Privacy notice
Last updated: 21 October 2026
This notice explains what happens to your information when you visit kivva.com before KIVVA launches, join the waiting list, or ask for the free UK festival list.
Who we are
KIVVA is run by Constantin Ungureanu, trading as KIVVA, in the United Kingdom. Constantin Ungureanu is responsible for your information (the "data controller").
To ask about your information or to use any of your rights, write to us through our contact page or reply to any email we send you.
What we collect and why
| What | Why | Legal basis |
|---|---|---|
| Your email address, your first name (festival list only), the date and time you signed up, and the list you joined | To send you what you asked for: the festival list and our UK gig opportunity emails, or the email when KIVVA opens. We use your first name to greet you in our emails | Your consent, which you give when you sign up |
| Whether you open our emails and click their links | To see which emails are useful and improve them | Your consent: the sign-up form tells you about this before you sign up. You can unsubscribe at any time |
| A check that you are a person, run by Cloudflare Turnstile when you send a form | To stop automated sign-ups | Our legitimate interest in keeping the lists free of spam |
| How you use the website (pages viewed, rough location from your internet address, device and browser type) through Google Analytics | To count visits and improve the pages | Your consent, given in the cookie banner |
| Visits and sign-ups measured by the Meta Pixel | To measure our Facebook and Instagram ads and show them to people likely to be interested | Your consent, given in the cookie banner |
You do not have to give us your email address. Without it we cannot send you the list or the emails. We do not make automated decisions about you that have legal or similar effects.
Who we share it with
We use these services to run the website and the emails. Each one handles your information under its own terms:
- MailerLite (MailerLite Limited, Dublin, Ireland) stores the email list and sends our emails. It stores data with Google Cloud in the Netherlands and may process it in other countries where it or its suppliers work, under the UK's approved transfer safeguards.
- Google Analytics (Google Ireland Limited) measures visits for us, only if you accept analytics in the cookie banner. Google says it does not log or store individual internet addresses of UK and EU visitors.
- Meta (Meta Platforms, Inc. for UK visitors; Meta Platforms Ireland Limited for EU visitors) receives information from the Meta Pixel, only if you accept it in the cookie banner. Meta and KIVVA are jointly responsible for collecting this information and sending it to Meta; after that, Meta uses it under its own privacy policy. You can control the ads you see in your Meta ad preferences.
- Cloudflare (Cloudflare, Inc.) hosts the website, handles requests to it, and runs Turnstile, the check that you are a person.
Some of these companies are based in, or use suppliers in, the United States or other countries outside the UK. Where your information leaves the UK, it is protected by the safeguards the UK approves, such as the International Data Transfer Addendum to the EU standard contractual clauses.
We never sell your information.
How long we keep it
- Email list: while you are subscribed. If you unsubscribe, we keep your email address on a "do not email" list so you are not added again by mistake, and delete the rest. You can ask us to delete it entirely.
- Google Analytics: 2 months after your last visit, then deleted by Google.
- Meta: under Meta's own retention rules.
Cookies and similar technology
When you first visit, we ask whether you accept analytics and advertising cookies. Nothing from Google Analytics or Meta loads until you accept. You can change your mind at any time with the "Cookie settings" link at the bottom of every page.
| Name | Set by | Purpose | How long |
|---|---|---|---|
| kivva.choice (stored in your browser, not a cookie) | KIVVA | Remembers your cookie choice | 6 months |
| kivva.sent (stored in your browser for this visit only, after you accept) | KIVVA | Counts a sign-up once on the thank-you page | Until you close the tab |
| _ga | Google Analytics | Tells visitors apart | 2 years |
| _ga_[ID] | Google Analytics | Keeps the state of a visit | 2 years |
| _fbp | Meta Pixel | Recognises a browser for ad measurement | 90 days |
Your rights
You have the right to:
- be told how we use your information (this notice);
- get a copy of your information;
- have wrong information corrected;
- have your information deleted;
- limit how we use it;
- get it in a format you can move elsewhere;
- object to how we use it;
- withdraw your consent at any time, for example by unsubscribing or changing your cookie choice. This does not affect what we did before you withdrew it.
To use any of these rights, contact us as shown above. We will reply without undue delay and within one month.
If you are unhappy with how we handled your information, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint or 0303 123 1113.
Changes
If we change this notice, we will update the date at the top. If a change matters to you, we will tell you by email.