Privacy Policy

Kinectic Solution Ltd ("Kinectic Solution", "we", "us", or "our") is committed to protecting your privacy and handling your personal data lawfully, fairly, and transparently. This Privacy Policy explains how we collect, use, store, share, and protect your personal data, and the rights you have over it.

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and — where we process the data of individuals in the European Economic Area (EEA) — the EU General Data Protection Regulation (Regulation (EU) 2016/679).

1. Who We Are (Data Controller)

For the purposes of applicable data protection law, Kinectic Solution Ltd is the Data Controller responsible for your personal data. If you have any questions about this policy, or wish to exercise any of your rights, you can contact us at:

2. Personal Data We Collect & Our Lawful Basis

We only collect personal data that we genuinely need. Under Article 6 of the UK and EU GDPR, we must have a valid lawful basis for each processing activity. The table below summarises the data we collect and the basis on which we process it.

We do not intentionally collect special category data (such as health or biometric data) through this website. Please do not submit such information through our contact forms.

3. How We Use Your Personal Data

We use your personal data to:

• Respond to your enquiries and arrange discovery calls or consultations.
• Provide, manage, and improve the advisory services we deliver to you.
• Send you service updates and, where you have consented, relevant marketing communications.
• Understand how our website is used so we can improve it.
• Meet our legal, regulatory, and accounting obligations.

Where our basis for processing is consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

4. Cookies & Similar Technologies

Our website uses strictly necessary cookies to function correctly. We only place analytics or other non-essential cookies with your consent, in line with the Privacy and Electronic Communications Regulations (PECR) and the UK and EU GDPR. You can control or delete cookies through your browser settings at any time.

5. Sharing Your Personal Data

We never sell your personal data. We share it only where necessary, and always under appropriate safeguards, with:

• Trusted service providers (processors) who support our operations — for example hosting, email, and analytics providers — who act only on our documented instructions under a written data processing agreement.
• Professional advisers and regulators where we are legally required to do so.

6. International Data Transfers

Where personal data is transferred outside the UK or the EEA, we ensure an equivalent level of protection by relying on one or more of the following safeguards:

• Transfers to countries covered by UK "adequacy regulations" or an EU adequacy decision.
• The UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses.
• The EU Standard Contractual Clauses (SCCs) for transfers from the EEA.

7. Data Retention

We keep personal data only for as long as necessary for the purposes set out in this policy, or for as long as required to meet legal, tax, and accounting obligations. When data is no longer needed, it is securely deleted or anonymised.

8. How We Protect Your Data

We maintain appropriate technical and organisational measures — including encryption in transit, access controls, and ongoing security monitoring — to protect personal data against unauthorised access, loss, or disclosure. Where we are required to do so, we will notify the relevant supervisory authority and affected individuals of a personal data breach within the statutory timeframes.

9. Your Rights

Under the UK and EU GDPR you have the following rights in relation to your personal data:

• Right to be informed — to know how your data is used (this policy).
• Right of access — to request a copy of the personal data we hold about you.
• Right to rectification — to have inaccurate or incomplete data corrected.
• Right to erasure ("right to be forgotten") — to ask us to delete your data where there is no overriding legal reason to retain it.
• Right to restrict processing — to limit how we use your data in certain circumstances.
• Right to data portability — to receive your data in a structured, commonly used, machine-readable format.
• Right to object — to object to processing based on legitimate interests or to direct marketing.
• Rights related to automated decision-making and profiling — we do not make decisions producing legal effects about you based solely on automated processing.

To exercise any of these rights, contact privacy@kinecticsolution.com. We will respond within one month and will not charge a fee for valid requests.

10. Complaints & Supervisory Authorities

If you have a concern about how we handle your personal data, please contact us first so we can try to resolve it. You also have the right to lodge a complaint with a data protection supervisory authority.

In the UK, this is the Information Commissioner's Office (ICO) — ico.org.uk. If you are in the EEA, you may contact your local supervisory authority.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any updates will be published on this page with a revised "Last Updated" date.