Privacy Policy

Kelp Strategy ("we", "us", "our") operates the website kelpstrategy.com. This Privacy Policy explains how we collect, use, and protect information when you visit our website or contact us. By accessing this website, you acknowledge that you have read and understood this policy.

This policy covers our website only. The terms governing our LinkedIn content strategy services — including how we handle data collected in the course of service delivery — are set out separately in our client service agreements.

We collect information in the following ways:

• Contact information: when you fill out our contact form, request a call, or email us directly, we collect your name, email address, company name, and the content of your message.
• Usage data: we automatically collect basic analytics data including pages visited, time spent on site, browser type, device type, and referral source. This is collected via privacy-focused analytics tools that do not build advertising profiles.
• Cookies: we use essential cookies required for the site to function, and optional analytics cookies to understand how visitors use our site. We do not use advertising cookies or tracking pixels linked to third-party ad networks.

We do not collect sensitive personal data (such as financial information, health information, or government ID numbers) through this website.

We use the information we collect for the following purposes:

• To respond to your enquiries and schedule introductory calls
• To understand how our website is being used and improve the user experience
• To maintain internal records of communications
• To comply with our legal obligations

We do not sell, rent, or share your personal information with third parties for marketing purposes. We do not use your information to send unsolicited commercial communications unless you have explicitly requested to hear from us.

If you are located in the European Union or European Economic Area, we process your personal data on the following legal bases under the General Data Protection Regulation (GDPR):

• Legitimate interests: responding to your enquiries, improving our website, and operating our business in a lawful and responsible manner.
• Consent: analytics cookies. You may opt out at any time by adjusting your browser cookie settings or contacting us directly.
• Legal obligations: compliance with applicable laws, including tax, financial, and regulatory requirements.

Where we rely on legitimate interests, we have assessed that such interests are not overridden by your rights and freedoms, taking into account the nature of the data collected and the limited scope of its use.

We may share your information with the following categories of recipients, strictly on a need-to-know basis:

• Service providers: including email hosting providers, CRM platforms, scheduling tools, and analytics platforms. These providers are bound by data processing agreements and are not permitted to use your data for their own purposes.
• Legal and regulatory authorities: where we are required by applicable law, court order, or regulatory authority to disclose information.

We do not share your data with advertising networks, social media platforms for targeting purposes, data brokers, or any third party who would use it for purposes other than those described in this policy.

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Our standard retention periods are as follows:

• Enquiry and contact data: retained for up to three years from the date of last contact, or until you request deletion, whichever comes first.
• Analytics data: aggregated and anonymised data is retained for up to 24 months. Individual session data, where collected, is retained for a shorter period.
• Legal and financial records: retained for such periods as required by applicable law, typically seven years.

When data is no longer required, it is securely deleted or anonymised in a manner that prevents recovery.

We implement industry-standard technical and organisational measures to protect your personal data against unauthorised access, accidental loss, disclosure, or destruction. Access to personal data held by Kelp Strategy is restricted to personnel who require it to perform their duties.

Our website is served over HTTPS. Third-party service providers we use are evaluated for their security practices prior to engagement. Despite these measures, no system is completely secure and we cannot guarantee the absolute security of information transmitted to or stored by us. If you believe your data has been compromised, please contact us immediately at info@kelpstrategy.com.

Depending on your jurisdiction, you may have the following rights with respect to your personal data:

• Right of access: to request a copy of the personal data we hold about you.
• Right to rectification: to request correction of inaccurate or incomplete data.
• Right to erasure: to request deletion of your personal data, subject to legal obligations that may require us to retain it.
• Right to restrict processing: to request that we limit how we use your data in certain circumstances.
• Right to object: to object to processing based on legitimate interests, including for direct marketing purposes.
• Right to data portability: to receive your data in a structured, machine-readable format where technically feasible.
• Right to withdraw consent: where processing is based on consent, to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at info@kelpstrategy.com. We will respond within 30 days. In certain circumstances, we may need to verify your identity before fulfilling a request.

We use two categories of cookies on this website:

• Essential cookies: required for basic site functionality, such as session management and security. These cannot be disabled without affecting your ability to use the site.
• Analytics cookies: help us understand how visitors interact with our site, including which pages are visited most frequently and how users arrive at our site. These require your consent and do not track you across other websites.

You may manage or disable cookies at any time through your browser settings. Most browsers allow you to refuse or delete cookies. Note that disabling analytics cookies will not affect your ability to browse or use this website. For more information on managing cookies, consult your browser's help documentation or visit allaboutcookies.org.

Kelp Strategy is operated from Israel. Israel has been recognised by the European Commission as providing an adequate level of protection for personal data under the GDPR, meaning transfers of personal data from the EU to Israel are permissible without additional safeguards.

Where we use third-party service providers located outside Israel or the EEA, we ensure appropriate safeguards are in place — such as Standard Contractual Clauses — to protect your data in accordance with applicable law. If you would like more information about the safeguards applicable to a specific transfer, please contact us.

Our website is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected information from a minor, please contact us at info@kelpstrategy.com and we will delete such information promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will update the effective date shown at the top of this page and, where appropriate, provide additional notice.

We encourage you to review this page periodically. Your continued use of our website following any changes constitutes acceptance of the updated policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or how we handle your personal data, please contact us: