Privacy Policy

Who we are

KBR Global Creative Consulting Ltd (KBR Global, "we", "us") is a creative and engineering studio registered in Gibraltar. Our address is Suite 4.3.02, Block 4, Eurotowers, Gibraltar GX11 1AA. We are the data controller for the personal data described in this policy.

For anything about your data, write to info@kbr.global. A person reads that inbox.

What this policy covers

It covers the website at kbr.global and everything you can do on it: reading pages, sending the contact form, submitting the free website brief, and talking to Kai, our chat agent, on the contact page. It also covers the email and WhatsApp conversations that start from those pages.

Work we do for clients under a signed proposal is governed by that proposal and any data processing terms in it, not by this page.

Data you give us

Two forms on this site ask for personal data. You decide what to type. When you send a form, we also record the page address, referral source and campaign codes attached to that visit so we can understand where the enquiry came from.

• Contact form: your name, your business name, how to reach you (an email address or a WhatsApp number), what you need, and a budget range if you choose one.
• Free website request: whether you need a new website or an upgrade and one contact method, either email or WhatsApp. For an upgrade we ask for the current website. For a new website we may ask for a business clue, a short description of the offer and audience, and your approval of Kai's suggested pages and visual direction. A logo, brand file and colours are optional.

After a free website request, Kai may use the details you supplied and public sources such as a business website, directory page, social profile or published article to identify the business and prepare a fit review. This research happens privately; we do not ask you to find or confirm a public listing. If the available information is not enough, the request stays under review and we may ask only for what is still essential.

We use this to answer you, to understand the project, to prepare a proposal or the free website, and to deliver it. The legal basis is the steps we take at your request before a contract, and our legitimate interest in running the studio and replying to people who write to us.

An anonymous website conversation with no usable contact is deleted after 30 days. If you give us a usable contact and describe a business need, we keep the enquiry and transcript so we can continue the relationship and recognise the context if you return. You can ask us to delete it at any time. Client records such as contracts and invoices may be kept for as long as the law requires.

We do not send marketing to a contact address without your separate, explicit permission. Replying to your enquiry is not marketing.

Kai, our AI agent

Kai is our own AI agent. When you write to Kai, the conversation is stored by KBR Global so Kai can answer you, keep the thread when you come back, and follow up on the channel you chose. A person at KBR Global may read the transcript to continue the conversation or to check Kai's work.

Kai uses language models provided by Anthropic to write replies, recommend a website direction, prepare the brief and research relevant public business sources. We pass only the messages and business facts needed for the requested work.

Public web research can include the business name, location and details you supplied so Kai can identify the right business and prepare the fit review. Contact details are not used as search terms unless they are needed to distinguish the business you asked us to research.

Please do not paste passwords, card numbers or health details into the chat. If you want a transcript deleted, write to info@kbr.global and we will remove it.

Data collected automatically

The site is served through Cloudflare. To deliver pages and to keep bots and attacks out, Cloudflare processes your IP address, browser type, and the pages requested, and keeps short-lived server logs. This is needed to run the site and needs no consent.

The site's fonts are hosted with the site itself, so loading them does not send your browser to a font provider.

Cookies, analytics and advertising

By default the site stores only what it needs to work: your cookie choice; the language, original visit source and short-lived draft for a free website request; and the security cookie Cloudflare may set to tell people from bots.

Analytics (Google Analytics 4 through Google Tag Manager) and advertising measurement (Google Ads and Meta) run only after you switch them on. You can switch them off again at any time under "Cookie Settings" in the footer. The full list is on the cookies page.

Who we share data with

We do not sell personal data and we do not trade it. We share it only with:

• Cloudflare, which hosts and protects the site.
• Anthropic, the language model provider Kai uses for replies, website recommendations and brief preparation.
• Google and Meta, only for the tags you have switched on.
• Our accountants, lawyers and insurers when we need their advice, under confidentiality.
• Courts or authorities when the law obliges us to.

Messages from the forms arrive in our mailbox at info@kbr.global, so our email provider handles them in transit.

International transfers

We are in Gibraltar. Anthropic, Cloudflare, Google and Meta run data centres around the world, including in the United States, so data can leave Gibraltar, the United Kingdom and the European Economic Area. Where that happens we rely on the safeguards those companies offer under GDPR and UK GDPR, such as standard contractual clauses and data privacy frameworks approved by the relevant authorities.

Security

The site is served over HTTPS. Form data and chat transcripts are stored in systems that only KBR Global staff can reach, protected by access controls. No system is perfectly secure, and we will tell you and the regulator if a breach affects your data as the law requires.

Your rights

Under GDPR and UK GDPR style rules, which Gibraltar follows, you can ask us to:

• tell you what data we hold about you and give you a copy (access);
• correct data that is wrong (rectification);
• delete your data (erasure);
• stop using it for a while (restriction);
• send it to you or another company in a usable format (portability);
• stop using it for a purpose you object to (objection);
• withdraw consent you gave earlier, for example for analytics, without affecting what happened before.

Email info@kbr.global and we will answer within one month. If you are not satisfied, you can complain to the Gibraltar Regulatory Authority, the data protection authority for Gibraltar, or to the authority in the country where you live.

Children

This site is for businesses and is not aimed at anyone under 16. We do not knowingly collect data from children. If you believe a child has sent us data, write to info@kbr.global and we will delete it.

Changes to this policy

When we change how we handle data, we update this page and the date at the top. For a change that matters to you, such as a new processor or a new purpose, we say so in the section it affects.