Privacy notice

Last updated: 12 September 2026

Who we are

Kazap Technologies Ltd is registered in England and Wales, company number 08218660, VAT GB226623908, registered office Wellesley House, Duke of Wellington Avenue, Royal Arsenal, Woolwich, London SE18 6SS. Write to us at marcelo@kazap.co.uk.

We are the data controller for personal data processed through this website and through the YLB Score service. This notice covers both, because the service is the reason the website exists.

This website collects almost nothing

There is no analytics script, no tracking pixel, no advertising technology, no form and no account system on this site. It runs no code in your browser at all. Personal data reaches us in two ways only:

• Email you send us. If you ask for a check, we receive your email address, your name if you include it, and the website address you send. We use it to do the check and to send you the report. The lawful basis is our legitimate interest in responding to your request and, if you later ask us to do paid work, the performance of that contract.
• Server and security logs. Our hosting and Cloudflare, which sits in front of this site to protect and deliver it, keep short-lived technical logs (IP address, page requested, browser type) for security and abuse prevention. The lawful basis is our legitimate interest in running a secure service. The logs are rotated automatically and are not used to profile visitors.

The check itself, and the businesses we look at

A YLB Score report is built from two public sources: the public pages of a business website, read the way any visitor or search engine reads them, and public records that name the business, chiefly the Companies House register. We do not log in to anything, we do not test for weaknesses, and we send nothing to the website beyond an ordinary page request.

Most of what a report contains is information about a business, not a person. Where a business is a sole trader or a very small company, some of that information (a name, a trading address) is also personal data. We process it on the basis of our legitimate interest in offering local businesses an honest assessment of their public presence. We keep it to business-level facts: we do not collect officers' dates of birth, home addresses we can recognise as such, or anything from behind a login. We do not buy data, and we do not sell or share what we hold.

If we contact a business we have not spoken to before, we do so once, by email, with the report itself, and we say plainly how we built it. Reply and we reply; do not, and we do not chase. If you would rather we did not hold a report on your business at all, say so and we will delete it.

Reports we host

A report is delivered as a link to a page on this site. The link is private to the address it was sent to: it is not listed anywhere, search engines are told not to index it, and it loads nothing from any third party. The page itself sends nothing back to us; we do not record when or whether a report is opened.

Who we share it with

Nobody, beyond the processors needed to run the service: Cloudflare, Inc. (delivery and protection of this site) and Microsoft Ireland Operations Ltd (our email). Both process data under their standard data-protection terms. We do not sell or rent personal data, and we never will.

How long we keep it

Email correspondence is kept while the conversation, or any work that follows it, is live, and for up to six years afterwards where it forms part of our business records (a period set by UK tax and limitation rules). A report and the evidence behind it are kept for as long as they are the current picture of that business, so that we can stand behind what we said; a business can ask us to delete its report at any time. Technical logs are kept for days, not months.

Your rights

Under UK GDPR you have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to its processing, and to data portability. Write to marcelo@kazap.co.uk and we will respond within one calendar month. If you are not satisfied with our answer, you can complain to the Information Commissioner's Office at ico.org.uk.

International transfers

Our processors may handle limited technical data outside the UK. Where they do, the transfer is covered by UK adequacy regulations or the processor's international data transfer safeguards.

Cookies

None. The cookies page says so at more length.