We use cookies to understand how visitors use our website and to improve our services. Analytics cookies will only be set if you click “Accept.” You can choose to decline. Read <a target="" rel="noopener noreferrer nofollow" href="/#article-1">Privacy Notice</a>.

KEPLER Consulting - Building Antifragile Businesses Together

Privacy Notice

Privacy Readiness Starter Kit

Privacy Checklist

At KEPLER Consulting, I bring together legal, privacy, management, and cybersecurity expertise to help businesses reduce risk, stay compliant, and build antifragility. If you’re wondering whether you really need these services, check out our <a target="" rel="noopener" class="" href="/#frequentlyaskedquestions">Frequently Asked Questions</a> for honest answers. I provide practical and realistic solutions in privacy compliance, cybersecurity, contracts, corporate structuring, investment consulting, and risk management, helping businesses stay secure and resilient.

A SumUp card reader is placed on a table, ready to accept contactless payments. The setup is ideal for small businesses and cafés, offering a sleek and efficient way for entrepreneurs to accept payments.

Building Antifragile Businesses Together

I review your vendors’ agreements, terms of use, and privacy policies to identify risks and ensure clarity. I draft contracts for clients, contractors, and vendors — tailored to your needs and business model.I handle negotiations on your behalf or support you directly, including strategy development, so you enter every deal prepared and protected.

Contract Services

I support both startups and investors through every stage of the investment process. For startups, I provide legal structuring, compliance guidance, and help prepare for funding — from pitch to due diligence.For investors, I offer deal analysis, risk assessment, and legal support for safe, compliant investments. I assist with term sheets, shareholder agreements, and governance frameworks.

Investment Consulting

I help design and document business continuity plans that prepare your organization for unexpected disruptions — whether technical, operational, legal, or environmental.This includes identifying critical processes, assessing risks, defining recovery strategies, and drafting clear, actionable plans. My approach ensures your team knows what to do when things go wrong — minimizing downtime, protecting data, and maintaining compliance.

Business Continuity Planning

I help businesses plan and manage international corporate structures — from country risk assessments to entity setup, restructuring, and legal registrations. I offer strategic tax consulting, ensure regulatory compliance, and support privacy and cybersecurity requirements.I work with local experts, assist with relocation and cross-border employment, and draft key documents like incorporation papers, bylaws, and shareholder agreements — all tailored to your business.

Global Corporate Structuring

I serve as your external DPO, helping your organization meet its legal obligations under GDPR and other privacy laws. I monitor compliance, advise on data protection strategy, support DPIAs, liaise with regulators, and act as a contact point for data subjects.Whether required by law or chosen voluntarily, my DPO service gives you expert guidance without the cost or conflict of appointing someone internally — ensuring your privacy program is independent, practical, and effective.

Data Protection Officer (DPO) Services

I draft clear, plain-language policies and notices — including privacy policies, terms of use, and disclaimers — tailored to your jurisdiction and business model. I help ensure compliance with legal frameworks like GDPR, CCPA, and others, and support cookie banner setup and privacy UX that meets regulatory standards while building trust with your users.

Privacy Notices & Policies

I design and implement end-to-end privacy programs tailored to your business size, industry, and regulatory environment. This includes data mapping, policy and procedure development, staff training, privacy impact assessments, vendor management, and integration with cybersecurity and compliance efforts.The result: a practical, scalable privacy program that fits your operations and meets legal obligations under applicable laws.

Privacy Program Development

I help you conduct DPIAs to identify and manage privacy risks in data processing activities — particularly those involving sensitive data, large-scale monitoring, or new technologies.My support includes data mapping, risk evaluation, documentation, and guidance on mitigating measures — all aligned with GDPR and other applicable regulations. The result: a compliant, defensible DPIA that supports safe and lawful processing.

Data Protection Impact Assessments (DPIAs)

I assess your current privacy practices, policies, and data flows to identify gaps, risks, and compliance issues. This includes reviewing your privacy policy, cookie banners, data handling procedures, vendor agreements, and legal bases for data processing.You get a practical report with specific recommendations to align with regulations and reduce the risk of complaints, fines, or data breaches.

 Privacy Health Check

I help integrate privacy into your products, services, and processes from the start — not as an afterthought. This includes advising on data minimization, default settings, user consent flows, and risk mitigation throughout the development lifecycle. The result: compliant, privacy-respecting solutions by design.

