Privacy

Who is responsible for your information

Kalaraja Studios is responsible for deciding how personal information submitted through this website is used. Privacy questions and rights requests can be sent through the Contact page.

Information we collect

Depending on the service you use, this may include your name, business email address, organisation, website URLs, project information, enquiry content, Launch Readiness checklist request details, verification status and an optional marketing preference.

Technical information such as IP address and browser/security signals may also be processed where necessary to operate and protect the website, including through Cloudflare and Turnstile.

Why we use personal information

We use submitted information to respond to enquiries, provide requested resources or services, understand project requirements, maintain service security and administer the website.

Optional marketing is separate from service delivery and is only selected when you actively choose it.

Lawful bases

For enquiries and requested resources, processing is carried out to respond to steps you ask us to take and, where applicable, for Kalaraja’s legitimate interests in operating and responding through its business services. Security and abuse prevention are processed for legitimate interests in protecting the website and its users. Optional marketing and optional analytics rely on your consent where consent is required.

You can withdraw optional consent at any time. Cookie and browser-storage choices can be changed through Cookie settings.

Service providers and sharing

The current Launch Readiness delivery flow uses Cloudflare for website infrastructure, D1 database storage and Turnstile anti-bot protection, and Resend for transactional email delivery. Other information is only shared where needed to provide the relevant service, operate the website, or meet a legal requirement.

Where a service provider processes information outside the UK, Kalaraja is responsible for ensuring an appropriate international-transfer mechanism or other applicable safeguard is in place.

Launch Readiness checklist requests

When you request the full checklist, we process your email address, request date, verification status, requested resource and, if selected, your marketing preference. This is used to verify your address and deliver the requested checklist.

Unverified and expired requests are automatically deleted after 24 hours. Delivery-failed requests are automatically deleted after 7 days. Successfully verified checklist-request records are automatically deleted 30 days after the checklist is sent.

Retention

Personal information is kept only for as long as it is needed for the purpose for which it was collected, including applicable legal, accounting, service-delivery and security requirements. For Launch Readiness checklist delivery, the automated retention periods described above apply.

Browser-side storage and its duration are described on the Cookies & browser storage page.

Your rights

Depending on the processing and lawful basis, UK data-protection rights can include access, rectification, erasure, restriction, objection and data portability. Where processing relies on consent, you can withdraw that consent without affecting processing that was lawful before withdrawal.

You also have the right to complain to the Information Commissioner’s Office if you are unhappy with how your personal information is handled.

Cookies and browser storage

Optional browser storage is disabled by default until you make a choice. See Cookies & browser storage for the technologies, purposes and controls currently used.

Last updated: 24 September 2026.