Legal
Privacy Policy
Last updated 23 September 2026
This policy explains what personal data KWL holds, why, who else sees it, and the choices you have. In short: we collect what you give us through our forms, what your account needs to work, and business contact details for research outreach. We use it to reply to you and run the service, and we never sell it.
Who we are
This website and the Cadence products are operated by KWL Intelligence Pte. Ltd. (“KWL”, “we”, “us”), a company registered in Singapore (No. 201525543R). We are the data controller for personal data collected through this site. You can reach us at hello@knowwhatsloved.com.
What we collect
We collect personal data in four ways:
- Information you give us through forms — when you make an enquiry, request a report or invoice, or subscribe to Field Notes. This can include your name, work email, company, role, phone number, country, billing details (such as VAT/tax ID and purchase-order reference) and whatever you write in a message.
- Your account — whether you registered for free or bought something. The email address you sign in with, your name, your company if you give it, and optionally your role, your location and the markets and sectors you asked us to watch. The short-lived tokens behind sign-in links and sessions, and the access key that connects the Cadence Skill. If you bought something: the identifier our payment provider assigns you, and a record of what you bought and for which markets. If you did not, those two are simply absent — there is no payment record for a free account because there was no payment.
- Business contact details we have gathered ourselves — name, role, employer and a professional profile or address, for a small number of people at organisations we think Cadence is relevant to. This is the only category we do not get from you directly, and it has its own section below.
- Limited technical data — basic information your browser sends (such as IP address) and that our hosting and form providers log to deliver and secure the service. We use privacy-friendly, cookieless analytics (Plausible) to measure traffic; we run no advertising or tracking cookies.
Our data products themselves contain no personal data. Cadence reads public and official sources (streaming and screen charts, search and attention indices, news tone, official macro statistics); there are no survey panels and no individual-level data.
Why we use it, and our legal basis
- To respond to you and provide our services — answering enquiries, sending reports and invoices, and administering subscriptions. Legal basis: performance of a contract, or our legitimate interest in responding to business enquiries.
- To send Field Notes, if you ask us to. Legal basis: your consent. You can unsubscribe at any time using the link in any email.
- To run your account — signing you in, recording what you hold, and letting the Cadence Skill answer for the markets you hold, whether you registered for free or bought them. Legal basis: performance of our contract with you. A free account is still a contract: you accepted terms and we owe you the service, and nothing here depends on whether money changed hands.
- We do not run product analytics. We do not record which questions you ask the Cadence Skill, which markets or sectors you look at, which tools your assistant calls, or anything we could use to build a picture of your interests. There is no analytics store to describe, and no legal basis is claimed for one, because none is needed for something we do not do. If that changes we will say so here before it starts, not after.
- To bound abuse of the Cadence Skill — a count of how many calls each access key has made in the current hour, kept for a short period and then discarded. It records how many, never what: no question, no market, no answer. Legal basis: our legitimate interest in keeping a service we give away from being exhausted by one caller. We weighed that against the intrusion, which is why the count is attached to a key rather than to a person, holds no content, and is never read for any purpose but refusing the next call.
- To approach a small number of people about research and about Cadence. Legal basis: our legitimate interest in reaching the professionals our product is built for. We weighed that against the intrusion, which is why these are business contacts in a professional capacity only, why the lists are small and hand-built rather than bought, and why one objection ends it permanently. You can object at any time, with no reason, and we will delete the record.
- To keep the service secure and meet our legal and accounting obligations. Legal basis: legitimate interests and legal obligation.
Cookies and local storage
We do not use tracking or advertising cookies and we show no cookie banner because none is required. The site stores a few preferences (your chosen palette, language and report cart) in your browser’s local storage; these stay on your device and are not sent to us as personal data.
Who we share it with
We share personal data only with the providers that run the service, under contract and only as needed. These are all of them:
- Cloudflare, Inc. (United States, processing in its global network including the EU) — hosts the website, runs the account endpoints, and stores the account database.
- Paddle.com Market Ltd (United Kingdom) — our payment provider and Merchant of Record, which means Paddle is the seller for your purchase. It handles payment, tax and billing data. Paddle is a separate controller for that data and its own privacy notice applies alongside this one.
- Resend (United States) — sends our transactional email (sign-in links, order confirmations) and our mailing lists.
