Privacy Policy

Who we are

Delagen is a service operated by KORTRON GROUP LTD (“we”, “us”, “our”), registered in England and Wales (company number 17240580). Our registered office is 167–169 Great Portland Street, 5th Floor, London, England, W1W 5PF.

KORTRON GROUP LTD is the data controller responsible for your personal information when you use Delagen. This policy explains what we collect, why we use it, and your rights under UK data protection law (including the UK General Data Protection Regulation and the Data Protection Act 2018).

What we collect

When you use Delagen, we may collect:

• Your name, email address, and phone number
• Your account password (stored in hashed form—we cannot read it)
• Company and business details you provide when booking a consultation
• Consultation answers and related questionnaire responses
• Messages you send through our contact or booking forms
• Technical and usage data such as IP address, browser type, and audit records of activity on the platform (for security and service operation)

How and why we use your information

We use your information to:

• Create and manage your account and authenticate you
• Receive, review, and respond to consultation bookings
• Contact you about your submissions, account, or privacy requests
• Operate, secure, and improve the platform
• Maintain internal records, including an audit log of significant actions

We rely on the following legal bases:

• Contract — to provide the service you sign up for (account, consultations, support)
• Legitimate interests — to secure the platform, prevent misuse, and improve our services (balanced against your rights)
• Consent — where we ask for your agreement (for example, accepting this privacy policy when submitting a consultation)
• Legal obligation — where we must retain or disclose information to comply with law

We do not sell your personal information. We do not use your data for third-party advertising.

Who we share information with

We share personal data only where necessary to run the service, including:

• Cloudflare, which hosts the Delagen website (Cloudflare Pages) and API (Cloudflare Workers) and stores consultation and account data in Cloudflare D1
• Email delivery services used to send transactional notifications (for example, consultation alerts)
• Professional advisers or regulators where required by law

We require processors to handle data securely and only on our instructions. We do not allow them to use your data for their own marketing.

International transfers

Delagen is delivered via Cloudflare’s global network. Where a supplier processes data outside the UK, we rely on appropriate safeguards (such as UK adequacy regulations, the supplier’s UK GDPR Data Processing Addendum, or standard contractual clauses) as required by law.

How long we keep it

We keep your account information and submissions for as long as your account is active or as needed to provide the service. Consultation submissions and audit records are retained for as long as necessary for customer support, security, and legal compliance, with personal details anonymised where possible when you ask us to delete your data. If you ask us to delete data, we will remove or anonymise personal data within a reasonable period, except where we must retain information for legal, regulatory, or legitimate business purposes.

How we protect your data

We take appropriate technical and organisational measures to protect your information, including hashed password storage, access controls, and secure session handling. Authentication tokens are stored in your browser’s local or session storage rather than as cookies. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

Your rights

Under UK data protection law, you have rights including:

• Access — to request a copy of personal data we hold about you
• Rectification — to correct inaccurate data
• Erasure — to request deletion in certain circumstances
• Restriction — to ask us to limit processing in certain cases
• Portability — to receive certain data in a structured, machine-readable format
• Objection — to object to processing based on legitimate interests
• Withdraw consent — where we rely on consent, you may withdraw it at any time

To exercise these rights, email [email protected]. We will respond within one month in most cases, as required by law.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) if you are unhappy with how we handle your data: ico.org.uk/make-a-complaint.

Children

Delagen is not intended for children under 18. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal data, please contact us and we will take steps to delete it.

Automated decision-making

We do not make decisions about you that have legal or similarly significant effects based solely on automated processing.

Cookies and local storage

We do not use advertising or analytics cookies. Sign-in and consultation session tokens are stored in your browser’s local storage or session storage so you can stay signed in and continue a booking. You can clear this data through your browser settings; doing so will sign you out and may interrupt an in-progress consultation.

Terms of use

Your use of Delagen is also governed by our terms of use , including rules on acceptable use and submissions.

Changes to this policy

We may update this policy from time to time. We will post the revised version on this page and update the “Last updated” date above. For significant changes, we may also notify registered users by email where appropriate.

Contact

For privacy and data rights requests, email [email protected].

Data controller: KORTRON GROUP LTD, 167–169 Great Portland Street, 5th Floor, London, England, W1W 5PF (company number 17240580).