Privacy Policy

• Controller: Bazeflix LTD
• Trading name: Kovasite
• Address: London United Kingdom
• Email: legal@kovasite.com
• Website: kovasite.com

For most data collected through our own website, onboarding flow, billing system, dashboard and support channels, we are the data controller.

Where we host a website for one of our customers and collect enquiries from that customer’s site visitors, the customer may be the controller for that enquiry data and we may act as their processor.

We may collect the following types of personal information:

• Account and onboarding details: name, business name, email address, phone number, login information, business type, website preferences and setup answers.
• Business and website content: address, opening hours, service details, menus, images, team details, booking links, contact details and other content you provide for your website.
• Domain registration and management details: business name, contact name, address, email, phone number, country, postcode, domain name choices, domain status, DNS information and registrar-related records.
• Billing information: plan, subscription status, payment status, invoices, billing email and payment identifiers. We do not store full card numbers.
• Messages and support data: emails, form submissions, support requests, feedback and communications with us.
• Website visitor data: IP address, device/browser information, pages visited, referral URLs, timestamps and analytics events.
• Security and technical data: logs, authentication events, error reports, fraud prevention signals and usage data.
• Customer site enquiries: where a visitor submits a form on a hosted customer website, we may process their name, email, phone number, message and related metadata.

We use personal information to:

• create and manage user accounts;
• build, host and maintain customer websites;
• provide website editing, dashboard and publishing features;
• register, configure, renew, verify, connect and manage domains;
• provide SSL, DNS, routing and domain status checks;
• process subscriptions, payments and invoices;
• send service messages, account notices and important updates;
• respond to enquiries and provide support;
• prevent fraud, abuse, spam and unauthorised access;
• improve our website, product and customer experience;
• comply with legal, tax, accounting, registrar and regulatory obligations;
• send marketing communications where permitted by law or with consent.

If your plan includes a managed domain, we may register, configure and renew the domain on your behalf.

Depending on the setup, the domain may be registered using our business details as the legal registrant, or using details you provide. If we are listed as the registrant, we manage the domain operationally for the purpose of providing your website service.

You may request transfer of a managed domain, subject to applicable registrar rules, verification requirements, unpaid fees, fraud prevention checks, and transfer restrictions such as registrar lock periods.

Domain-related information may be shared with domain registrars, DNS providers, hosting providers, registry operators, ICANN-related systems, abuse prevention services and other parties required to register, maintain, renew, secure or transfer a domain.

We rely on different lawful bases depending on the activity:

• Contract: to provide our services, create your website, manage your account, process payments, register or connect domains, provide support and deliver your subscription.
• Legitimate interests: to improve our service, secure our systems, prevent abuse, monitor performance, manage business operations and communicate about relevant service updates.
• Consent: for optional marketing, certain cookies or where we ask for specific permission.
• Legal obligation: for tax, accounting, fraud prevention, regulatory, domain registrar or legal compliance requirements.

Where we rely on legitimate interests, we balance our interests against your rights and freedoms.

We may share personal information with trusted third parties where needed to operate our service, including:

• hosting and deployment providers;
• database, storage and authentication providers;
• payment processors and billing platforms;
• email and notification providers;
• analytics, logging and security providers;
• domain registrars, DNS providers and SSL/certificate providers;
• professional advisers such as accountants, lawyers and insurers;
• law enforcement, regulators, courts or authorities where required;
• customers, where a website visitor submits an enquiry through that customer’s hosted site.

We only share information where necessary and require service providers to protect it appropriately. A list of the specific processors we use is available on request by emailing legal@kovasite.com.

Some providers we use may process personal information outside the UK or EEA. Where this happens, we use appropriate safeguards where required, such as adequacy regulations, standard contractual clauses, data processing agreements, or equivalent transfer protections.

We keep personal information only for as long as necessary for the purposes described in this policy.

Typical retention periods include:

• account data: while your account is active and for a reasonable period afterwards;
• billing and invoice records: usually up to 6 years for tax and accounting purposes;
• domain records: for the life of the domain management relationship and as required by registrar/registry rules;
• support messages: for as long as needed to handle the issue and maintain business records;
• website enquiry data: according to the customer’s instructions or our default retention settings;
• technical logs: for a limited period unless needed for security, fraud prevention or legal reasons.

We may retain limited records where necessary to resolve disputes, enforce agreements, prevent abuse or comply with legal obligations.

We may use cookies and similar technologies to:

• keep users signed in;
• remember preferences;
• secure the service;
• measure website performance;
• understand how people use our website;
• support marketing or analytics where permitted.

Where required, we will ask for consent before setting non-essential cookies. You can control cookies through your browser settings.

We may send marketing emails if you have opted in, requested information, or where otherwise permitted by law.

You can unsubscribe at any time using the link in the email or by contacting us at legal@kovasite.com.

We will still send service messages where necessary, such as billing, security, domain, account or website status updates.

We use appropriate technical and organisational measures to protect personal information, including access controls, secure hosting, encryption where appropriate, monitoring, backups and restricted access to sensitive systems.

No system is completely secure, but we take reasonable steps to protect information against unauthorised access, loss, misuse or disclosure.

Depending on your location and the applicable law, you may have rights to:

• access your personal information;
• correct inaccurate information;
• request deletion;
• restrict processing;
• object to certain processing;
• request data portability;
• withdraw consent where processing is based on consent;
• complain to a supervisory authority.

To exercise your rights, contact us at legal@kovasite.com. We may need to verify your identity before responding.

If you are unhappy with how we handle your personal information, please contact us at legal@kovasite.com and we will work to resolve your concern.

Our services are intended for businesses and are not directed at children. We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. If we make significant changes, we may notify users by email, dashboard notice or website notice.

For privacy questions or requests, contact:

• Bazeflix LTD
• Email: legal@kovasite.com
• Address: London United Kingdom