Table of Contents
- Introduction
- Information We Collect
- How We Use Your Information
- Legal Bases for Processing
- Data Sharing and Disclosure
- Google Services
- International Data Transfers
- Data Security
- Data Retention
- Your Rights
- Cookies and Tracking Technologies
- Newsletter & Email Communications
- Third-Party Links
- Children’s Privacy
- Changes to This Privacy Policy
- Contact Us
1. Introduction
This Privacy Policy explains how Kcalb Ltd (“we”, “us”, “our”) collects, processes, stores, and protects your personal data when you access or interact with our website kcalb-ltd.com (“the Website”). Kcalb Ltd is incorporated in England and Wales under Company No. 14132246, with its registered office in London, United Kingdom. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. If you do not agree with this Privacy Policy, please do not use the Website.2. Information We Collect
We may collect and process the following categories of data depending on your interactions:- Technical Data: IP address, browser type, device information, operating system, time zone, language settings.
- Usage Data: Pages viewed, time spent, navigation paths, interactions, referring/exit pages.
- Communication & Form Data: When you submit a form (contact, partnership, newsletter, career, or general inquiry), we may collect:
- First and last name
- Email address
- Phone number
- Country of residence
- Postal address (if provided)
- Company name and business details
- Company identifiers (registration number, VAT/tax ID)
- Official identification (only if required for eligibility or compliance)
- Professional documents (certifications, licenses)
- CV, resume, professional history
- Portfolio or uploaded files
- Links to social or professional profiles (LinkedIn, Instagram, X/Twitter, YouTube, portfolio)
- Any message or content you voluntarily provide
- Comment Data: If comments are available on the Website:
- Name
- Email address
- Comment content
- Technical metadata for anti-spam and security
- Preference Data: Cookie choices, UI settings, language preferences.
- Eligibility & Compliance Data: For professional or partnership verification:
- Business registry extracts
- Proof of authorisation to represent a company
- Identity verification documents (only when required)
3. How We Use Your Information
Your personal data may be used to:- Operate, maintain, and secure the Website
- Improve performance and user experience
- Respond to inquiries and communications
- Process career applications and recruitment steps
- Evaluate business partnerships or service requests
- Send newsletters, updates, and communications (when you subscribe)
- Comply with legal or regulatory obligations
- Process actions requiring explicit consent
4. Legal Bases for Processing
We process data under the following legal bases:- Consent — when you voluntarily provide data or subscribe to communications.
- Contractual Necessity — when processing is required to respond to your request.
- Legitimate Interests — security, performance improvement, fraud prevention.
- Legal Obligation — when required by law.
5. Data Sharing and Disclosure
We do not sell or trade your personal data. We may share data with:- Service Providers: Hosting, infrastructure, analytics, internal systems.
- Email & Newsletter Delivery:
We use Brevo (formerly Sendinblue) to manage and send newsletters.
Brevo may process:
- Name
- Email address
- Country of residence
- Engagement metrics (opens, clicks, unsubscribes)
- Legal Authorities: When required by law or regulation.
- Corporate Events: If part of merger, acquisition, or restructuring, under confidentiality.
6. Google Services
We may use Google tools, including:- Google Analytics (traffic & usage analysis)
- Google Ads (advertising)
- Google Tag Manager (tag management)
- YouTube embeds (video content)
- Google Maps (location display)
7. International Data Transfers
Some providers may process data outside the UK or EEA under safeguards such as:- Standard Contractual Clauses (SCCs)
- Adequacy decisions
- Additional technical and contractual protections
8. Data Security
We apply strict security measures, including:- SSL encryption
- Server hardening and monitoring
- Firewalls
- Spam and fraud detection systems
- Restricted internal access controls
9. Data Retention
Data is retained only as long as necessary for:- Legal obligations
- Ongoing recruitment or partnerships
- Newsletter subscription (until unsubscribed)
- Anonymised analytics retention
10. Your Rights
Under UK GDPR, you may request:- Access to your data
- Correction of inaccuracies
- Deletion
- Restriction of processing
- Objection to processing
- Data portability
- Withdrawal of consent
11. Cookies and Tracking Technologies
Cookies may be used to:- Remember preferences
- Analyse website traffic
- Support security
- Enable Google Analytics, Ads, and embedded services
12. Newsletter & Email Communications
When subscribing to our newsletter, we collect:- Name
- Email address
- Country of residence