1. Scope and operator
Kalanta Limited (“Kalanta”, “we”, “us”, or “our”) operates kalanta.xyz (the “Site”). Kalanta Limited is the data user or controller for personal data collected through the Site and ordinary business enquiries, where those concepts apply.
Kalanta Limited is a company incorporated in Hong Kong with limited liability. Its registered office is at Flat B3, 5/F, Por Mee Factory Bldg, 500 Castle Peak Road, Sham Shui Po, Hong Kong (香港深水埗長沙灣青山道500號百美工業大廈5樓B3室).
This Policy covers Site visitors, prospective clients, client contacts, supplier and campaign-partner contacts, and other people who communicate with us in a business context. It does not replace a client's own privacy notice where we process personal data solely on that client's documented instructions.
2. Personal data you provide
The current Site does not offer user accounts, checkout, or an online enquiry form. If you contact us by email or another agreed business channel, we may receive:
- your name, job title, employer, and professional contact details;
- your product, company, target markets, timing, and budget information;
- the content of your enquiry, brief, attachments, and correspondence;
- proposal, contract, billing-contact, approval, and project information if we discuss or provide services; and
- any other information you choose to provide.
Please do not send sensitive personal data or personal data that is not necessary for your enquiry.
Providing personal data in an enquiry is voluntary. If you do not provide information reasonably needed to understand and respond to the enquiry, we may be unable to reply, prepare a proposal, or provide the requested service.
3. Technical and security data
When you visit the Site, standard hosting, content-delivery, and security infrastructure may process technical information such as your internet protocol address, browser and device type, requested page, referring URL, date and time, response status, and security or server-log events.
This data is used to deliver the Site, maintain availability, detect abuse, investigate errors, and protect the Site and its visitors. Our current hosting provider is Vercel.
4. Sources of personal data
We may receive personal data:
- directly from you;
- from your employer, colleague, or an authorized client contact;
- from service providers that support hosting, email, security, scheduling, or business operations; and
- from public professional sources or campaign partners where reasonably necessary for a legitimate business enquiry or agreed service.
5. How we use personal data
We use relevant personal data to:
- respond to enquiries and arrange scope discussions;
- prepare proposals and take steps requested before a contract;
- enter into, administer, and deliver business agreements;
- coordinate approved advertising, media, and influencer campaigns;
- manage contacts, approvals, billing, reporting, and support;
- operate, secure, troubleshoot, and improve the Site;
- protect our rights, prevent misuse, and resolve disputes; and
- comply with legal, regulatory, accounting, and tax obligations.
We do not use personal data collected through the Site or ordinary business enquiries for automated decision-making that produces legal or similarly significant effects.
6. Legal bases where applicable
Depending on the relevant law and context, we rely on one or more of the following grounds: taking steps at your request before a contract; performing a contract; complying with a legal obligation; pursuing our legitimate interests in operating, securing, and developing our business; protecting legal rights; and consent where the law requires it.
Where we rely on legitimate interests, we consider the purpose, necessity, and impact on the person concerned. Where we rely on consent, you may withdraw it at any time, without affecting earlier lawful processing.
8. Client campaign data
A client engagement may require access to advertising accounts, campaign contacts, creator information, reporting data, or other information chosen by the client. The applicable Service Agreement defines the permitted purpose, access, responsibilities, and retention for that engagement.
Where Kalanta processes personal data solely on a client's documented instructions, the client determines the purpose and means of processing, and the client's privacy notice and the parties' written data terms govern that processing.
9. International transfers
We may work with service providers, clients, platforms, creators, and media partners in different countries. Personal data may therefore be processed outside the country where it was collected. Where applicable law requires transfer safeguards, we use an appropriate legal mechanism and reasonable contractual, organizational, or technical protections.
10. Retention
We retain personal data only for as long as reasonably necessary for the purposes described in this Policy. Relevant factors include whether an enquiry is active, the duration of a client or supplier relationship, security needs, agreed project requirements, and legal, accounting, tax, and dispute-resolution obligations.
When personal data is no longer required, we delete it, anonymize it, or securely isolate it until deletion is possible, subject to lawful backup and record-retention processes.
12. Direct marketing and communications
We may send service-related or business communications where permitted by law. We do not use personal data for direct marketing unless we have provided any required notice and obtained the consent or indication of no objection required by applicable law.
You may opt out of marketing communications at any time, without charge, by using the unsubscribe method provided or emailing hi@kalanta.xyz. We may retain a minimal suppression record so that we can honor the request.
13. Security
We use reasonable technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. These measures may include access controls, service-provider review, secure hosting, and limiting data to what is needed for the relevant purpose.
No internet transmission or storage system is completely secure. Please use appropriate care when sending information by email and contact us if you believe your information has been affected by a security issue.
14. Your rights and choices
Under the Hong Kong Personal Data (Privacy) Ordinance, you may request access to personal data that we hold about you and ask us to correct data that is inaccurate. Depending on your location and the applicable law, you may also have rights to request deletion, restrict or object to processing, receive certain data in a portable format, withdraw consent, and complain to a competent privacy regulator.
To make a request, contact the Data Access and Correction Request Handler using the details below with enough information for us to understand the request. We may need to verify your identity and authority. We will respond within the period required by applicable law, subject to lawful exceptions.
15. Children and external links
The Site describes business-to-business services and is not directed to children. We do not knowingly collect personal data from children through the Site. If you believe a child has provided personal data to us, please contact us so we can review and take appropriate action.
The Site may link to third-party websites or platforms. Their privacy practices are governed by their own notices, not this Policy.
16. Changes and contact
We may update this Policy to reflect changes in our practices, the Site, or applicable requirements. The date at the top shows the latest update. Material changes will be highlighted where appropriate.
For questions, privacy requests, or concerns, contact the website operator and privacy contact:
Data Access and Correction Request Handler
Kalanta Limited
Email: hi@kalanta.xyz
Address: Flat B3, 5/F, Por Mee Factory Bldg, 500 Castle Peak Road, Sham Shui Po, Hong Kong
香港深水埗長沙灣青山道500號百美工業大廈5樓B3室