Privacy Policy
KL Marketing Solutions LTD (trading as Karina L.)
The protection of your personal data is an important concern for KL Marketing Solutions LTD (trading as Karina L., hereinafter referred to as "the Company"). In this privacy policy, you can read which data is processed on the www.kl-marketingsolutions.com website and its associated subpages, as well as in the course of providing our services.
Definitions
The Company
Within this privacy policy, "the Company" refers to KL Marketing Solutions LTD, trading as Karina L. Registered address: 85 Great Portland Street, First Floor, London, United Kingdom, W1W 7LT. Company Registration No: 15339239.
GDPR
General Data Protection Regulation. All activities are performed in accordance with GDPR guidelines and the UK Data Protection Act 2018.
Data Controller
KL Marketing Solutions LTD, trading as Karina L., of 85 Great Portland Street, First Floor, London, United Kingdom, W1W 7LT, is the Data Controller. You can contact us at info@kl-marketingsolutions.com.
Data Processor
Any natural or legal person who processes personal data on behalf of the Data Controller, under instruction and in compliance with applicable data protection regulations.
Data Subject
Any living individual who uses our services and whose personal data is processed by the Company.
Our Services
KL Marketing Solutions LTD (trading as Karina L.) provides the following services:
-
AI-powered content creation and creative direction
-
Social media management and strategy
-
Paid advertising management (Meta Ads, Google Ads)
This privacy policy applies to personal data processed in connection with the provision of all three services, as well as through use of our website.
Scope of Application
Pursuant to Art. 1 GDPR, these provisions apply to the processing of personal data of natural persons. The processing of personal data of legal persons is covered only insofar as it relates to identifiable natural persons.
Principles for Processing Personal Data
Fairness and Lawfulness
All personal data is collected and processed in a legal, fair, and ethical manner only. Data collection is documented and agreed upon in writing between the Company and the client prior to processing.
Restricted to a Specific Purpose
Personal data is processed only for the specific purposes of delivering our services (AI-powered content creation, social media management, and paid advertising), conducting market research, and fulfilling contractual obligations. No other use of data will be conducted by the Company.
Transparency
Data Subjects will be informed of how their data is collected, processed, and used. All data collection events are documented and copies provided to both parties.
Personal Data We Collect and Process
The Company may collect and process the following categories of personal data:
-
Email address
-
First name and last name
-
Phone number
-
Address, postcode, city, country
-
Company name and business registration number
-
Product and service information
-
Payment information
-
Photo ID (where required for compliance purposes)
-
Ad account credentials and performance data (for paid advertising clients)
-
Social media account access credentials and analytics data (for social media management clients)
-
Brand assets, creative materials, and content briefs provided by the client
Types of Data Processed
-
Inventory data (e.g., names, addresses)
-
Contact data (e.g., email addresses, telephone numbers)
-
Content data (e.g., briefs, creative assets, messages)
-
Usage data (e.g., website visits, content engagement, access times)
-
Advertising performance data (e.g., impressions, clicks, spend, conversions)
-
Social media analytics data (e.g., reach, engagement, follower data)
-
Meta/communication data (e.g., device information, IP addresses)
How We Use Personal Data
Purposes of Processing
-
Provision of AI-powered content creation services
-
Management of social media accounts on behalf of clients
-
Setup, management, and optimisation of paid advertising campaigns (Meta Ads, Google Ads)
-
Provision of the website, its contents, and functions
-
Service communications and policy updates
-
Responding to enquiries and client support
-
Fulfilment of contractual obligations
-
Detection and prevention of technical errors or fraud
-
Marketing, advertising, and market research
-
Security measures
Data Collected Through Specific Channels
a) Visiting the Website
We collect data about each visit via server log files, including: IP address, pages accessed, date and time of access, data transferred, browser type and version, operating system, and referrer URL. This data is used for statistical evaluation, security, and optimisation purposes only.
b) Service Enquiries
When you register interest on the website, we collect your name, email address, phone number, and pseudonymised IP address for the purpose of responding to your enquiry.
c) Contacting Us
When you contact us by email or through our website, your name, email address, and message content are stored for the purpose of processing your request and any follow-up communication.
d) Contractual Services
We process inventory data, contract data (including services used, contact persons, and payment information) to fulfil our contractual obligations. For paid advertising clients, this includes access to ad account data and campaign performance metrics. For social media management clients, this includes account access and analytics data.
e) Paid Advertising Campaigns
When managing paid advertising on behalf of clients (via Meta Ads Manager or Google Ads), we may process data relating to campaign performance, audience targeting parameters, and ad spend. This data is used exclusively for the purpose of managing and optimising campaigns on behalf of the client. Such data may be processed by Meta Platforms Inc. and Google LLC as third-party platforms; their respective privacy policies apply.
f) Website Analytics and Tracking
Our website uses cookies and analytics tools to measure usage behaviour anonymously. Details are provided below under 'Use of Service Providers'.
g) Hosting
Our website is hosted via Wix.com. Unless otherwise stated, access data and form submissions are processed on Wix servers. Wix acts as a data processor on our behalf. For details, refer to Wix's privacy policy at wix.com/about/privacy.
