KOVA International Privacy Policy

Last updated: 23rd March 2026

1. Introduction

KOVA International (“we”, “us”, “our”) is committed to protecting your privacy. 

This Privacy Policy explains how we collect, use, and protect your personal data when you interact with us.

2. Data Controller

KOVA International acts as a data controller for the personal data we process under UK GDPR.

3. Information We Collect

a) Information You Provide:

  • Name (required)

  • Email address (required)

  • Phone number (optional)

  • Location (optional)

  • Nearest cinema (optional)

  • Church you attend or are affiliated with (optional)

  • Church location (optional)

  • Date of birth (optional)

  • Community role (optional)

b) Automatically Collected Data:

  • IP address

  • Browser type/version

  • Device info

  • Website usage

  • Analytics (with consent)

c) Marketing & Engagement Data:

  • Communication preferences

  • Event registrations

  • Survey responses

4. How We Use Your Information

  • Provide information about screenings, events, and releases

  • Manage ticketing, registrations, or promotional campaigns

  • Send marketing communications (with consent)

  • Respond to enquiries and provide support

  • Fulfil orders and manage transactions

  • Manage our websites and social media accounts

  • Improve services, campaigns, and user experience

  • Manage our HR function

  • Prevent and detect crime

  • Comply with legal obligations

5. Legal Basis for Processing

  • Consent: Marketing communications and analytics cookies

  • Legitimate Interests: Promote and distribute content effectively

  • Contractual Necessity: Deliver services and complete transactions

  • Legal Obligation: Required by law

6. Sharing Your Information

We may share your data service providers (Squarespace, HubSpot, email platforms, analytics, event partners), and legal authorities if required. We do not sell or rent your personal information.

7. International Data Transfers

Data may be processed outside the UK or EEA. Safeguards include Standard Contractual Clauses, adequacy decisions, binding corporate rules, or EU-approved certifications.

8. Data Retention

We retain personal data only as long as necessary to fulfil its purpose, comply with legal obligations, or support claims/defences.

9. Your Rights

Under UK GDPR, you can access, correct, delete, restrict, or object to processing, withdraw consent, and request data portability. Contact us to exercise these rights.

10. Cookies

We use cookies to improve functionality, analyse performance (with consent), and personalise content. Functional cookies are required for Squarespace to securely serve the site. You can manage cookies in your browser.

11. Security of Data

We use SSL encryption and technical/organisational measures to protect your data from unauthorised access, loss, misuse, disclosure, or alteration.

12. Use of Site by Children

We do not sell or market to children. Users under 18 may only use the website with parental consent. Child visitors may encounter marketing on the site.

13. Third-Party Access

Third parties may access data only for specific tasks, limited to the minimum required. We may refuse government/law enforcement requests if overly broad but will comply where legally necessary.

14. Complaints

If dissatisfied, contact us at hellokova@kova.international with a “Privacy Policy Complaint,” engage in mediation/arbitration, or lodge a complaint with the ICO: https://ico.org.uk/concerns/

15. Compliance and Changes

This policy complies with applicable laws in all jurisdictions we operate. We may update this Privacy Policy; changes will be posted with an updated revision date.