- Plausible Analytics (European Union) — privacy-focused website analytics. It sets no cookies and does not track visitors between sites.
- Prighter EU Rep GmbH (Austria) — our representative in the EU under Article 27 of the GDPR. It receives your details only if you choose to contact us through it, and passes them to us so we can answer you.
We do not sell personal data and we do not share it for anyone else's marketing. We may disclose data where the law requires it.
That list is the whole list. This site loads no fonts, scripts, tags or images from anyone else: the typefaces are served from our own servers, so your browser makes no request to Google or any other third party while you read this page. Until 24 September 2026 the fonts came from Google, which disclosed your IP address to them on every page view; that is no longer the case.
International transfers
KWL is registered in Singapore, which has no adequacy decision from the European Commission, and several of our providers are in the United States. So personal data does leave the UK and EEA. Where it does, we rely on:
- Standard Contractual Clauses for transfers to KWL in Singapore and to our providers in the United States, with the supplementary measures those clauses require.
- The UK adequacy decision for Paddle, which is established in the United Kingdom.
- No transfer for Plausible, which processes in the European Union.
You can ask us for a copy of the safeguards that apply to any of these at hello@knowwhatsloved.com.
How long we keep it
We keep enquiry data for as long as needed to deal with your request, and afterwards only as long as legal, tax and accounting rules require. Mailing-list data is kept until you unsubscribe.
Account data is kept while you hold access. Because an edition you buy does not expire, we keep the record of what you hold indefinitely unless you ask us to close the account. Sign-in tokens are short-lived and are deleted once used or expired. A Skill access key is kept until you or we revoke it.
Business contact details we gathered ourselves are kept for up to twelve months from the last contact, and deleted immediately if you ask or if you tell us you are not interested.
If we contacted you and you never gave us your details
We keep small, hand-built lists of people we think Cadence is relevant to: strategy, planning, insight and brand leads at agencies and consumer brands in the European markets Cadence covers. If we have written to you out of the blue, this section is the one that applies to you, and the law requires us to tell you the following whether or not you ask.
- What we hold — your name, your role, your employer, and a professional profile or work address. Nothing personal beyond your job, and no special-category data.
- Where we got it — public professional sources, chiefly LinkedIn and company websites, together with introductions from people we know in common. We do not buy lists and we do not scrape at scale.
- Why — to ask whether you would take part in our research on how strategy teams read European markets, and to introduce Cadence. Legal basis: our legitimate interests, as set out above.
- How long — up to twelve months from our last contact with you, and less if you ask.
- How to stop it — reply to any message, or write to hello@knowwhatsloved.com, and say so. We will delete your record and you will not hear from us again. You do not have to give a reason, and you have the right to object under Article 21 of the GDPR.
You have the same rights over this data as anyone else has over theirs, including the right to see what we hold and to have it corrected or erased.
Your rights
Subject to applicable law (UK/EU GDPR and Singapore’s PDPA), you can ask us to access, correct, delete or export your personal data, to restrict or object to certain processing, and to withdraw consent. To exercise any of these, email hello@knowwhatsloved.com and we will respond within the time the law allows.
If you are in the EU you can also use the portal run by our representative, which walks you through the request: app.prighter.com. Either route works and neither is required. Writing to us directly is always enough, and we will not ask you to go somewhere else to make a request you have already made.
If you are in the UK or EU and believe we have mishandled your data, you may complain to your local supervisory authority (in the UK, the Information Commissioner’s Office). In Singapore, the relevant authority is the Personal Data Protection Commission.
Our representative in the EU
KWL is established in Singapore and offers its services to people in the European Union, so we are required to designate a representative in the EU under Article 27 of the GDPR. We have appointed Prighter EU Rep GmbH, Schellinggasse 3/10, 1010 Vienna, Austria (company number FN 639035h), part of the Prighter Group.
You can reach our representative, and exercise any of the rights above, through their portal. You can also write to us directly at hello@knowwhatsloved.com — the choice is yours, and going through the representative is not a condition of anything. Neither route limits your right to complain to the supervisory authority in your own country.
Security
We take reasonable technical and organisational measures to protect personal data. No method of transmission or storage is completely secure, but we work to keep what you share with us safe.
Changes
We may update this policy from time to time. The “last updated” date above always reflects the current version, and we will flag material changes where appropriate.
Questions? hello@knowwhatsloved.com · See also our Privacy Policy and Terms.