Privacy
Two separate things to cover: this website, and the plugin. The plugin is the short section, because it does not send us anything.
Last updated 24 August 2026
The plugin
Koloab does not collect, transmit or receive your data. It runs entirely on your own WordPress installation. Your files sit in your Media Library, your notices and staff records sit in your database, and your activity log sits in a table on your own server.
We cannot see any of it. There is no account to sign into on our side, no sync, no telemetry, no analytics beacon and no crash reporter. If your site went offline tomorrow we would have no idea, because nothing ever reported in.
The only network call the plugin makes on its own behalf is a licence check, and only if you are on a paid plan. That confirms which plan a site is entitled to. It carries the licence key and the site address, and nothing about your content.
You are the data controller for your intranet
If you store staff names, contact details, photographs, HR documents or anything else personal in your Koloab workspace, you are the controller of that information under UK data protection law. Not us. We never hold it and could not produce it if asked. Handling subject access requests, retention, lawful basis and the rest is yours.
Things the plugin does store, on your server
- Staff accounts, which are ordinary WordPress users with a restricted role
- An activity log recording downloads, views, sign-ins, searches and shares by workspace users, kept for 12 months and then pruned automatically
- Anything you or your staff upload or type in
All of it is in your database, under your control, and removable by you at any time.
This website
This site is static pages. There is no account, no login, no form and no shop, so there is nothing here that asks who you are.
Analytics
We run Google Analytics with consent mode set to denied for every category before anything loads. In that state it sends aggregate, cookieless pings: roughly how many people looked at a page, and which page. No cookie is written to your browser, and nothing identifies you.
That is why there is no cookie banner. There are no cookies to consent to. If that ever changes, a banner appears before the cookie does, and this page changes with it.
Fonts
Typefaces load from Google Fonts, which means your browser makes a request to Google's servers and Google sees your IP address as part of that. This is the standard trade-off for web fonts. If you would rather it did not happen, a content blocker will stop it and the pages still work, just in a fallback typeface.
Hosting logs
Our web host keeps ordinary server logs, as every web host does. Those are operational records, not something we mine or pass on.
Buying a licence
Paid plans are sold and processed by Freemius. When you buy, they collect the details needed for the transaction, issue the licence and handle billing. We never see or store your card details. Their privacy policy covers that part, and your licence account with them is where billing and licence questions are answered.
Your rights
Under UK GDPR you have rights over personal data an organisation holds about you: access, correction, erasure, restriction, objection and portability. In our case there is very little to exercise them against, because we hold no personal data about visitors to this site. Where the data sits with Freemius as part of a purchase, their process applies.
If you believe your rights have been infringed you can complain to the Information Commissioner's Office.
Changes
The date at the top of this page moves whenever the content does. We will not quietly start collecting something and leave this page as it was.