1. Who we are
Kawze is an uptime monitoring service operated by Peterbrook Trading Ltd, a company registered in England and Wales under company number 15540069, with its registered address at Peterbrook Close, Redditch, B98 7YF, United Kingdom ("Kawze", "we", "us", or "our"). We are the data controller for the personal data described in this Privacy Policy, except where we act as a data processor as explained in Section 4 below.
This Privacy Policy explains what personal data we collect when you visit the Kawze website or use our website monitoring and HTTP endpoint monitoring service, why we collect it, and the choices and rights you have. It should be read alongside our Terms and Conditions, Data Retention Policy, and GDPR Data Processing Agreement.
Kawze is intended for business and professional use and is not directed at children.
2. Personal data we collect
Account information
When you sign up for Kawze, we collect your name, email address, password (stored securely, never in plain text), and, where you add colleagues, the name, email address, and role of each team member on your account. Team membership is unlimited on every plan, so we may hold this data for any number of users you invite.
Monitor and endpoint configuration
To run uptime monitoring and HTTP endpoint monitoring checks on your behalf, we store the URLs, ports, HTTP methods, custom headers, and expected status codes you configure for each monitor. Where you choose to supply authentication credentials so we can monitor a protected endpoint, we store those credentials solely to perform the checks you have configured.
Alert and notification contacts
We store the email addresses and, where SMS alerting is configured, phone numbers of contacts you designate to receive downtime alerts. You are responsible for having the appropriate permission to provide us with third-party contact details for alerting purposes.
Status page subscriber data
Where you enable subscriptions on a branded status page, subscriber email addresses are collected directly from your status page visitors. In this context we act as a data processor on your behalf - see Section 4.
Billing information
For paid tiers, we collect billing contact details and transaction metadata. Card payment details are collected and processed directly by Stripe, our payment processor, and are not stored on Kawze's own systems.
Technical and usage data
Like most online services, we automatically collect IP address, browser and device information, login timestamps, and records of actions taken within the dashboard (such as creating or editing a monitor), to operate and secure the Service.
3. Why we use your data, and our lawful bases
- Contract: to create and administer your account, run the uptime monitoring checks you configure, deliver alerts, and provide status pages and billing.
- Legitimate interests: to secure and improve the Service, detect and prevent misuse of our monitoring infrastructure, and communicate essential service and account information.
- Consent: for optional marketing communications and status page subscriptions. You can withdraw consent at any time.
- Legal obligation: to meet our tax, accounting, and regulatory obligations.
4. When we act as a data processor
For most personal data described above, Kawze is the data controller. However, where you operate a Kawze status page and enable subscriber updates, we process the personal data of your status page subscribers on your behalf as a data processor - you are the data controller for that data. This processing is governed by our GDPR Data Processing Agreement, and subscribers should direct data protection requests about that data to you as the status page owner in the first instance.
5. Sub-processors and third-party sharing
We do not sell personal data. We share personal data only with trusted sub-processors who help us deliver the Service, under appropriate contractual data protection terms:
| Purpose | Provider |
|---|---|
| Cloud hosting and infrastructure | Microsoft Azure |
| Database storage for monitor and check data | MongoDB Atlas |
| Email delivery | Azure Communication Services |
| SMS alert delivery | Azure Communication Services (UK Mobile Number sender) |
| Payment processing | Stripe |
A full, current list of sub-processors is also maintained in our GDPR Data Processing Agreement. We may also disclose personal data where required by law, to protect our rights or the rights of others, or in connection with a merger, acquisition, or sale of business assets.
6. Cookies
We only use strictly-necessary cookies, such as your session cookie, required for the Kawze dashboard to function - we do not use analytics, advertising, or other non-essential cookies. You can manage or disable cookies through your browser settings; disabling essential cookies may prevent parts of the dashboard from working correctly.
7. International data transfers
Kawze's monitoring infrastructure is primarily based in the UK and West Europe. Where personal data is processed by a sub-processor outside the UK or European Economic Area, we ensure appropriate safeguards are in place, such as adequacy decisions or standard contractual clauses.
8. Data retention
We retain account, monitor, and check data for as long as your account is active and, for check logs and uptime summaries, according to the retention periods set out for your plan tier in our Data Retention Policy. Billing records are kept for the periods required by tax law. Backup copies are retained briefly and securely before deletion.
9. Your rights
Under UK GDPR, you have the right to:
- access the personal data we hold about you;
- request correction of inaccurate data;
- request deletion of your data, subject to our legal retention obligations;
- restrict or object to certain processing;
- request a portable copy of your data; and
- withdraw consent at any time where we rely on consent.
To exercise any of these rights, submit a GDPR Data Request or contact us at [email protected]. If you are not satisfied with our response, you have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.
10. Security
We use appropriate technical and organisational measures - including encryption, access controls, and monitoring - to protect personal data processed through our uptime monitoring and website monitoring service. No system is completely secure, but we take reasonable steps consistent with industry practice.
11. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be notified to active customers by email or in-app notice; the "Last updated" date at the top of this page reflects the most recent revision.
12. Contact us
Questions about this Privacy Policy or how Kawze handles personal data can be sent to [email protected].