Legal
Privacy Policy
Last updated: May 2026 · Kaldroa Advisory
1. Who we are
Kaldroa Advisory is an operational advisory practice for single family offices. This privacy policy explains how we handle personal data on the website kaldroa.com (“the Site”).
For any privacy enquiries, contact us at [email protected].
2. What data we collect
We collect the minimum data necessary to operate the Site. In practice, this means:
- —Essential cookies only. The Site sets session-level cookies required for it to function. No tracking or advertising cookies are set without your explicit consent via the cookie banner.
- —Calendly booking data. If you book a Sovereignty Session via the embedded Calendly widget, Calendly collects your name, email address, and calendar availability as necessary to complete the booking. This data is processed by Calendly under their own privacy policy. We receive the booking confirmation and use it solely to conduct the session.
- —No personal data beyond the above. We do not use Google Analytics, Meta Pixel, or any other third-party tracking. We do not collect email addresses, IP addresses, or behavioural data unless you have explicitly submitted them.
3. Cookies
| Category | Purpose | Status |
|---|---|---|
| Essential | Required for site to function | Always on |
| Analytics | Anonymous usage data | Opt-in |
| Marketing | Personalised advertising | Not used |
You can change your cookie preferences at any time by clearing your browser's local storage for this site, or by contacting us at [email protected].
4. Legal basis for processing
Where we process personal data (specifically, Calendly booking information), we do so on the basis of legitimate interest — conducting the advisory session you have requested — and, where required, consent (for optional analytics cookies).
5. Data retention
Booking records are retained for as long as necessary to manage the advisory relationship and fulfil any applicable contractual or legal obligations. We do not retain personal data beyond this. You may request deletion at any time.
6. Third-party services
The Site uses the following third-party services:
- —Calendly — booking platform. Their privacy policy governs data collected during the booking flow.
- —Hetzner — hosting provider. Server access logs may be retained for security purposes in accordance with Hetzner's data processing agreement.
7. Your GDPR rights
If you are located in the UK or European Economic Area, you have the following rights:
- —Right of access: Request a copy of any personal data we hold about you.
- —Right to rectification: Request correction of inaccurate personal data.
- —Right to erasure: Request deletion of your personal data ("right to be forgotten").
- —Right to restriction: Request that we limit processing of your personal data.
- —Right to data portability: Request your data in a structured, machine-readable format.
- —Right to object: Object to processing based on legitimate interest.
- —Right to withdraw consent: Withdraw consent for analytics cookies at any time.
To exercise any of these rights, contact [email protected]. We will respond within 30 days. If you are unsatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) in the UK, or the relevant supervisory authority in your jurisdiction.
8. Contact
All privacy-related enquiries should be directed to: [email protected]