Privacy notice
KENNA Privacy Notice.
Website: business.kenna.rsvp · Last updated: 28 October 2026
This notice explains how personal information is collected and used when you contact KENNA through this website.
1. Who is responsible
This website is operated by Born of Fire Ventures Ltd, trading as KENNA. Born of Fire Ventures Ltd is a private limited company registered in England and Wales, company number 16565177, with its registered office at Flat 72 Ormonde Court, 364 Upper Richmond Road, London, England, SW15 6TP.
Born of Fire Ventures Ltd is the controller of personal information submitted through this website.
Questions about this notice, or requests relating to your information, go to guestlist@kenna.rsvp.
2. Information collected
Business enquiries. Name, email address, company or organisation, the nature of the enquiry, and anything else included in the message.
Introduction requests. Name, email address, city, the name of the person who introduced you, and anything else you choose to provide.
Information about other people. An introduction request may name another person. Name someone only if you are entitled to do so and they would expect it. KENNA may contact the person named to confirm the introduction, and in doing so shares only what is needed for that purpose.
Technical information. To protect the website against spam and misuse, KENNA processes a hashed version of your network address and the time of each submission. Hashed network addresses are pseudonymised, and remain personal data.
Administrator records. Account details and activity records of the people authorised to access enquiries are processed for security and accountability.
Please do not include sensitive personal information (such as health, religion, or political views) in a form unless it is genuinely necessary for your enquiry.
Providing information through the forms is optional. KENNA cannot respond to an enquiry or consider an introduction request without the details the form asks for.
3. Where information comes from
Information comes directly from you through the website forms. Where an introduction request names another person, information about that person comes from the individual who submitted the request.
4. How information is used, and the lawful basis
| Purpose | Lawful basis (UK GDPR) |
|---|---|
| Responding to business enquiries and considering potential partnerships | Legitimate interests (operating the business and replying to people who make contact). Where an individual asks about entering into an agreement, taking steps at their request before a contract is made. |
| Considering an introduction request and deciding whether to proceed | Legitimate interests (deciding who is introduced to KENNA and protecting the integrity of the introduction process). |
| Contacting a named introducer to confirm an introduction | Legitimate interests (verifying introductions). |
| Protecting the website against spam, misuse and unauthorised access | Legitimate interests (keeping the website and its records secure). |
| Keeping administrator records | Legitimate interests (security and accountability). |
| Complying with legal obligations and establishing, exercising or defending legal claims | Legal obligation, or legitimate interests. |
Where legitimate interests is relied on, those interests have been weighed against your rights and freedoms. You can ask for more detail at guestlist@kenna.rsvp, and you have the right to object (see section 10).
An introduction request does not guarantee an introduction to KENNA.
KENNA does not sell personal information. Information from these forms is not used to send marketing mailings. If that changes, KENNA will do so only where the law allows and, where the law requires it, with your consent.
No decisions are made about you by solely automated means.
5. Who receives information
Access to enquiries is limited to authorised KENNA administrators, who must authenticate, with permissions enforced on the server.
Technology providers process information on KENNA's behalf to run the website, store enquiries and handle email:
- Lovable and Lovable Cloud, for website hosting and the enquiry database. The database is hosted on infrastructure located in Ireland.
- Google Workspace, for receiving and managing email.
- Email delivery services, for sending notifications and replies connected to form submissions.
Other infrastructure providers may support delivery and security of the website. Providers act under contract and may use information only on KENNA's instructions.
Information may also be disclosed where the law requires, or where necessary to establish, exercise or defend legal claims.
6. International transfers
Some providers may process information outside the United Kingdom. Where this happens, the transfer must be covered by UK adequacy arrangements or by appropriate safeguards, such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. You can ask for information about the safeguards that apply to your information at guestlist@kenna.rsvp.
7. How long information is kept
| Information | Retention |
|---|---|
| Business enquiries that do not lead to a relationship | Reviewed for deletion 12 months after submission |
| Introduction requests that do not proceed | Reviewed for deletion 6 months after submission |
| Anti-spam technical records | Records older than 24 hours are removed by an hourly scheduled process |
| Administrator account and activity records | Kept while the account is active and for up to 12 months afterwards |
| Records of deleted enquiries (enquiry reference, dates, status and the administrator who deleted it, without the enquirer's name, email or message) | Kept only for as long as needed to demonstrate that deletion was carried out properly and to deal with any related query, complaint or legal claim, then deleted |
| Enquiries and requests that lead to an ongoing relationship | Kept for as long as the relationship continues, and afterwards for as long as needed to meet legal obligations or to deal with claims |
Personal information is kept only for as long as it is needed for the purposes it was collected for, and is then deleted, unless the law requires or permits KENNA to keep it for longer. The periods above are the points at which information is reviewed for deletion, and are counted from the date of submission. Enquiries and introduction requests are reviewed and deleted by an authorised administrator; they are not deleted automatically. When an enquiry is deleted, its status history and associated email notification are deleted too. Copies held in provider backups are overwritten in line with each provider's backup cycle.
You can ask KENNA to delete your information at any time (see section 10). If you ask KENNA to stop contacting you, a minimal record may be kept so that the request is honoured.
8. Security
KENNA applies technical and organisational measures intended to prevent unauthorised access to, or disclosure, alteration or loss of, personal information. These include authentication for administrators and server-side access controls on enquiry records. No internet-based service can guarantee absolute security. If a personal data breach occurs that is likely to result in a risk to people's rights and freedoms, KENNA will report it to the Information Commissioner's Office without undue delay and, where feasible, within 72 hours of becoming aware of it, and will inform affected individuals where the law requires.
9. Cookies and similar technologies
This website uses only cookies and similar technologies that are strictly necessary for it to operate, to keep it secure, and to authenticate administrators. It does not use advertising or analytics cookies, and the fonts used on this website are served from the website itself. If that changes, this notice will be updated and consent obtained before any non-essential technology is used.
10. Your rights
Under UK data protection law you may have the right to:
- ask for a copy of the personal information held about you;
- ask for inaccurate or incomplete information to be corrected;
- ask for your information to be deleted;
- ask for processing to be restricted;
- object to processing based on legitimate interests; and
- ask for information you provided to be sent to you or another organisation, where the conditions for portability are met.
These rights are subject to legal conditions and exceptions. To exercise a right, email guestlist@kenna.rsvp. KENNA will normally respond within one month. KENNA may ask for information to confirm your identity.
11. Links to other websites
This website may link to other websites. KENNA is not responsible for their privacy practices. Read their privacy information before giving them personal details.
12. Complaints
If you have a concern, please contact guestlist@kenna.rsvp first so that KENNA can put it right. You also have the right to complain to the Information Commissioner's Office, the UK data protection regulator: ico.org.uk, telephone 0303 123 1113.
13. Changes to this notice
KENNA may update this notice. The current version is published on this website with its revision date. Where a change materially affects how your information is used, KENNA will tell the people affected where it is able to.