Karavel Privacy Policy

Last updated: 14 March 2025

At Karavel, we highly value your privacy and are committed to protecting your personal data. We ask that you carefully review this Privacy Policy before using our website, apps, or registering for our services. This document outlines our policies and practices regarding the collection, processing, and management of your personal information.

By visiting our website and using our services, you acknowledge you have read and understood the practices described in this Privacy Policy. Karavel Limited is the data controller of your personal data.

This Privacy Policy tells you what to expect us to do with your personal data.

What information we collect, use and why

We collect or use the following information to provide and improve products and services for clients:

  • Names and contact details
  • Addresses
  • Occupation
  • Payment details (including card or bank information for transfers and direct debits)
  • Transaction data (including details about payments to and from you and details of products and services you have purchased)
  • Usage data (including information about how you interact with and use our website, products and services)
  • Information relating to compliments or complaints
  • Account access information
  • Website user information

We collect or use the following personal information for the operation of client or customer accounts:

  • Names and contact details
  • Addresses
  • Purchase or service history
  • Account information, including registration details
  • Information used for security purposes
  • Technical data, including information about browser and operating systems

We collect or use the following personal information for information updates or marketing purposes:

  • Names and contact details
  • Addresses
  • Profile information
  • Purchase or account history

We collect or use the following personal information for dealing with queries, complaints or claims:

  • Names and contact details
  • Addresses
  • Account information
  • Purchase or service history
  • Call recordings
  • Relevant information from previous investigations
  • Customer or client accounts and records
  • Correspondence

Lawful bases and data protection rights

We have appropriate legal bases on which to collect, use and share data about you if you are a subscriber to our services. If you have any questions about the lawful bases upon which we collect and use your personal data, you can reach out using the details in the Contact Us section below.

Our lawful bases for collecting or using personal information are:

ActivityLegal Bases
To provide and improve products and services for clients
  • Contract - we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
  • Legitimate interests – we're collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:
For the operation of client or customer accounts
  • Contract - we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
For information updates or marketing purposes
  • Legitimate Interests - we're collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are to be able inform you of the latest developments and opportunities regarding our product, services and our company
For dealing with queries, complaints or claims
  • Legitimate Interests - we're collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are to adequately be able to consider and respond to your queries and complaints.

Which lawful basis we rely on may affect your data protection rights which are in brief set out below. You can find out more about your data protection rights and the exemptions which may apply on the ICO's website:

Your RightsDescription
Right of access

You have the right to ask us for copies of your personal information. You can request other information such as details about where we get personal information from and who we share personal information with. There are some exemptions which means you may not receive all the information you ask for.

Right to rectification

You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete.

Right to erasure

You have the right to ask us to delete your personal information.

Right to to restriction of processing

You have the right to ask us to limit how we can use your personal information.

Right to object to processing

You have the right to object to the processing of your personal data.

Right to data portability

You have the right to ask that we transfer the personal information you gave us to another organisation, or to you.

Right to withdraw consent

When we use consent as our lawful basis you have the right to withdraw your consent at any time.

Where we get personal information from

  • Directly from you
  • Regulatory authorities
  • Publicly available sources
  • Market research organisations

How long we keep information

How long we keep your information will depend on the purpose for which we use it. While you are a customer of ours, we will only retain your information for as long as is necessary for those purposes.

If you are no longer a subscriber of our services, we will delete your information from our systems. We may retain your information for a period of time after you have left our services, to comply with our legal obligations. We may also retain anonymised data for data analytics purposes, research and to gain insights about our clients.

Who we share information with

Others who we may share personal information with are:

  • Professional or legal advisors
  • Organisations we're legally obliged to share personal information with
  • Professional consultants

How to complain

If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice.


If you remain unhappy with how we've used your data after raising a complaint with us, you can also complain to the ICO.


The ICO's address:

Information Commissioner's Office
Wyclifee House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113

Website: https://www.ico.org.uk/make-a-complaint

Changes we make to our privacy policy

Any changes we may make to our Privacy Policy in the future will be posted on this page and, where we decide it is appropriate, notified to you by email. Please check back frequently to see any updates or changes to our Privacy Policy.

Contact us

If you have any questions about our privacy policy, please contact us at [email protected].