Privacy Policy

KOL AI ("we", "us", "our") is a marketing and automation agency operating online at kolai.io. Our services include AI-powered content strategy, growth marketing, brand direction, and automation systems.

For the purposes of UK data protection law, KOL AI is the data controller of the personal information we collect from you.

Contact us at: contact@kol-ai.io

We collect information you give us directly — for example when you fill out our contact form, book a strategy call, or email us. This includes your name, email address, phone number, company name, and any details you include in your message.

We also collect data automatically when you visit our website: IP address, browser type, pages visited, time spent on pages, and referral source. This is collected via analytics tools.

We do not collect sensitive personal data (as defined under UK GDPR Article 9) and we do not collect payment card information directly — any payments are processed by third-party providers.

To respond to your enquiries and provide the services you've requested.

To send you information about our services where you've asked us to, or where we have a legitimate interest in doing so.

To improve our website and understand how it's being used.

To comply with our legal obligations.

We do not sell your personal data to third parties. We do not use your data for automated decision-making or profiling.

Under UK GDPR, we rely on the following legal bases:

Contractual necessity — to fulfil a contract with you or take steps before entering into one.

Legitimate interests — to run and improve our business, where your rights do not override those interests.

Consent — where you have explicitly agreed, for example to receive marketing emails. You can withdraw consent at any time.

We may share your data with trusted third-party service providers who help us operate our business — for example, our CRM system (GoHighLevel), email platforms, and analytics providers. These providers are contractually required to process your data only on our instructions.

We may disclose your data to comply with a legal obligation, protect our rights, or prevent fraud.

If we sell or transfer part of our business, your data may be transferred as part of that transaction, subject to the same privacy protections.

We keep your personal data only for as long as necessary for the purposes it was collected, or as required by law.

Enquiry and contact data is retained for up to 3 years.

Client project data is retained for 7 years for legal and accounting purposes.

Analytics data is aggregated and anonymised after 26 months.

Under UK GDPR, you have the right to: access your personal data, have inaccurate data corrected, have your data erased in certain circumstances, restrict or object to processing, and data portability.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) — the UK supervisory authority for data protection — at ico.org.uk.

To exercise any of your rights, email us at contact@kol-ai.io. We will respond within 30 days.

We use essential cookies that are necessary for the website to function. We may also use analytics cookies (e.g. Google Analytics) to understand how visitors use our site.

You can control cookies through your browser settings. Disabling analytics cookies will not affect your ability to use the website.

Some of our third-party service providers are based outside the UK. Where we transfer data internationally, we ensure appropriate safeguards are in place, such as adequacy decisions, standard contractual clauses, or other approved transfer mechanisms.

We may update this Privacy Policy from time to time. When we do, we will update the 'Last updated' date at the top of this page. We encourage you to review this policy periodically.

Continued use of our website after changes constitutes acceptance of the updated policy.