Privacy Policy

Last updated 2 September 2026. This policy describes what the website actually does today. If we change how we handle your information, we will change this page and update the date.

Who we are

Kalvaro is a managed introduction service. Property owners tell us about a project, we review it, and we introduce a small number of professionals we believe are genuinely suited to the work. We do not carry out the work ourselves.

For the purposes of UK data protection law, Kalvaro is the controller of the personal information described in this policy. That means we decide what is collected and why.

Email

hello@kalvaro.co.uk

Telephone

01202 788336, Monday to Sunday, 08:00 to 20:00

Company number

17436078, registered in England and Wales

Registered office

71-75 Shelton Street, Covent Garden, London, WC2H 9JQ

What we collect, and why

If you send us a project enquiry

Through the Discuss My Project form we collect the type of work you are planning, a description of the project, your postcode, optionally your address, the property type, your budget range and timeframe, any answers to the follow-up questions for that service, and your name, email address, telephone number and how you would prefer to be contacted.

We use this to understand the project properly before we introduce anyone, and then to make the introduction.

If you apply to become a partner

Through the Become a Partner application we collect your business name, company number where you have one, the name of the owner or director, email address, telephone number, website and any other links, your base postcode, the areas you cover and how far you travel, the services you offer, your public liability insurer and policy expiry date, any accreditations, a description of your business, and the references you choose to give us.

We use this to assess your application. Some of it is verified against public registers, such as Companies House and the register of the accreditation body concerned.

If you send us a general message

Through the Contact form we collect your name, email address, optionally your telephone number, a subject and your message.

Information we do not collect

We do not collect special category data, and we ask you not to include it. In particular, please do not describe a health condition or a disability in a project description. If an adaptation is needed, say so in general terms and we will discuss it with you directly.

We do not use analytics, advertising or tracking of any kind. Nothing on this site profiles you, and there is no automated decision-making.

Our lawful basis

• Project enquiries. Your consent, which you give by ticking the box on the form. We record the consent, the wording you were shown and the time you gave it. You can withdraw it at any time, which will not affect anything done before you withdrew it.
• Partner applications. Steps taken at your request before entering into a contract, and our legitimate interests in checking that the businesses we introduce are insured, credentialled and genuine.
• General messages. Your consent, given when you send the message.
• Keeping records of what we did. Our legitimate interests in being able to show how an introduction came about, and in defending a claim if one is made.

Who we share it with

The professionals we introduce

This is the important one, so we will be plain about it. When we make an introduction we pass your project details and your contact details to a small number of selected professionals so they can contact you. We only ever do this after a person here has reviewed your enquiry, and only to the specific businesses we have chosen for your project. We do not sell enquiries, we do not broadcast them, and we do not pass your details to anyone who is not being introduced to you.

Service providers

We use a small number of providers to run the site, and each only processes what it needs to:

• Vercel hosts the website and its request logs.
• FormSubmit takes what you typed into the form and forwards it to our inbox as an email. It does not keep a copy.
• Microsoft provides our email, so that is where your enquiry is held once it arrives.

Each acts as a processor on our instructions and may not use your information for anything of its own.

Where your information is held

Some of these providers are US companies and may process data outside the UK. Where that happens, the transfer is covered by the UK International Data Transfer Addendum to the European Commission's standard contractual clauses, or another lawful transfer mechanism.

Anyone else

We will disclose information if the law requires it, or to establish or defend a legal claim. Nothing else.

If you are named as a referee

Partner applicants give us contact details for referees. If you have been named as one, we hold your name and contact details only for as long as it takes to assess that application, we use them only to contact you about it, and our lawful basis is our legitimate interests in verifying a business's track record. You can ask us to remove your details at any time using the contact details above.

How long we keep it

What you send through this site reaches us as an email and is held in our mailbox. We review and clear it to these periods, counted from the date you contacted us:

• Project enquiries: 24 months.
• Partner applications that are declined: 12 months, so we can explain the decision if you ask.
• Partner applications that are accepted: for as long as the partnership continues, and 6 years afterwards, because we may need to answer for an introduction we made.
• General messages: 12 months.

If we need to keep something longer because of a legal obligation or an active dispute, we keep only what that requires. You can ask us to delete your information sooner, and we will unless one of those reasons applies.

How we protect it

The site is served only over an encrypted connection, and your submission is encrypted in transit on its way to our mailbox. That mailbox is protected by a password and multi-factor authentication, and access is limited to the people who need it to run the service.

No system is perfectly secure, and we will not pretend otherwise. If a breach occurs that is likely to result in a risk to your rights, we will report it to the Information Commissioner within 72 hours and tell you directly where the risk is high.

Your rights

Under UK data protection law you have the right to:

• ask what we hold about you, and get a copy of it
• have inaccurate information corrected
• ask us to delete it
• ask us to restrict how we use it
• object to us using it where we rely on legitimate interests
• receive it in a portable format, or have it sent to someone else
• withdraw your consent where consent is our basis

Email hello@kalvaro.co.uk and we will respond within one month. There is no charge.

One thing worth knowing: once we have introduced you to a professional, that business holds your details as a controller in its own right. We can delete our copy, but you will need to ask them about theirs. We will tell you exactly who was introduced so you know who to ask.

Complaints

If you are unhappy with how we have handled your information, please tell us first and we will try to put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.

Cookies and local storage

This site sets no cookies at all. It stores three small items in your own browser, none of which identifies you or leaves your device. The cookie policy lists each one and explains how to clear them.