Privacy policy

Who we are

This site is operated by KOVA Consulting (“KOVA”, “we”, “us”), a GCC market, circular economy and project-development advisory with people in Finland and in Riyadh, Saudi Arabia.

Registered entity: [REGISTERED COMPANY NAME]. Business ID: [BUSINESS ID]. Registered address: [REGISTERED ADDRESS].

You can reach us at saku@kovapmc.com.

For the purposes of the EU General Data Protection Regulation (GDPR) we are the controller of the personal data described below.

The short version

This website is a set of static pages. It sets no cookies, runs no analytics, embeds no trackers and makes no third-party requests. Fonts are served from our own domain. If you never contact us, we never learn anything about you beyond the standard server logs our host keeps to deliver the page and defend against abuse.

What we collect

When you browse

Our hosting provider records ordinary technical information needed to serve the site and protect it: IP address, request time, the page requested, user agent and referrer. We do not use it to build a profile of you and we do not combine it with anything else.

When you contact us

If you use the contact form or email us, we receive what you choose to send: typically your name, email address, company and your message. We use it to answer you and, if it leads somewhere, to carry on the conversation.

Who processes it for us

• Vercel Inc. hosts and serves this website, and keeps the request logs described above.
• Formspree, Inc. receives and forwards contact form submissions to our inbox.
• [EMAIL PROVIDER, e.g. Microsoft 365 or Google Workspace] hosts the mailbox your message lands in.

Each acts as a processor on our instructions under a data processing agreement. Some of them operate outside the EEA; where they do, transfers rely on the European Commission's Standard Contractual Clauses or an adequacy decision.

Why we are allowed to hold it

• Your enquiry: our legitimate interest in answering people who contact us, and in taking steps at your request before entering a contract.
• Server logs: our legitimate interest in operating a secure, working website.

How long we keep it

Enquiries are kept for as long as the conversation is live and for [RETENTION PERIOD, e.g. 24 months] afterwards, so we can pick up a thread that resumes. Server logs are kept for the short period our host retains them. Anything we no longer need is deleted.

What we never do

We do not sell personal data, we do not share it for advertising, and we do not use it for automated decision-making or profiling.

Your rights

Under the GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or send it to someone else in a portable format. Write to saku@kovapmc.com and we will respond within one month.

If you think we have handled your data badly, you can complain to your national supervisory authority. In Finland this is the Office of the Data Protection Ombudsman (tietosuoja.fi).

Cookies

There are none. The cookie policy explains what that means and what we would do if it ever changed.

Changes

If this policy changes we will update the date at the top of the page. Material changes will be flagged on the site.