Privacy Policy

Effective date: 15/10/2025

This website (the “Application”) collects some Personal Data from its Users. The following explains what information we collect, how it is used, and your rights.

Owner and Data Controller

Kwame & Co.
London, United Kingdom
Email: privacy@kwameand.co

Types of Data Collected

Among the types of Personal Data this Application collects, by itself or through third parties, are:

  • Usage Data
  • Device and browser information
  • Email address, first name, last name, company name, website (when provided via forms)

Complete details on each type of Personal Data collected are provided in the relevant sections of this policy. Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically when using this Application.

Unless stated otherwise, all Data requested by this Application is mandatory, and failure to provide it may make it impossible to provide our services.

Mode and Place of Processing the Data

Methods of Processing
The Owner takes appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of the Data. Processing is carried out using computers and IT tools following organizational procedures strictly related to the stated purposes.

Place
Data is processed at the Owner's offices and through third-party providers (Webflow, Dubsado, Plausible Analytics, and Google Search Console) in their respective hosting locations.

The Purposes of Processing

Data concerning the User is collected to allow the Owner to:

  • Host and operate the website
  • Respond to contact or client enquiries
  • Analyse web traffic and improve website performance
  • Maintain search visibility and monitor site health via Google Search Console

Detailed Information on Processing of Personal Data

Platform Services and Hosting

Webflow (Webflow, Inc.)

Webflow is the platform that hosts and runs this website. Webflow may process limited technical data to deliver the website to visitors.

Personal Data processed: various types of data as specified in Webflow’s privacy policy (such as IP address and browser data).
Place of processing: United States.
Privacy Policy: https://webflow.com/legal/privacy

Contacting the User

Client Intake, Proposals, Scheduling and Contracts (Dubsado)

We use Dubsado to manage enquiries, proposals, questionnaires, scheduling, contracts, and invoices. When you submit a client form, we process the information you provide to respond to your enquiry and, if applicable, to deliver services.

Personal Data processed: name; email address; phone number (if provided); company name; website; project details and messages; preferred dates/availability; files and attachments you upload; billing address and invoice details (if engaged); contract signatures; IP address and timestamps for audit/security.
Legal bases: pre‑contractual steps and contract performance (Article 6(1)(b)); compliance with legal obligations related to accounting and tax (Article 6(1)(c)); legitimate interests in responding to enquiries and managing client relationships (Article 6(1)(f)).
Place of processing: United States (Dubsado, Inc.). International transfers are safeguarded by Standard Contractual Clauses (SCCs) and, where applicable, the UK Addendum.
Retention: enquiries not resulting in a contract are retained for up to 24 months; if engaged, relevant records are kept for up to 6 years to meet accounting/tax requirements.
Privacy Policy: https://www.dubsado.com/privacy-policy

Analytics

Plausible Analytics (Plausible Insights OÜ)

We use Plausible Analytics to measure traffic and usage trends on our website. Plausible does not use cookies or persistent identifiers and collects only aggregated, anonymised usage data to help us improve the site.

Personal Data processed: page URL and title; referrer (if any); screen size; browser and device type; operating system; approximate location (country/region derived from IP, not stored); language; time of visit; pageview events. No personal identifiers or cross-site tracking are used.
Place of processing: European Union (servers in Germany).
Legal basis: legitimate interests in understanding site usage and improving content and performance (Article 6(1)(f) UK/EU GDPR).
Retention: aggregated analytics data retained for up to 24 months.
Cookies: Plausible does not set analytics cookies. No consent banner is required.
Privacy Policy: https://plausible.io/privacy

Search Performance Monitoring

Google Search Console

We use Google Search Console to monitor website visibility and performance in search results. This service does not collect personal data from visitors but provides the Owner with aggregated technical data about site performance.

Personal Data processed: none directly collected from site visitors.
Place of processing: United States / European Union (depending on user location).
Privacy Policy: https://policies.google.com/privacy

Data Retention

Personal Data is processed and stored as long as required for the purpose it was collected and may be retained longer where required by law. Once the retention period expires, Personal Data is deleted.

Legal Basis of Processing

Processing occurs when:

  • The User has given consent for one or more specific purposes.
  • Processing is necessary for the performance of a contract or to take steps prior to entering a contract.
  • Processing is necessary for compliance with legal obligations.
  • Processing is necessary for the Owner’s legitimate interests (such as improving site performance).

Users’ Rights under GDPR

Users have the right to:

  • Access, rectify, or erase their data
  • Object to processing
  • Restrict processing
  • Data portability
  • Withdraw consent at any time
  • Lodge a complaint with the relevant data protection authority

Requests can be made to privacy@kwameand.co. Requests are free and will be answered within one month.

Additional Information

Data may be used for legal purposes by the Owner in Court or in the stages leading to possible legal action arising from misuse of this Application.

Changes to This Privacy Policy

The Owner reserves the right to make changes to this privacy policy at any time by posting on this page. Users are advised to check this page frequently. The date of the latest modification appears below.

‍

A note from the Owner

We’re a small, independent business, and all data requests are handled personally.  

We’ll always do our best to respond as quickly as possible, but please be patient — sometimes it may take the full statutory response time (up to one month, or up to three months for complex requests).  

Your privacy is important to us, and we’re committed to handling your data responsibly and in accordance with the law.

‍