Legal

Privacy Policy

KEEL is a business design practice. We collect as little personal data as possible, we use it only for the purpose it was given, and we never sell it. This page explains exactly what that means.

Last updated July 2026

01

Who is responsible for your data

KEEL acts as the data controller for the personal data collected through this website. For any question relating to this policy or to your data, write to hello@keelorigin.com.

02

Data we collect

We only collect data you choose to give us, plus a minimal amount of technical data:

  • Identity and contact data: name, email address, company name.
  • Content you send us: the message you write in the contact form or by email.
  • Technical data: IP address, browser type, device type, pages viewed, referring source.
  • Professional context: information you share with us during a conversation or an engagement.

We do not collect special categories of personal data, and we do not use automated decision making.

03

The contact form

The contact form asks for your name, email, company and a short description of what you are building. This data is used for one purpose only: to reply to you and, where relevant, to assess whether an engagement makes sense. The legal basis is your consent and our legitimate interest in responding to a business enquiry.

04

Cookies

We use a small number of cookies. Essential cookies are required for the site to function. Analytics cookies are only set if you accept them. Full detail, including duration and how to change your mind, is on the Cookie Policy page.

05

Analytics

We use privacy-respecting analytics to understand which pages are read and how people find us. The data is aggregated, we do not build advertising profiles, and we do not share it with advertising networks. If you decline analytics cookies, no analytics data is collected about your visit.

06

Where your data is stored

Data is stored on servers operated by our hosting and infrastructure providers within the European Union or, where a provider operates outside the EU, under appropriate safeguards such as the European Commission Standard Contractual Clauses. Access is restricted to the people who need it to answer you.

07

How long we keep it

  • Contact enquiries that do not lead to an engagement: up to 24 months, then deleted.
  • Client records and correspondence: for the duration of the engagement plus the statutory retention period.
  • Analytics data: up to 14 months in aggregated form.
  • Cookie consent records: 12 months.

08

Security

The site is served over HTTPS. Access to data is limited, credentials are protected, and third-party providers are chosen for their security posture. No system is perfect, so if a breach ever affects your rights we will notify you and the competent authority within the legal timeframe.

09

Your rights

Under the GDPR you have the right to:

  • Access the personal data we hold about you.
  • Rectify data that is inaccurate or incomplete.
  • Request erasure of your data.
  • Restrict or object to certain processing.
  • Receive your data in a portable format.
  • Withdraw consent at any time, without affecting processing already carried out.

To exercise any of these, write to hello@keelorigin.com. We answer within one month. You also have the right to lodge a complaint with your national data protection authority.

10

Changes to this policy

If this policy changes, the revised version is published on this page with a new update date. Material changes affecting existing contacts will be communicated by email.