Use of Service Providers
The Company uses the following third-party service providers who may process personal data on our behalf:
Wix
Our website is built and hosted on the Wix platform. Wix processes website visitor data including IP addresses and usage data as part of website hosting and functionality. Wix is GDPR-compliant and acts as a data processor under a Data Processing Agreement.
Google Analytics
We use Google Analytics (provided by Google LLC) to measure and evaluate website usage. IP addresses are anonymised prior to transmission. Data may be transferred to Google servers in the USA. You can opt out of Google Analytics data collection via: http://tools.google.com/dlpage/gaoptout?hl=en.
Meta Ads Manager
For clients who engage our paid advertising services, we use Meta Ads Manager to create, manage, and optimise advertising campaigns on Facebook and Instagram. Campaign data, audience data, and performance metrics are processed through Meta's platform. Meta Platforms Inc. acts as an independent data controller for data processed through its advertising platform. Meta's Data Policy applies to data processed within its systems.
When We Disclose Your Personal Data
We may disclose your personal data in the following circumstances:
-
In response to your business enquiry or request, within the Company, to provide the best service possible
-
To third-party service providers who assist in delivering our services (e.g., Wix, Google Analytics, Meta), under data processing agreements
-
To legal or professional advisors where required
-
Where required by law, court order, or regulatory authority
-
To prevent fraud or crime, or to protect the rights, property, or safety of the Company, its staff, or users
We do not sell personal data to third parties.
Data Retention
Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements.
Under UK GDPR and the Data Protection Act 2018, the default standard retention period is 6 years plus the current year (6+1). We are legally required to retain basic customer information (including contact, identity, financial, and transaction data) for up to 6 years after ceasing to provide services, for tax and compliance purposes.
Where anti-money laundering obligations apply, records may be retained for up to 7 years after ceasing to provide the relevant service.
Cross-Border Data Transfer
Some data processing may involve cross-border transfers, including to the USA (e.g., via Google Analytics or Meta Ads Manager). In such cases, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements. Commissioned data processors are contractually obligated to process personal data only in accordance with applicable data protection laws.
Your Rights
Right to Access
You may request information as to whether we are processing personal data about you. If so, you have the right to access that data and receive further information as referred to in Article 15 of the GDPR.
Right to Rectification
You have the right to have inaccurate personal data corrected, and incomplete personal data completed, in accordance with Art. 16 GDPR.
Right to Erasure
You have the right to request that we delete your personal data without undue delay, in particular where: the data is no longer necessary for the purposes for which it was collected; you withdraw consent and there is no other legal basis for processing; or the data has been processed unlawfully. The right to erasure does not apply where the data is required for the establishment, exercise, or defence of legal claims.
Right to Restriction of Processing
You have the right to request restriction of processing in certain circumstances, including where the accuracy of the data is contested, the processing is unlawful, or you have objected to processing pending verification of legitimate grounds.
Right to Data Portability
You have the right to receive personal data you have provided to us in a structured, commonly used, and machine-readable format, and to transfer that data to another controller, where processing is based on consent or contract and is carried out by automated means.
Right to Withdraw Consent
Where processing is based on consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
Right to Complain
You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the supervisory authority for data protection in the UK, at any time: www.ico.org.uk. We would appreciate the opportunity to address your concerns before you contact the ICO; please reach out to us in the first instance.
If you make a Data Subject Access Request, we have one month to respond. To exercise any of your rights, please contact us at info@kl-marketingsolutions.com.
Data Security
Our website is transmitted via a secure SSL/TLS connection (encrypted) between our server and your browser. We employ rights management systems, 2-factor authentication, internal encryption, and certified server operators to maintain a high level of data security.
All data is processed on servers within the UK unless otherwise stated in this policy. We cannot accept liability for the disclosure of data due to errors or unauthorised access by third parties beyond our reasonable control.
Children
Our website and services are not directed at persons under the age of 18. We do not knowingly collect data from persons under 18. If you are a parent or guardian and become aware that your child has provided us with personal data, please contact us so we can arrange deletion of that data.
Questions About Data Protection
KL Marketing Solutions LTD (trading as Karina L.) complies with all applicable legal data protection obligations. All staff and contractors are required to comply with relevant regulations on data protection and data security. Questions regarding data protection can be directed to us at any time at info@kl-marketingsolutions.com.
Last updated: June 2026