What we collect. Which is nothing.

Last updated 31 August 2026.

Who we are

Athvora is a trading name of Keelson Holdings Ltd, a company registered in England and Wales, company number 17359226. Registered office: 71-75 Shelton Street, Covent Garden, London WC2H 9JQ.

Keelson Holdings Ltd is the data controller for everything described on this page. We are registered with the Information Commissioner's Office under reference ICO:00015117984.

Anything to do with your data: hello@athvora.co.uk.

What this website collects

Nothing. We mean that literally, so here is each part of the site and what it does.

• The Athvora Score at /check. You type a name or a handle. A script that has already been downloaded to your browser turns that text into a score and writes the report onto the page. Your input is never sent to us, never sent to any other company, and never written to a database or to your browser's storage. Close the tab and it is gone. The list of “reading the public footprint” lines is an animation showing what the production version would do — no page is being crawled while you watch.
• The “join the list” boxes on the demo athlete profiles. They are switched off. Pressing the button clears the field and shows a confirmation message; the email address you typed never leaves your browser. The pages say so, and the code agrees.
• The buy buttons on the pricing and Founding Athletes pages. They are ordinary links. Nothing is collected, sent or stored while you are on this site. If you follow one you leave for a checkout page on Stripe's own domain, and anything you type there you are typing into Stripe rather than into us.
• Everything else is text and links.

There is no signup, no login, no newsletter, no chat widget and no tracking pixel anywhere on this site.

When we do get your personal data

Only when you send it to us. The apply and contact buttons on the Founding Athletes and Partners pages are mailto: links that open your own email app addressed to hello@athvora.co.uk. Nothing reaches us until you press send — and then we have your email address, your name and whatever you chose to write, which for an application usually means your sport, level, club and social handles.

Or when you buy. The buy buttons hand you over to Stripe's own checkout page, where you give Stripe your name, email address and card details. Stripe then passes us everything except the card number: your name, your email address, your billing country and the last four digits, which is what we need to set your service up and account for the payment. The full card number never reaches us and we could not store it if we wanted to.

Why we use it, and our lawful basis

• Reading and replying to your email, and assessing an application. Legitimate interests — Article 6(1)(f) UK GDPR. You wrote to us and we have an obvious interest in answering. Tell us to stop and we will.
• Setting up and running your subscription if you become a client, and taking payment. Performance of a contract, or steps taken at your request before entering one — Article 6(1)(b) UK GDPR.
• Keeping this site online and free of abuse. Legitimate interests — Article 6(1)(f). A hosted website logs requests; that is how hosting works.

We don't profile you, we don't make automated decisions about you, and we won't put you on a mailing list you didn't ask for.

Who else sees it

• Vercel — our hosting provider. Every page here is served by Vercel, so Vercel's servers handle your IP address and the usual web-server request logs.
• Google — every page loads three fonts from fonts.googleapis.com and fonts.gstatic.com. Your browser fetches them from Google directly, which tells Google your IP address and which page you were on. That is the only third-party request these pages make while they load, we'd rather it didn't happen, and we intend to move the fonts onto our own server. Following a buy button is you navigating to Stripe, not this page fetching anything.
• Stripe — our payment processor, and only if you actually buy something. Stripe collects and handles the card details on its own pages under its own privacy policy. No Stripe code, script or iframe runs on this website. Stripe tells us your name, email address, billing country and the last four digits of the card, and never the full number.
• Our email provider — if you email us, your message sits in our inbox like any other email.

That is the entire list. There is no analytics provider, no advertising network, no form-handling service and no CRM attached to this website. We don't sell personal data and we don't rent it.

If you become a client

Then more happens, and it happens off this website: an account, invoices, and — if you take the fan list — personal data belonging to your own supporters. In that arrangement you are the controller of your fan list and we act on your instructions under a written agreement. We do not sell, rent or borrow your fan list, and we don't email it about anything except you. We will name every supplier we use to run your service before we start using it.

How long we keep it

• Emails and applications that don't become work — up to 24 months after we last spoke, then deleted.
• Client records, invoices and payment records — six years after the end of the work, because tax and accounting rules require us to keep the paperwork.
• Server logs — held by Vercel on its own retention schedule, which we don't set or control.

Your rights

Under UK GDPR you can ask us for: access to the personal data we hold about you; rectification if it's wrong; erasure; restriction of how we use it; portability of the data you gave us; and you can object to anything we've based on legitimate interests.

Email hello@athvora.co.uk. It's free, and we'll respond within one month.

If we get it wrong you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. You don't have to raise it with us first, though we'd like the chance to fix it.

Cookies

This site sets no cookies. It stores nothing in your browser — no local storage, no session storage, no service worker. That is why there is no cookie banner: there is nothing to consent to.

The only third party your browser contacts while it is on this site is Google, for the fonts. If Google stores anything in your browser, that is Google's doing rather than ours, and blocking it won't break this site.

Changes to this notice

A checkout arrived on 31 August 2026 and this page changed with it — that is what the Stripe entries above are. The next thing that collects anything, whether that is a signup form, an account or analytics, gets the same treatment: this page changes first and the date at the top moves.