Privacy notice for the Kavana mailing list
Short version: we keep your name and email to tell you about Kavana, and nothing else.
Who we are
Kavana Clinic Ltd, registered in England and Wales, company number 17484323. We are the data controller for the mailing list. Contact: [email protected]. We are registered with the Information Commissioner's Office (ICO), registration number ZC262426.
What we collect and why
Your first name and email address, so we can send you practical ADHD emails, news about the app, and tell you when coaching and the clinic open. The legal basis is your consent, given when you tick the box on the form.
We do not ask for, and do not want, any health information on the mailing list. Please do not include it in any message to us at this stage.
Where it is stored
Your details are stored in EmailOctopus, our email service provider, which processes data on our behalf under a written agreement. The website itself is hosted on Cloudflare. We use Cloudflare Web Analytics to count visits and see which pages are read. It does not use cookies, does not follow you across other websites and does not identify you. The free Kavana app does not use any analytics. Our emails record whether they were opened and which links were clicked, so we can see which emails are useful and stop emailing people who never read them. You can block this by turning off images in your email app. We do not use advertising trackers on this site.
Cookies
This website does not set cookies of its own and does not use advertising or tracking tools.
Our fonts are stored on our own website, so loading a page does not contact Google or any other font service. The sign-up form uses Google reCAPTCHA, through EmailOctopus, to stop spam sign-ups; when the form loads, your browser connects to Google, which may set a security cookie. Videos on this site come from YouTube in its privacy-enhanced mode and only load when you press play; YouTube then applies its own privacy policy. If we add live chat or anything else that uses cookies for other purposes, we will ask for your consent first and update this notice.
How long we keep it
Until you unsubscribe, or until two years after our last email to you if you have not opened any. Every email has an unsubscribe link, and you can also email us to be removed.
Your rights
You can ask for a copy of what we hold, ask us to correct or delete it, or withdraw consent at any time by emailing [email protected]. If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office at ico.org.uk.
If you send us a message
When you use the contact form, your first name, email address and message are passed to Web3Forms, which delivers them to our inbox at [email protected] and deletes its own copy after 7 days. We use them only to reply to you. The legal basis is our legitimate interest in answering your question. Messages are kept in our Google Workspace email for up to two years, then deleted. Please do not include health details.
If you apply to work with us
If you email us about a role, we use your CV and the details you send to consider you for it and to contact you. The legal basis is taking steps, at your request, towards a possible contract with you. Applications are held in our Google Workspace email and are only seen by the people involved in recruiting. We keep them for 12 months after the role is filled and then delete them, unless you ask us to keep yours for future roles. Checks such as references and a DBS check only happen if we offer you a role, and we tell you about them first.
When the clinic opens
Patients of the clinic will be covered by a separate, fuller privacy notice that explains how clinical records are held. Joining the mailing list does not make you a patient and creates no clinical record.
Last updated: 30 September 2026.