Privacy Policy

Introduction

Karakoram is a technology consultancy and impact venture studio. We respect your privacy and are committed to protecting the personal information you share with us. This Privacy Policy explains what information we collect through our website at karakoram.co (the “Site”), how we use and protect it, and the rights you have over it.

By using the Site, you agree to the practices described in this policy.

Who We Are

Karakoram operates across the United States, the United Kingdom, and Uzbekistan through the following entities, which act as joint data controllers for personal information collected through the Site:

• Karakoram Limited — registered in England and Wales (company number 13982410).
• Karakoram Consulting LLC — registered in Washington State, USA (UBI 605 957 287).
• “PASTORALTECH” Foreign Enterprise LLC (“PASTORALTECH” FE LLC), operating as Karakoram Uzbekistan — registered in Uzbekistan (STIR 310 525 281).

For any privacy matter, you can reach all of our entities using the contact details in the “Contact Us” section below.

If you have questions about this policy or how your data is handled, contact us at privacy@karakoram.co.

Information We Collect

We collect only the information we need to respond to you and to run our business.

Information you provide directly. When you contact us, request a consultation, subscribe to updates, or otherwise communicate with us, you may give us your name, email address, company name, role, and the contents of your message.

Information collected automatically. When you visit the Site, we may collect technical data such as your IP address, browser type, device information, referring pages, and how you navigate the Site. This is collected through cookies and similar technologies and is used in aggregate to understand and improve how the Site performs.

We do not intentionally collect sensitive personal information through the Site, and we ask that you not send it to us through web forms.

Cookies and Analytics

The Site uses cookies and similar technologies to function properly and to help us understand usage. Some cookies are strictly necessary for the Site to work; others are optional and used for analytics. Where required by law, we ask for your consent before setting non-essential cookies, and you can withdraw that consent at any time through your browser settings or our cookie controls.

We use [analytics provider, e.g. Google Analytics / Plausible] to measure Site traffic. You can find more detail in our Cookie Notice [link].

Legal Bases for Processing

Where UK or EU data protection law applies, we rely on the following legal bases to process your personal information:

• Legitimate interests — to respond to enquiries, operate and secure the Site, and develop our business, where these interests are not overridden by your rights.
• Consent — for non-essential cookies and for marketing communications, which you can withdraw at any time.
• Contract — where processing is necessary to take steps at your request before entering into, or to perform, an agreement with you.
• Legal obligation — where we must process information to comply with applicable law.

How We Use Your Information

We use the information we collect to:

• respond to your enquiries and requests;
• provide, maintain, and improve our services and the Site;
• understand usage and trends to enhance the user experience;
• send you communications you have asked for, and important updates about our services; and
• protect the security and integrity of the Site and comply with our legal obligations.

How We Share Information

We do not sell or rent your personal information.

We share information only where necessary, and only with:

• Service providers who help us operate the Site and our business (for example, hosting, email, and analytics providers), under confidentiality and data-protection terms;
• Our group entities listed above, for the purposes described in this policy; and
• Authorities or advisers where we are legally required to do so, or to establish, exercise, or defend legal claims.

International Data Transfers

Because we operate in the United States, the United Kingdom, and Uzbekistan, your personal information may be transferred to and processed in countries other than your own. Where we transfer personal information out of the UK or the European Economic Area, we put appropriate safeguards in place — such as Standard Contractual Clauses or the UK International Data Transfer Agreement — to ensure your information remains protected.

Data Retention

We keep personal information only for as long as we need it for the purposes set out in this policy, or as required to meet legal, accounting, or reporting obligations. When we no longer need it, we securely delete or anonymize it.

Data Security

We use appropriate technical and organizational measures to protect your information against unauthorized access, disclosure, alteration, or destruction. No method of transmission over the internet is completely secure, however, so while we work to protect your information we cannot guarantee absolute security.

Your Rights

Depending on where you live, you may have the right to:

• access the personal information we hold about you;
• correct or update inaccurate information;
• request deletion of your information;
• object to or restrict certain processing;
• request a portable copy of your information; and
• withdraw consent at any time, where we rely on consent.

If you are in the United Kingdom or the EEA, you also have the right to lodge a complaint with a supervisory authority — in the UK, the Information Commissioner’s Office (ico.org.uk). If you are a California resident, you have rights under the CCPA/CPRA, including the right to know, delete, and opt out of the “sale” or “sharing” of personal information; we do not sell your personal information.

To exercise any of these rights, contact us at privacy@karakoram.co. We will respond within the timeframes required by applicable law.

Children’s Privacy

The Site is intended for a business audience and is not directed at children. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

Third-Party Links

The Site may contain links to third-party websites, including those of our portfolio and client ventures. We are not responsible for the privacy practices of those sites, and we encourage you to read their privacy policies.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will post the revised version on this page and update the “Last updated” date above. We encourage you to review it periodically.

Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at: