A studio that writes everything down

What the studio is

Kalotect Ltd designs and builds websites, then keeps them running: search, social, content and the systems behind the shopfront. We work with clinics, professional practices, retailers and makers, mostly owner-run, mostly within an hour of Sevenoaks.

The studio is small on purpose. A lot of the routine work is done by software and by agents with budgets, which is why the prices can be fixed and why the record can be complete. The decisions stay with people.

How the work runs

You answer six short screens. Within 2 working days you get a fixed price and a plan with dates. If you accept, the project runs through ten milestones, each with a gate and, where it matters, your approval. Payment follows the approvals rather than the calendar: half on signing, a fifth at design approval, a fifth when the build is complete, a tenth at go-live.

Care begins the day the site goes live: monitoring from the first minute, a report after 30 days, and a case study offered once there is something to show. Care Essential is Care Essential; Care Plus adds 3 improvement hours a month.

The Ledger

Every change we make writes one entry first. An entry has a fixed shape: what we did, in one plain sentence; why, in your terms; the objective it serves; the evidence, with ids, before and after values and the source of every number; who did it; and what it cost you.

Entries are chained, each carrying a hash of the one before it, and a nightly job recomputes every hash so a change to the past cannot go unnoticed. You can export your chain and check it yourself. The data layer refuses a write that arrives without an entry, which is why the record is complete rather than diligent.

The standard

Core Web Vitals measured in the field, not in a lab. WCAG 2.2 AA in both themes, tested with a keyboard and a screen reader on every release. Alt text written by a person. No third-party scripts beyond analytics on our own subdomain and Stripe where you pay. Performance budgets agreed before a build and enforced in the pipeline after it.

Compliance

We gather Cyber Essentials evidence from the first month and hold the certificate when the assessment is passed; we do not claim it before then. Vanta monitors the deployment from month four, and the Trust page appears on this site once there is something to show on it. Passkeys and multi-factor sign-in, tenant isolation, encryption, least privilege and published retention periods are in place now.

How we use models

Three rules govern every word and picture we publish: real, disclosed, audited. Nothing invented is presented as real; AI involvement is stated where it needs to be; no copy is published until the thirteen-check audit has passed and a certificate exists. Those are gates in the publishing path, not good intentions. The AI disclosure says what we use models for and what we do not.

Agents are actors with budgets. Every unit of work has a hard cap in pounds — three per cent of a project’s price, ten per cent of a Care fee, eight per cent of a Search or Social fee, fifteen per cent of a module’s price — and a run that would exceed its cap stops and asks a person. Nothing is coded around that.

No dark patterns

Trials end with a reminder 3 days before. Cancellation is one click and takes effect at the end of the period you have paid for. Prices carry the VAT position. Every recurring charge is stated in pounds before it is agreed.

People

There is no people page yet, because there is not yet a team to show. When there is, it goes here with names and faces, not stock photographs.