Privacy policy

For KCP Ltd.

 

Website Privacy Notice 

This privacy notice gives you information on how we, at KCP ltd, collect and process your personal data through your use of this site, if you contact us regarding our products and services, and within any of our products or services 

This privacy notice applies to: 

  • Visitors to our Website that do not have a contractual relationship with us; 
  • Individuals attending events where we are participating or promoting our brand; 
  • Users of our products or services regardless of whether a contractual relationship exists; 
  • Individuals with whom we interact with and process their personal data 

Who is the controller for the personal data processed? 

A “controller” is a person or organisation who determines the purposes for which, and the manner in which, any personal data is processed. This notice is issued by KCP as data controller.  

In the exercise of its activities, KCP is also a processor of personal data (for example, the processing of data of users of the KCP systems and applications). The processing of personal data by KCP as a data processor is part of the agreement between KCP and the controller and is not included in this privacy notice.   

The personal data we collect about you: 

Personal data includes any information relating to an identified or identifiable natural person. It does not include data that cannot be linked in an individual. 

We collect, use, store and transfer different kinds of personal data about you. We have grouped that data in the following categories: 

Identity data: Your first name, middle names, maiden name, last name, date of birth.  

Contact data: Private and/or commercial contact details including first name, postal address, telephone number, e-mail address and similar contact information. 

Professional activities data: Including the company, the nature of the activity, the nature of the goods/services used.  

Financial Data: Bank account and payment card details. 

Marketing and Communications Data: Including information on when you receive and read marketing communications from us, which of our events you attend and marketing and communication preferences. 

Device data: Information about your computer e.g. operating system, storage capacity, region, language, time zone, model number, commissioning date, age and manufacturing date of the device, browser version, computer manufacturer, connection port, guarantee status, unique device identifiers, advert identifiers and various other technical information. 

Website activity data: Information about your visits and activity on our website, including the displayed content (and advertisements), with which you have interacted, the address of the website through which you have arrived at our site and other click sequences (e.g. pages visited, links you have clicked on or items added to the shopping basket). This information is, in part, collected using automatic data collection tools such as Cookies, web beacons and integrated weblinks. For further information please see the Cookie Notice. 

How we use your data 

 We collect your personal data for one of the following purposes: 

  • To manage communications between you and us; 
  • Where we need to perform the contract we have entered into with you; 
  • To provide support to our customers; 
  • For managing and hosting customer accounts; 
  • To provide you with information you have requested or which we may feel may be of interest to you; 
  • Administer and maintain our website, services and our IT systems; 
  • For marketing and advertising purposes; 
  • Payment processing of contractors invoices; 
  • Storing payments history data;  
  • Manage our use of tracking technologies such as cookies and analyse collected data to learn about our website and services. 

 

How we collect your personal data? 

We use different methods to collect personal data from and about you, including through the channels set out below.  

Direct interactions: One way of collecting your data is by receiving the data that you provide to us from time to time through our electronic portals, systems and platforms, when you contact us by email or post, or when you call us.  

Automated interactions: Other data will automatically be collected by our IT systems when you visit our website. This is mainly technical data (e.g. information about internet browser, operating system or time of calling up the website). Please see our Cookie Notice for further details. 

Lawful basis of processing information 

We only collect and use personal information about you when the law allows us to. Most commonly, we use your personal data in the following circumstances: 

Performance of a contract: where we need to perform a contract which we are about to enter into or have entered into with you as a party or to take steps at your request before entering into such a contract. 

Consent: where you have given consent to processing your personal data. 

Legitimate interest: where necessary for our interests (or those of a third party), provided that your fundamental rights do not override such interests. For instance, monitoring your use of our website or preventing fraud. Where legitimate interest is identified as a lawful basis, we will undertake a legitimate interest assessment to consider and balance any potential impacts on your interests, rights and freedoms.  

Legal obligation: where we need to comply with a legal or regulatory obligation that we are subject to 

Your individual rights 

In this section, we have summarised the rights that you have under General Data Protection Regulation (GDPR). Some of the rights are complex, and not all the details have been included in our summary. Accordingly, you should read the relevant laws and guidance from the regulatory authorities for a full explanation of these rights.  

Your rights under the General Data Protection Regulation (GDPR) are: 

The right to object: You have the right to ask us to stop processing your personal data if: 

  • Processing relies on legitimate interest. 
  • Processing is for scientific or historical research. 
  • Processing includes automated decision making and profiling. 
  • Processing is for direct marketing purposes. 

The right of access: You have a right to obtain confirmation of whether we are processing your personal data, access to your personal data and information regarding how your personal data is being used by us, and: 

  • You or any third party acting on your behalf may request a copy of the personal data we hold about you without charge.  
  • We will ask to verify your identity or request evidence from the third party that they are acting on your behalf before releasing any personal data we hold about you.  

The right to be informed: We are required, to provide clear and transparent information to you about how we process your personal data. This privacy notice addresses this right.  

The right of rectification: If you believe the personal data we hold about you is incorrect or incomplete you have the right to correct this and you may exercise this right along with the right to restrict processing until these corrections are made.  

The right to erasure: If there is no legal basis or legitimate reason for processing your personal data, you may request that we erase it.   

