Privacy Policy

Draft pending legal review. This policy is a research-desk draft. It must be confirmed with an IDD/RODO lawyer before Kleova publishes to production. It is not legal advice. Until reviewed, treat the data-controller details and retention period below as provisional.

Last updated: 2026-05-28

Kleova is a personal-brand and marketing service. We do not distribute, advise on, or sell insurance. This policy explains what personal data we collect through this site — chiefly the waitlist form — why we collect it, how long we keep it, and the rights you have over it.

1. Data controller

The controller responsible for your personal data is:

[TO CONFIRM — Kleova legal entity: name, address, registration]

Until the legal entity is confirmed, questions about your data can be sent to the contact address in section 9.

2. What data we collect

When you join the waitlist, we collect the information you give us:

  • Name — your full name.
  • Email address — so we can contact you about the waitlist.
  • Country / market — to understand where you work.
  • Production tier — MDRT, Court of the Table, Top of the Table, or "other / building toward it".
  • LinkedIn URL — optional.
  • Your stated constraint — your answer to "your biggest constraint right now?" (time, authority, or leads).
  • Consent record — confirmation that you agreed to be contacted about the waitlist.

We also collect limited technical data needed to run the form securely and to keep a record:

  • IP address — for security and anti-spam.
  • Timestamp — when you submitted the form.

We do not collect special-category data, and we do not ask for it. Please do not include sensitive personal information in free-text fields.

3. Purpose and legal basis

We process your data for the following purposes and on the following legal bases under the GDPR:

  • Contacting you about the waitlist — assessing fit and reaching out about Kleova. Legal basis: your consent (Article 6(1)(a)), given when you submit the form.
  • Running the form securely and keeping a record of consent — anti-spam, fraud prevention, and demonstrating that consent was given. Legal basis: our legitimate interest (Article 6(1)(f)) in operating the service securely and meeting our accountability obligations.

You may withdraw your consent at any time (see section 6). Withdrawal does not affect processing that happened before you withdrew.

4. Retention

We keep your waitlist data only as long as we need it for the purpose above:

  • until the waitlist closes and we have decided whether to reach out, or
  • until you withdraw your consent or ask us to erase your data,

whichever comes first — and in any case no longer than 24 months from submission. [TO CONFIRM — retention period with legal review.] After that, we delete or anonymise the data. We may keep a minimal record of consent for as long as needed to meet our accountability obligations.

5. Cookies and analytics

We keep cookies to a minimum. Our cookie banner lets you accept all, reject the optional ones, or choose by category. Until you consent, all optional categories are set to "denied" by default through Google Consent Mode v2, and no optional cookies are set. You can change your choice at any time via Cookie settings in the footer.

  • Necessary (always on) — required for the site and form to work, to remember your cookie choices, and to keep the form secure (anti-spam, rate-limiting, Turnstile). Legal basis: legitimate interest.
  • Analytics (Google Analytics 4) — anonymous traffic and behaviour measurement, loaded only after you consent, through Google Tag Manager. Retained up to 24 months.
  • Marketing — campaign-measurement cookies. Currently held in reserve — no advertising cookies are set on this site; the category exists so any future measurement also stays under your consent.
  • Preferences — remembering interface settings (e.g. menu state, display preferences).

6. Your rights

Under the GDPR you have the right to:

  • Access — get a copy of the personal data we hold about you.
  • Rectification — correct data that is wrong or incomplete.
  • Erasure — ask us to delete your data ("right to be forgotten").
  • Restriction — ask us to limit how we use your data.
  • Objection — object to processing based on legitimate interest.
  • Withdraw consent — withdraw consent for waitlist contact at any time, without affecting prior processing.
  • Data portability — receive your data in a portable format where applicable.
  • Complaint — lodge a complaint with your supervisory authority. In Poland this is the President of the Personal Data Protection Office (UODO); in other countries it is your national data protection authority.

To exercise any of these rights, contact us using the details in section 9. We will respond within the time limits set by the GDPR.

7. Third parties

We share data only with the service providers we need to run the waitlist, and only for that purpose:

  • Email delivery — to send and receive waitlist correspondence.
  • Cloudflare Turnstile — anti-spam protection on the form. Turnstile processes limited technical data (including your IP address) to tell humans from bots.
  • Analytics (Google Analytics 4) — only if you have given consent (see section 5).

We do not sell your data, and we do not share it for others' marketing. Where a provider processes data on our behalf, we put a data-processing agreement in place.

8. International note

Kleova serves top life producers internationally, including peers met through MDRT. Depending on where you are and where our providers operate, your data may be transferred outside your country, including outside the European Economic Area. Where that happens, we rely on appropriate safeguards (such as the European Commission's standard contractual clauses) to protect your data.

9. Contact

Questions about your data, or to exercise your rights:

hello@kleova.co

Kleova is a personal-brand & marketing service. We do not distribute, advise on, or sell insurance. Licensed advice and sales remain with the licensed advisor.