Privacy Policy

Who we are

KBR Global Creative Consulting Ltd (KBR Global, "we", "us") is a creative and engineering studio registered in Gibraltar. Our address is Suite 4.3.02, Block 4, Eurotowers, Gibraltar GX11 1AA. We are the data controller for the personal data described in this policy.

For anything about your data, write to info@kbr.global. A person reads that inbox.

What this policy covers

It covers the website at kbr.global and everything you can do on it: reading pages, sending the contact form, submitting the free website brief, and talking to Kai, our chat agent, on the contact page. It also covers the email and WhatsApp conversations that start from those pages.

Work we do for clients under a signed proposal is governed by that proposal and any data processing terms in it, not by this page.

Data you give us

Two forms on this site ask for personal data. You decide what to type; nothing is collected in the background.

• Contact form: your name, your business name, how to reach you (an email address or a WhatsApp number), what you need, and a budget range if you choose one.
• Free website brief: your name, your business, what you sell, where you want us to reply and the address or number for it, the goal of the site, who your customers are, where you are based, and a link to anything you already have.

We use this to answer you, to understand the project, to prepare a proposal or the free website, and to deliver it. The legal basis is the steps we take at your request before a contract, and our legitimate interest in running the studio and replying to people who write to us.

We keep an enquiry until it is closed: either you became a client, or the conversation ended. After that we keep only what the law requires us to keep, such as invoices and contracts for accounting, and delete the rest.

We do not send marketing to a contact address without your separate, explicit permission. Replying to your enquiry is not marketing.

Kai, the chat on our contact page

Kai is our own AI agent. When you write to Kai, the conversation is stored by KBR Global so Kai can answer you, keep the thread when you come back, and follow up on the channel you chose. A person at KBR Global may read the transcript to continue the conversation or to check Kai's work.

Kai writes its replies with a language model from an external provider. Your messages are passed to that provider only to produce the answer. We will name the provider in this section before the chat runs on the production site.

Please do not paste passwords, card numbers or health details into the chat. If you want a transcript deleted, write to info@kbr.global and we will remove it.

Data collected automatically

The site is served through Cloudflare. To deliver pages and to keep bots and attacks out, Cloudflare processes your IP address, browser type, and the pages requested, and keeps short-lived server logs. This is needed to run the site and needs no consent.

The site's fonts are hosted with the site itself, so loading them does not send your browser to a font provider.

Cookies, analytics and advertising

By default the site sets only what it needs to work: your cookie choice, stored in your browser, and the security cookie Cloudflare may set to tell people from bots.

Analytics (Google Analytics 4 through Google Tag Manager) and advertising measurement (Google Ads and Meta) run only after you switch them on. You can switch them off again at any time under "Cookie Settings" in the footer. The full list is on the cookies page.

Who we share data with

We do not sell personal data and we do not trade it. We share it only with:

• Cloudflare, which hosts and protects the site.
• The language model provider behind Kai, for your chat messages, as described above.
• Google and Meta, only for the tags you have switched on.
• Our accountants, lawyers and insurers when we need their advice, under confidentiality.
• Courts or authorities when the law obliges us to.

Messages from the forms arrive in our mailbox at info@kbr.global, so our email provider handles them in transit.

International transfers

We are in Gibraltar. Cloudflare, Google and Meta run data centres around the world, including in the United States, so data can leave Gibraltar, the United Kingdom and the European Economic Area. Where that happens we rely on the safeguards those companies offer under GDPR and UK GDPR, such as standard contractual clauses and data privacy frameworks approved by the relevant authorities.

Security

The site is served over HTTPS. Form data and chat transcripts are stored in systems that only KBR Global staff can reach, protected by access controls. No system is perfectly secure, and we will tell you and the regulator if a breach affects your data as the law requires.

Your rights

Under GDPR and UK GDPR style rules, which Gibraltar follows, you can ask us to:

• tell you what data we hold about you and give you a copy (access);
• correct data that is wrong (rectification);
• delete your data (erasure);
• stop using it for a while (restriction);
• send it to you or another company in a usable format (portability);
• stop using it for a purpose you object to (objection);
• withdraw consent you gave earlier, for example for analytics, without affecting what happened before.

Email info@kbr.global and we will answer within one month. If you are not satisfied, you can complain to the Gibraltar Regulatory Authority, the data protection authority for Gibraltar, or to the authority in the country where you live.

Children

This site is for businesses and is not aimed at anyone under 16. We do not knowingly collect data from children. If you believe a child has sent us data, write to info@kbr.global and we will delete it.

Changes to this policy

When we change how we handle data, we update this page and the date at the top. For a change that matters to you, such as a new processor or a new purpose, we say so in the section it affects.