Privacy Policy

Last updated: January 2026

Who we are

kupu is a WordPress development agency based in Worcestershire, UK. Our website address is: https://kupu.co.uk

We’re committed to protecting your privacy and being transparent about the personal data we collect and how we use it.

Contact details:

  • Email: hello@kupu.co.uk

What personal data we collect and why

Information you give us directly

Contact forms When you contact us through our website forms, we collect:

  • Your name
  • Email address
  • Phone number
  • Any information you include in your message

Why we collect it: To respond to your enquiry, provide quotes, and discuss potential projects.

Legal basis: Legitimate interests (responding to your enquiry) or contract (if discussing a project).

How long we keep it:

  • Active enquiries: Until project is complete or enquiry is closed
  • Unsuccessful enquiries: 12 months (in case you return)
  • Client data: At least 6 years after project completion (for accounting and legal requirements)

Information we collect automatically

Website analytics We use Google Analytics to understand how visitors use our website. This includes:

  • Pages visited
  • Time spent on site
  • Browser type and device
  • General location (city/region level, not your exact address)
  • How you found our site (e.g., Google search, direct link)

Why we collect it: To improve our website and understand what content is useful.

Legal basis: Legitimate interests (improving our services).

Your control: You can opt out via our cookie banner or through browser settings.

WordPress cookies Our website uses cookies for basic functionality:

  • Remembering if you’re logged in (if we give you access to project areas)
  • Temporary session data

Why we need them: Essential for the website to work properly.

Legal basis: Strictly necessary (the website won’t function without them).

Information from third parties

Hosting provider (SiteGround) Our website is hosted by SiteGround. They may collect:

  • IP addresses
  • Server logs (for security and performance)

Why they collect it: To keep the website secure and running smoothly.

Their policy: https://www.siteground.com/privacy.htm

HubSpot CRM If you become a client or enquire about our services, we store your contact details in HubSpot (our CRM system) to manage the relationship.

Their policy: https://legal.hubspot.com/privacy-policy

Who we share your data with

We don’t sell or rent your personal information. Ever.

We only share data with:

Service providers:

  • SiteGround (website hosting)
  • HubSpot (client relationship management)
  • Google Analytics (website statistics)
  • Accountancy software (invoicing and tax compliance)

Legal requirements: We may disclose your information if required by law or to protect our legal rights.

Project delivery: If you become a client, we may need to share relevant information with:

  • Freelance designers or developers working on your project (under confidentiality agreements)
  • Third-party services you ask us to integrate (e.g., payment processors, CRM systems)

We’ll always tell you if we need to share your data for project delivery.

International transfers

Your data is stored in the UK and EU. If we use services that process data outside the UK/EU (like Google Analytics), they comply with UK GDPR requirements through:

  • Adequacy decisions
  • Standard Contractual Clauses
  • Other approved transfer mechanisms

Your rights

Under UK GDPR, you have the right to:

Access – Request a copy of the personal data we hold about you

Rectification – Ask us to correct inaccurate information

Erasure – Request deletion of your data (in certain circumstances)

Restriction – Ask us to stop processing your data (in certain circumstances)

Portability – Receive your data in a machine-readable format

Object – Object to processing based on legitimate interests

Withdraw Consent – If we’re relying on consent, you can withdraw it anytime

To exercise these rights, contact us at hello@kupu.co.uk

We’ll respond within one month. If your request is complex or numerous, we might extend this (we’ll tell you if we need to).

Security

We take security seriously:

  • SSL/TLS encryption for data in transit
  • Regular backups
  • Strong passwords and access controls
  • Regular security updates for WordPress and plugins

However, no internet transmission is completely secure. We do our best, but can’t guarantee absolute security.

Children’s privacy

Our services aren’t aimed at children. We don’t knowingly collect data from children. If you’re a parent and believe we’ve collected your child’s information, contact us immediately.

Changes to this policy

We may update this policy occasionally. We’ll post changes here with a new “Last updated” date. For significant changes, we’ll notify existing clients by email.

Contact us

Questions about this privacy policy? Contact us:

  • Email: hello@kupu.co.uk

Complaints

If you’re unhappy with how we’ve handled your data, you can complain to:

Information Commissioner’s Office (ICO)

  • Website: https://ico.org.uk/make-a-complaint/
  • Helpline: 0303 123 1113
  • Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

We’d appreciate the chance to resolve any concerns directly first, so please contact us before escalating to the ICO.