Privacy by Design Consulting

Evaluation of your cybersecurity posture aligned with NIS 2, GDPR (Art. 32), ISO 27001, SOC 2, and other applicable frameworks. Identification of risks related to infrastructure, software vulnerabilities, vendor dependencies, and human factors. Prioritized recommendations to address critical threats, misconfigurations, and access control weaknesses. Gap analysis for companies preparing for certifications or client security reviews.

Cybersecurity Risk & Compliance Assessments

I support your organization in handling data subject requests under laws like GDPR and CCPA — including access, deletion, correction, and portability. I help build clear workflows, review request validity, ensure timely responses, and reduce the risk of non-compliance or disputes.

Data Subject Request (DSR) Support

I assist in preparing for and managing communications with data protection authorities and other regulators. This includes drafting responses, coordinating documentation, and representing your position clearly and compliantly — whether during routine inquiries, audits, or investigations.

Regulatory Communication Support

I help you respond quickly and effectively to data breaches — from initial assessment and containment to legal analysis, notification requirements, and post-incident review. I guide you through reporting obligations under laws like GDPR and support internal and external communications to minimize impact and liability.

Data Breach Response Support

Privacy & Cybersecurity Services

Continuous monitoring and alerts to help businesses stay ahead of evolving privacy and cybersecurity regulations worldwide.

Regulatory Change Monitoring

Contract Services 

Evaluation and oversight of third-party vendors to ensure they meet data protection and compliance standards. This service includes assessing privacy and security risks, reviewing contracts, and implementing controls to reduce exposure and maintain accountability across your vendor ecosystem.

Vendor Risk Management

Legal & Risk Management Services

Take <a target="_blank" rel="noopener noreferrer nofollow" href="https://tally.so/r/mR92Gp">KEPLER’s 3-Minute Checklist for Startups &amp; Scaleups</a> — and find out before your next client or investor meeting.

I began my career in law in the 2000s, progressing from legal counsel to head of legal departments across industries, and co-founding multiple firms. For seven years, I managed a Legal 500-ranked firm before transitioning into operational management in the tech industry. Now, I’ve returned to consulting under a new brand, KEPLER. At KEPLER, we specialize in privacy and cybersecurity consulting, comprehensive legal consulting and strategic business advisory for tech businesses.

Oksana Kobzar

Who Is Behind This

Email me for a quote, to book an appointment, ask questions, or just to connect.

The real value I offer: safety and confidence.

 Frequently Asked Questions. Honestly Answered.

Schedule a call to discuss your needs, explore solutions, and achieve safety and confidence

Close-up of a SumUp card reader in use, with a blue debit card inserted. The handheld device displays the transaction amount, showing how easy and efficient it is for small businesses to accept card payments. The user’s red nails contrast with the sleek white design of the card reader, capturing a modern, cashless payment moment.

