Privacy Policy
Kalynto Ltd
Version 1.0 ยท Last updated 20 August 2026
1. Who we are
Kalynto Ltd is a company registered in England and Wales, company number 17151969, registered office 4 Waterwheel Court, Merriott, England, TA16 5AF.
We provide an AI property search tool that estate agencies install on their own websites.
For the purposes of UK data protection law, we are the controller of the personal data described in this policy. Contact us at jack@kalynto.co.uk.
2. Two different roles, and why it matters
This distinction determines who is responsible for your data, so it is worth reading.
When you use Kalynto search on an estate agency's website, that agency is the controller. They decide why the search exists and what happens to the enquiry. We are their processor and act on their instructions. To exercise your rights over that data, contact the agency whose website you used. Our processing on their behalf is governed by our Data Processing Agreement with them, not by this policy.
When you visit kalynto.co.uk, book a demo, email us, or hold an account with us, we are the controller. That is what this policy covers.
3. What we collect and why
Visitors to kalynto.co.uk
| Data | Why | Lawful basis |
|---|---|---|
| Server and edge logs, being IP address, pages requested, referring site, device and browser type, and timestamps | To keep the site available and secure, and to diagnose faults | Legitimate interests: security, availability and fault diagnosis on our own website |
| Information you enter when booking a demo, being name, email, agency name and any message | To respond to you and arrange the demo | Legitimate interests: responding to a business enquiry, and steps prior to entering a contract |
Prospective customers
| Data | Why | Lawful basis |
|---|---|---|
| Business contact details, correspondence, demo notes | To evaluate and pursue a possible commercial relationship | Legitimate interests: business development with corporate contacts |
| Publicly available business information about your agency | To assess fit before contacting you | Legitimate interests: targeted, relevant business to business outreach |
Customers
| Data | Why | Lawful basis |
|---|---|---|
| Account holder names, work email addresses, telephone numbers | To provide and support the Service | Performance of a contract |
| Billing and payment records | To take payment and meet accounting obligations | Performance of a contract, and legal obligation |
| Support correspondence and usage logs | To provide support, investigate faults and secure the Service | Legitimate interests, and performance of a contract |
We do not use special category data, and we do not carry out profiling that produces legal or similarly significant effects.
4. Marketing
We send service messages to customers about the Service. Those are not marketing and you cannot opt out of them while you hold an account.
We send marketing email to business contacts on the basis of legitimate interests, or consent where required. Every marketing message carries an unsubscribe link, and you can opt out at any time by using it or by emailing jack@kalynto.co.uk.
5. Cookies and similar technologies
We use only strictly necessary cookies, which are required to make the site work and to keep it secure. These do not require your consent under the Privacy and Electronic Communications Regulations.
We do not use advertising cookies, and we do not currently run third party analytics on kalynto.co.uk. If that changes we will update this policy and ask for your consent before setting any non-essential cookie.
6. Who we share data with
We share personal data with service providers who process it on our behalf, under contract, and only for the purposes we specify:
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Application hosting and database storage | United Kingdom or European Economic Area |
| Anthropic PBC | Interpretation of search queries within the Service | United States |
| Cloudflare | Content delivery, routing, DNS and security | Global edge network, including the United States |
| Calendly | Demo booking | United States |
We also disclose personal data where required by law, in connection with legal proceedings, or to a buyer if we sell or reorganise the business.
We do not sell personal data.
7. Artificial intelligence
The Service uses a third party large language model to interpret search queries and generate match explanations.
Data submitted to that provider is not used to train its models. Our model provider Anthropic states: "By default, we will not use your inputs or outputs from our commercial products (e.g. Claude for Work, Anthropic API, Claude Gov, etc.) to train our models." We do not enable any optional setting that would permit such use.
We do not use personal data to train models of our own.
8. International transfers
Where a provider processes personal data outside the UK, we make the transfer under UK adequacy regulations, including the UK Extension to the EU-US Data Privacy Framework where the recipient has an active certification covering the data in question, or under the International Data Transfer Agreement or Addendum issued by the Information Commissioner, supported by a transfer risk assessment.
Details are available on request.
9. How long we keep it
| Data | Retention |
|---|---|
| Buyer search and enquiry records processed for an agency | 24 months, or until the agency deletes them |
| Demo enquiries that do not become customers | 24 months from last contact |
| Customer account and support records | Duration of the contract, then 12 months |
| Billing and accounting records | Six years from the end of the financial year, per the Companies Act 2006 |
| Marketing contact records | Until you opt out, then a suppression record kept indefinitely so we do not contact you again |
10. Your rights
Under UK data protection law you have the right to be informed, and to request access, rectification, erasure, restriction of processing, data portability, and to object to processing. Where we rely on consent, you can withdraw it at any time.
To exercise any of these, email jack@kalynto.co.uk. We respond within one month. We may extend that by two further months for complex requests and will tell you if we do.
If you used a Kalynto search on an estate agency's website and want to exercise rights over that data, contact the agency directly. We will pass on any request we receive and tell you we have done so.
11. Complaints
If you are unhappy with how we have handled your data, tell us first at jack@kalynto.co.uk so we can try to resolve it.
You also have the right to complain to the Information Commissioner's Office at any time.
Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. Helpline 0303 123 1113. ico.org.uk
12. Security
We take appropriate technical and organisational measures to protect personal data, including encryption in transit and at rest, role based access control, and multi factor authentication on administrative accounts. No system is completely secure, and we cannot guarantee absolute security.
13. Changes
We may update this policy. Where a change is material we will tell account holders by email before it takes effect. The version and date at the top of this page always reflect the current policy.
Kalynto Ltd, company number 17151969, registered in England and Wales. jack@kalynto.co.uk