This policy explains how we use personal data on this website, kakuto.io. It covers the contact form and analytics cookies. It does not cover the Kakuto apps that gyms and their members use. The apps gym staff use, Kakuto Admin and Kakuto Calendar, have their own privacy notice, and so does the members’ app.
Who we are
Kakuto.IO is run by Kakuto Technology GK (“Kakuto”, “we”, “us”). We are the controller of the personal data described here.
To ask anything about this policy or your data, email info@kakuto.io.
The contact form
When you send us a message through the contact page, we collect:
- your email address
- your name, if you give it
- the subject and message you write, and any replies you send later
- the language of the page you used
Why we use it. We use it to confirm that the email address is yours, to answer your inquiry, and to email you when we reply. We never add you to a mailing list or use your details for marketing.
Lawful basis. Legitimate interests: answering the questions people send us. If you are asking about becoming a customer, the basis is also taking steps at your request before entering into a contract.
Abuse protection. To stop the form being used for spam, we keep a one-way hash (a scrambled code, not the original value) of your email address and of your IP address for five minutes after each request. The basis is legitimate interests: keeping the service working.
How long we keep it.
- If you never confirm your email address, we delete the message after 24 hours.
- The private link in your email works for 90 days after you confirm.
- We keep the conversation for as long as we need it to deal with your inquiry and any business relationship that follows. You can ask us to delete it at any time.
Analytics cookies
We use Google Analytics to understand how people use the site, for example which pages they visit and which links to the Kakuto app they click. It only runs if you choose “Accept analytics” in the cookie banner. If you reject it or ignore the banner, no analytics cookies are set and nothing is sent to Google.
When it does run, Google Analytics collects:
- the pages you view, and the website that sent you (its address only, not the full link)
- which section of the page a link to app.kakuto.io was in, when you click one
- your device type, browser, operating system, screen size and language
- your approximate location (country and city), which Google works out from your IP address. Google Analytics does not log or store IP addresses.
We have turned off Google’s advertising features (Google signals and ad personalisation), so this data is not used for advertising.
Lawful basis. Your consent. You can withdraw it at any time with Cookie settings at the bottom of every page. We then delete the analytics cookies from your browser.
How long we keep it. Google keeps the analytics data for the retention period set in our Google Analytics account, which is no more than 14 months.
Cookies and similar storage
| Name | Set by | Purpose | Expires | Needs consent? |
|---|---|---|---|---|
_ga |
Google Analytics | Tells one visitor’s browser apart from another’s | 2 years | Yes |
_ga_Z6QL4XZW7X |
Google Analytics | Keeps track of the current visit | 2 years | Yes |
kakuto.analyticsConsent (browser storage) |
kakuto.io | Remembers your analytics choice | Until you clear it | No, it is needed to respect your choice |
locale (browser storage) |
kakuto.io | Remembers the language you picked | Until you clear it | No, it only stores a setting you chose |
The analytics cookies are set on the kakuto.io domain, so the Kakuto app at app.kakuto.io can read them too.
Server logs
Like any website, our hosting receives your IP address and basic request details (such as the page requested and your browser) whenever you load a page or use the contact form. We use these to deliver the site, keep it secure and fix faults. The basis is legitimate interests. Logs from the contact form service are deleted after three months.
Who we share data with
We do not sell personal data. We share it only with the service providers that run the site for us, under contracts that require them to protect it:
- Amazon Web Services hosts the website and the contact form, stores inquiries and sends our emails. This data stays in AWS’s London (UK) and Ireland (EU) data centres.
- Google provides Google Analytics, only if you accept analytics cookies.
We may also disclose data where the law requires it.
International transfers
Google may process analytics data in the United States. Google LLC is certified under the EU-US Data Privacy Framework and its UK Extension, which the UK and the EU recognise as giving adequate protection.
Members of our team may read inquiries from Japan. The UK and the EU both recognise Japan as giving adequate protection to personal data.
Your rights
Under the UK GDPR (and the EU GDPR, if you are in the EU), you have the right to:
- get a copy of the personal data we hold about you
- have inaccurate data corrected
- have your data deleted
- restrict or object to how we use it
- receive data you gave us in a portable format
- withdraw consent at any time, where we rely on it. This does not affect what we did before you withdrew it.
To use any of these rights, email info@kakuto.io. We will reply within one month.
If you are unhappy with how we have handled your data, please tell us first. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk, or to the data protection authority in your country.
Children
This website is for gym owners and businesses. It is not aimed at children, and we do not knowingly collect data from them through it.
Changes to this policy
If we change how we use personal data, we will update this page and the date at the top.