The only emails worth opening during your coffee break

Email address

Name

Message

Ask more questions

Last updated: August 9, 2025This website is owned and operated by Oksana Kobzar d/b/a KEPLER Consulting (“KEPLER”, “I”, “me”, “my”). I respect your privacy and keep things clear and simple.<h4>What I Collect</h4>I only collect what you choose to share or what’s needed to run this site and respond to you:<ul><li>Contact details you submit (e.g., name, email, message).</li><li>Form responses from interactive checklists, information requests, or similar forms (via Tally).</li><li>Scheduling details you provide when booking a call (via Calendly).</li><li>Emails and attachments you send me (via Gmail).</li><li>Newsletter sign-ups you make on Substack (managed by Substack).</li></ul>I do not use Google Analytics. I do not set tracking cookies on this site.<h4>How I Use Your Data</h4><ul><li>Responding to you: answering inquiries and sharing requested information.</li><li>Delivering resources or requested details: sending you materials or information after you submit a form.</li><li>Scheduling calls: confirming and managing appointments (Calendly).</li><li>Professional correspondence and records: keeping reasonable business notes and files related to potential or ongoing work.</li><li>Newsletter: sending issues/updates if you subscribe on Substack (managed under Substack’s terms).</li></ul><h4>Legal Bases </h4><ul><li>Legitimate interests – communicating with you, providing requested information, running my business efficiently.</li><li>Contract / pre-contract steps – when you request services, book a call, or we discuss a scope of work.</li><li>Consent – where you opt into the newsletter on Substack, or where a form explicitly asks for consent.</li></ul><h4>Service Providers (Processors)</h4>I use reputable providers to operate the site and communications:<ul><li>Website hosting/builder: Soloist (to host and display this site).</li><li>Forms: Tally (collects your form inputs for checklists, resource requests, and other submissions).</li><li>Automation: Zapier (delivers automated follow-up emails after you submit a form).</li><li>Scheduling: Calendly (collects booking info and calendar metadata).</li><li>Email &amp; files: Google (Gmail, Google Drive).</li><li>Newsletter: Substack (manages subscriptions and email delivery).</li></ul>Each provider processes your data on my behalf under their terms. Some may store data in the United States, Canada, the EU, or other locations. Where required, I rely on safeguards such as Standard Contractual Clauses (SCCs) for international transfers.For details, see their privacy statements: <a target="_blank" rel="noopener noreferrer nofollow" href="https://tally.so/help/privacy-policy">Tally</a> • <a target="_blank" rel="noopener noreferrer nofollow" href="https://help.zapier.com/hc/en-us/sections/14037178066317-Data-privacy-security">Zapier</a> • <a target="_blank" rel="noopener noreferrer nofollow" href="https://calendly.com/legal/privacy-notice">Calendly</a> • <a target="_blank" rel="noopener noreferrer nofollow" href="https://policies.google.com/privacy?hl=en">Google</a> • <a target="_blank" rel="noopener noreferrer nofollow" href="https://substack.com/privacy">Substack</a> • <a target="_blank" rel="noopener noreferrer nofollow" href="https://support.soloist.ai/doc/privacy-policy/">Soloist</a>. <h4>No Cookies / No Tracking</h4>This site does not use Google Analytics or similar trackers, and I do not set marketing cookies. Third-party tools (e.g., Calendly, Substack, or an embedded form) may set essential cookies needed to function; those are governed by their own policies.<h4>Automated Emails (via Zapier or similar tools)</h4>If you submit a form on this site requesting information, a resource, or other follow-up, an automated email may be sent to the address you provided. This automation does not make decisions about you; it simply delivers the content or information you requested.<h4>Data Retention</h4><ul><li>General inquiries &amp; form submissions: up to 24 months after last interaction (or sooner upon request) if no engagement follows.</li><li>Client matters: for the duration of the engagement and as required by professional/legal obligations.</li><li>Newsletter data: controlled by Substack and retained until you unsubscribe.</li></ul>I periodically review and delete data that’s no longer needed.<h4>Data Sharing</h4>I do not sell your personal data. I share it only with the service providers listed above, and only to operate this website and communicate with you, or if required by law.<h4>Your Rights</h4>Depending on your location, you may have the right to access, correct, delete, object, restrict, or port your data. You may also withdraw consent where processing relies on consent (e.g., newsletter).To exercise rights or ask questions: <a target="_blank" rel="noopener noreferrer nofollow" href="mailto:groundcontrol@kepler.consulting">groundcontrol@kepler.consulting</a><h4>International Transfers</h4>Your information may be processed in Canada (where I am based) and in other countries where my service providers operate (e.g., the United States). I use appropriate safeguards such as SCCs where required.<h4>Children</h4>This site and my services are not directed to children under 16. I do not knowingly collect children’s data.<h4>Links to Other Platforms</h4>My site links to third-party platforms (e.g., Substack, Calendly, Google Drive). Your use of those platforms is governed by their own terms and privacy policies.<h4>Changes</h4>I may update this notice from time to time. The “Last updated” date at the top will reflect the latest version.<h4>Contact</h4>KEPLER Consulting Email: <a target="_blank" rel="noopener noreferrer nofollow" href="mailto:groundcontrol@kepler.consulting">groundcontrol@kepler.consulting</a>

<h3>A fast-track consulting bundle for tech startups and scaleups</h3>Is Your Privacy Program Ready?Whether you’re preparing for enterprise procurement, investor due diligence, or a product launch, this Starter Kit helps you identify and fix key privacy gaps before they cost you deals or credibility.What’s Inside1-hour consultation to map risks and prioritiesPrivacy Health Check covering policies, consent UX, vendor risk, and breach readinessTwo tailored documents — one public-facing, one internalAction plan with prioritized recommendations30-min follow-up call to address questions and next stepsWho It’s ForSaaS and tech scaleups aiming to pass enterprise/vendor auditsStartups entering EU, U.S., or Canadian marketsProduct teams handling personal dataLegal, compliance, or ops leads needing an expert review<h3><a target="_blank" rel="noopener noreferrer nofollow" href="https://tally.so/r/wkP1Xo">Request the Price</a></h3>Enter your details to receive the full Starter Kit description and pricing in your inbox — instantly.

Privacy Starter Kit

A fast-track consulting bundle for tech startups and scaleups

Request the Price