The right to restrict processing: You have a right to block the processing of your personal data in certain circumstances This means we will still hold your data but not process it. This is a conditional right which may only be exercised when: 

  • Processing is unlawful and you oppose erasure and request restriction instead.  
  • We no longer need the personal data, but it is required for a legal process. 
  • You have exercised your right to object to processing and require processing to be halted while a decision on the request to object is made.  
  • You are disputing the accuracy of personal data. 

The right to data portability: You can request that your personal data is transferred to another controller or processor in a machine-readable format if: 

  • Processing is based on consent. 
  • Processing is necessary for the fulfilment of a contractual obligation. 
  • Processing is by automated means (i.e. not paper based). 

Consent 

Where you have given explicit consent for processing of your personal data, you have the right to withdraw this consent at any time, but this will not affect the lawfulness of processing based on consent before its withdrawal. 

 

How long we keep personal data for  

We ensure that your personal data is only retained for the period that we need it for, or in accordance with laws, regulations and professional obligations that we are subject to. All personal data collected has a defined retention period, which is in line with our retention policy. If you would like to find out how long your information is being retained, please see “additional information” section of this notice.  

Security of personal information  

We take the responsibility for protecting your privacy very seriously and we will ensure your data is secured in accordance with our obligations under the Data Protection laws. We have in place technical and organisational measures to ensure personal information is secured and to prevent your personal data from being accessed in an unauthorised way, altered or disclosed.  We have in place a robust access control policy which limits access to your personal data to those employees, contractors and other third parties who only have a business need to know. The processing of your personal data will only take place subject to our instruction. 

We have policies and procedures to handle any potential data security breaches and data subjects, third parties and any applicable regulators will be notified where we are legally required to do so.  

We have ensured that all employees have had information security and data protection training. If you would like more details of the security we have in place, please see “additional information”, section of this policy. 

Children’s information 

We do not knowingly collect information on children. If we have collected personal information on a child, please contact us immediately using the details in section “additional information”, so we can remove this information without any undue delay.  

If you fail to provide personal data to us 

If we are legally required to collect personal data or need it to fulfil a contract with you, and you do not provide this personal data when requested, we may be unable to perform the contract we have with you or are trying to enter into. In such cases, we may need to decline to provide or receive the relevant products or services, but we will inform you of this at the time of data collection. 

Automated Decision Making 

Your personal data is not used in any automated decision making (a decision made solely by automated means without any human involvement) or profiling (automated processing of personal data to evaluate certain conditions about an individual). 

Disclosures of your personal data 

We may have to share your personal data with the entities set out below for the purposes described in this Privacy Notice. 

  • With service providers to carry out certain aspects of our business operations, such as cloud providers, email delivery suppliers, or advertising agencies. Our service providers have a contractual obligation to store all the personal data we receive in a secure manner. They must only use personal data for carrying out the services for which they have been contracted by KCP.  
  • Certain personal data may be disclosed to other suppliers who also help us run our business but act as controllers. These suppliers process personal in accordance with their own privacy policies. These suppliers include financial institutions, licensed auditors, payroll providers and others. 
  • With law enforcement agencies or public authorities, where we are subject to a legal obligation to share or disclose your personal data. 

 

 

 

 

Transfers outside of the EEA and UK 

We may share personal information to third parties outside of the European Economic Area (EEA) and United Kingdom (UK). Any personal information transferred will only be processed on our instruction and we ensure that information security at the highest standard would be used to protect any personal information as required by the Data Protection laws.  

Where personal data is transferred outside of the EEA or UK to a country without an adequacy decision, we will ensure appropriate safeguards are in place prior to the transfer. These could include: 

  • EU Standard Contractual Clauses + UK Addendum 
  • Binding Corporate Rules 
  • Reliance on the EU-US Data Privacy Framework and the UK Extension  

An exception as defined in Article 49 of the EU GDPR 

Right to complaint  

If you think that our collection or use of personal information is unfair, misleading, or inappropriate, or have any other concern about our data processing, please raise this with us in the first instance. 

To make a complaint, please contact us via email on gdpr@kcpnework.com  

Alternatively, you can contact us: 

By Post: Duke House, Downmill Road, RG12 1QS, Bracknell, UK
By Phone: +333 311 3333 

Alternatively, you can make a complaint to the Information Commissioner’s Office: 

By Post: 

Information Commissioners Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF 

By Website: click here  

By Phone: 0303 123 1113 (Local rate) or 01625 545 745 (National rate)  

 

Links to third party websites 

This privacy notice does not apply to applications, products, services, websites or social media functions of third-party providers which are accessible via links which we offer for information reasons in our website. When using these links, you leave the website of KCP, so it is possible that information about you may be collected or passed on by third parties. KCP has no influence whatsoever on the websites of third parties and makes no recommendations or assurances regarding these websites or their data protection practices. We encourage you to read and review the privacy notices of all websites with which you may interact before allowing them to collect, process and use your personal information. 

Additional information 

Your trust is important to us. That is why we are always available to answer any questions concerning how your data is processed. If you have any questions that could not be answered by this privacy notice or if you wish to receive more in-depth information about any topic within it, please contact our us via email on gdpr@kcpnetwork.com . 

Policy review and amendments 

We keep this privacy notice under regular review. this notice was last updated on 06/03/25 

We reserve the right to update this privacy notice at any time, and we will provide you with a new privacy notice when we make any substantial updates. we may also notify you in other ways from time to time about the processing of your personal information. 

 

Ready to learn more?