Privacy

keepr is a trading name of Cardiff Giant Ventures Limited, company number 12322092. Registered office: Unit 12 Green Park, Coed Cae Lane Industrial Estate, Pontyclun, CF72 9GP. Contact us at hello@keeprhq.com. We decide how the information below is used, except where we say we're doing it for a business we work for.

We look up owner-run local businesses using public information, such as their website, social media pages, listings and Companies House. We use an AI research tool that searches the web for us. We keep the business name, what it does, where it works, its public contact details, photos it has published, and where we found each fact. For a sole trader, some of this is about you as a person.

We do this because we think the business may want to see what we've made. Our lawful basis is legitimate interests [to confirm: our legitimate interests assessment is being reviewed]. We only use what the business has made public, and we never put anything on a concept that we haven't checked.

We only email a business if it's a limited company, or if you've told us you're happy to hear from us. We keep a note of calls and visits, and whether a showroom we sent was opened.

If a business tells us to stop, we stop straight away, take its showroom down and stop using what we hold. It's then deleted like any business that doesn't buy (see How long we keep it). We keep a scrambled (hashed) copy of its email and phone number, so we don't contact it again by mistake. You can ask us to delete everything sooner.

If you ask us to make concepts, we keep what you tell us: your business, what you do, your website and how to reach you. When a showroom is opened, we record that it was viewed and which concepts were looked at, so we know whether it's useful. We use these only to make and send your showroom and follow it up.

When you buy, we keep your name, email, what you bought and your payment status. Card details go to Stripe and never reach us. We keep the details and photos you send us for your site, and a record of the changes you ask for and approve.

We keep a record of important actions, such as approvals, payments and changes to who can see your account, so we can show what happened and when.

When someone sends an enquiry through a website we've made, we store it for the business that owns the website and show it in their app. If the business has Maintain it, our assistant may use AI to draft a reply or reminder, which the business checks before it's sent. We do all this on that business's behalf, as its processor. It's their information, and their own privacy notice applies.

We use a small number of providers to run keepr:

• Supabase, which hosts our database and files in London.
• Stripe, which takes payments.
• Cloudflare and Lovable, which host websites.
• Resend, which sends our emails.
• Anthropic, whose AI researches businesses, writes wording for concepts and drafts emails and replies. We never send it anything we don't need to, and it doesn't use what we send to train its models.
• GitHub, which runs the jobs that make launch videos from screenshots.

Some of these providers are in the United States, or may handle information there. When that happens, it's protected by the UK's data adequacy rules for the US or by the UK's standard contract terms (the International Data Transfer Agreement or Addendum).

We don't sell information, and we don't use it for advertising.

We don't use advertising or tracking cookies. When you sign in, your browser keeps you signed in. Our website loads fonts from Google Fonts, so your browser connects to Google when a page opens.

• Businesses that don't buy: 12 months after we last contacted them, then deleted, except the scrambled copy that stops us contacting them again.
• Customers: your account, site files and details for 90 days after you leave, so you have time to take everything with you. Then deleted.
• Invoices and payment records: 6 years, because the law says so.
• Enquiries to our customers' websites: while the customer's account is open, then 90 days.

You can ask to see what we hold about you, to correct it, to delete it, or to stop us using it. Email hello@keeprhq.com and we'll reply within a month. You can also complain to the Information Commissioner's Office at ico.org.uk. Our ICO registration number is [to confirm].