usage data — your device, browser type, IP address, pages viewed and interactions, collected through cookies and similar technologies.

2. How we use your data

We use personal data to:

• create and manage your account and provide the Platform;
• publish Practitioner profiles and connect Clients with Practitioners;
• send service emails such as confirmations and password resets;
• operate, maintain, secure and improve the Platform and prevent fraud and abuse;
• promote the Platform, including using Practitioner profiles and photographs in marketing where you have granted permission; and
• comply with our legal obligations.

3. Legal bases for processing

Where data protection law (including the EU/UK GDPR) applies, we rely on the following legal bases: performance of our contract with you (to provide the Platform); your consent (for example, for certain marketing uses and non-essential cookies, which you may withdraw at any time); our legitimate interests (to operate, secure and improve the Platform); and compliance with legal obligations.

4. How we share your data

Practitioner profile information is, by its nature, published publicly on the Platform. We also share data with trusted service providers who help us run the Platform, including:

• our hosting and database provider (Supabase) and our website host (Vercel);
• our email delivery provider (Resend);
• analytics and mapping providers (such as Google Analytics and Google Maps).

These providers process data on our behalf under appropriate safeguards. We do not sell your personal data. We may also disclose data where required by law or to protect our rights, users or the public.

5. Cookies and analytics

We use cookies and similar technologies to keep you signed in, to remember your preferences and to understand how the Platform is used through analytics. You can control cookies through your browser settings; disabling some cookies may affect how the Platform works.

6. International transfers

Because our service providers operate globally, your data may be transferred to and processed in countries outside your own, including outside the European Economic Area. Where this happens, we take steps to ensure your data continues to be protected by appropriate safeguards.

7. Data retention

We keep personal data for as long as your account is active and as needed to provide the Platform, and afterwards only as long as necessary for legitimate business or legal purposes, after which it is deleted or anonymised.

8. Your rights

Depending on your location, you may have the right to access, correct, update or delete your personal data, to restrict or object to certain processing, to withdraw consent, and to request a copy of your data in a portable format. You can exercise most of these rights from your account settings or by contacting us. You also have the right to lodge a complaint with your local data protection authority.

9. Security

We use technical and organisational measures designed to protect your data, including encryption of passwords and access controls. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

10. Children

The Platform is not intended for anyone under 18, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can remove it.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, where changes are material, take reasonable steps to notify you.

12. Contact

For any questions about this policy or your personal data, contact us at hello@kalduna.com.