Privacy Policy

1. Who we are

Khai Advisory (“we”, “us”) is an independent advisory brand.

This website and the related data processing activities are operated by Paolo Testa, acting through an Italian sole proprietorship.

Country of establishment: Italy
VAT number (P. IVA): 04299831208
Contact: hello@khaiadvisory.com

2. What data we collect

We may collect and process the following categories of personal data:

• Contact data you provide voluntarily, such as your name, email address, company name, and message content.
• Technical and usage data that may be processed when you access the website, such as IP address, browser type, device information, referring pages, and basic server or security logs.
• Communication and follow-up data if you contact us and further exchanges take place by email or through related business communications.

We do not knowingly request sensitive personal data. Please do not send sensitive, confidential, or unnecessary personal information through the contact form or by email.

3. Why we use your data

We use personal data to:

• respond to inquiries and requested communications;
• assess whether a potential engagement is relevant to our scope of services;
• manage pre-contractual exchanges and, where applicable, client or project communications;
• operate, secure, maintain, and improve the website and related communications infrastructure;
• meet ordinary legal, administrative, and record-keeping obligations.

4. Legal basis (GDPR)

Where the GDPR applies, personal data may be processed on one or more of the following legal bases, depending on the context:

• your consent, where consent is specifically requested;
• our legitimate interests in responding to business inquiries, operating the website, and protecting its security;
• steps taken at your request prior to entering into a contract;
• compliance with applicable legal obligations, where relevant.

5. How long we keep data

We retain personal data only for as long as reasonably necessary for the purposes described in this policy, including responding to inquiries, managing follow-up communications, maintaining ordinary business records, and meeting legal or administrative obligations.

In general, inquiry-related communications are kept only for as long as needed to evaluate and manage the relevant contact or relationship, unless a longer retention period is required for legal, contractual, security, or record-keeping reasons.

6. Cookies and analytics

The website may use technical measures, essential cookies, or similar technologies required for basic functionality, security, performance, and protection against abuse.

If analytics, tracking, or additional cookie-based tools are enabled in the future, this page will be updated accordingly.

7. Sharing and international transfers

We do not sell personal data.

Personal data may be processed by selected service providers that support website hosting, website security, form handling, email delivery, and related technical infrastructure. These may include providers used to operate the website and contact workflows.

Depending on the technical infrastructure of those providers, personal data may be processed outside your country of residence. Where required, appropriate safeguards are relied upon for international data transfers.

8. Your rights

Depending on your location and applicable law, you may have rights to access, correct, delete, restrict, or object to the processing of your personal data, withdraw consent where processing is based on consent, request portability, and lodge a complaint with a competent supervisory authority.

To exercise your rights or make a privacy-related request, contact: hello@khaiadvisory.com

9. Security

We apply reasonable technical and organizational measures to protect personal data. No method of transmission or storage is completely secure.

10. Changes

This Privacy Policy may be updated from time to time. The latest version will be posted on this page.