Privacy Policy

KP Solutions (“KP Solutions”, “we”, “us”, “our”) is a bespoke software studio operating from the United Kingdom. We provide design, engineering and consultancy services to business clients and publish this marketing website at kpsolutions.io.

For the purposes of UK data protection law (the UK GDPR and the Data Protection Act 2018), KP Solutions is the data controller for personal data we collect through this website and through direct contact with prospective and existing clients.

You can contact us about this policy or any data-protection matter by emailing sales@kpsolutions.io.

We collect only the information we need to respond to enquiries and to deliver the services we have been engaged to deliver. This includes:

• Enquiry data: the name, email address and any project description you provide when you submit our contact form or email us directly.
• Engagement data: contractual and operational information needed to deliver a project we have been engaged for — typically a client point of contact, billing details and any business information you share during a project.
• Technical data: when you visit this website, our hosting provider automatically records standard request metadata (IP address, user agent, request timestamps) as part of normal server operation and abuse protection.

We do not currently operate any analytics, advertising or tracking cookies on this website. If we add analytics in future, we will only set those cookies after you have opted in via our cookie banner.

We use your information for the following purposes and on the following lawful bases:

• To respond to your enquiry and decide whether to enter into a contract with you. Lawful basis: steps taken at your request prior to entering a contract, and our legitimate interest in operating our business.
• To deliver services we have been engaged for and to manage that engagement (project communications, invoicing, support). Lawful basis: performance of a contract.
• To comply with our legal obligations — for example, retaining financial records for HMRC purposes. Lawful basis: legal obligation.
• To secure and improve our website and services. Lawful basis: our legitimate interest in operating a secure and functional website.

We do not sell your personal data, and we do not use it for advertising, profiling or automated decision-making.

We share personal data only with a small number of service providers who help us operate the business. Each is bound by appropriate data-processing terms.

• Hosting and infrastructure: our website is hosted by Vercel Inc. (United States), which provides the underlying server infrastructure and standard access logging.
• Email: client and prospect correspondence is handled through standard email services. We do not currently use a third-party mailing-list provider.
• Project-specific tools: if a particular engagement requires us to process client data through a specific service (for example, a payment processor, an analytics tool or a hosting provider chosen for your project), we will agree those arrangements with you in writing before doing so.

Where personal data is transferred outside the United Kingdom, we rely on UK adequacy regulations or the UK addendum to the EU Standard Contractual Clauses, as appropriate.

We may also disclose information where required to do so by law, by a court order, or to defend our legal rights.

We keep personal data only for as long as we need it for the purpose for which it was collected, or as long as we are required to keep it by law.

• Enquiry data from prospects who do not become clients: up to 24 months, after which it is deleted.
• Client engagement records (project communications, deliverables, invoices): for the duration of our engagement and for up to 7 years afterwards, in line with HMRC record-keeping requirements.
• Server access logs: retained by our hosting provider in line with their standard retention period, typically a number of days to a few weeks.

Under UK data protection law you have the following rights in relation to your personal data:

• The right to be informed about how we use your data (which this policy provides).
• The right to access a copy of the personal data we hold about you.
• The right to rectification of inaccurate or incomplete data.
• The right to erasure of your personal data (subject to certain exceptions).
• The right to restrict our processing of your data.
• The right to data portability.
• The right to object to our processing on the basis of legitimate interests.
• Rights in relation to automated decision-making and profiling — we do not carry out automated decision-making.

To exercise any of these rights, email sales@kpsolutions.io. We will respond within one month, in line with the statutory time limit.

This website uses only strictly-necessary technology and a single localStorage entry to remember your cookie-consent choice. No analytics, advertising or marketing cookies are set by default. See our Cookie Policy for the detail and for how to change your choice at any time.

If you have any questions about this policy, would like to exercise any of your rights, or have any concerns about how we are handling your personal data, please contact us by email at sales@kpsolutions.io.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data-protection regulator. Their website is ico.org.uk and their helpline is 0303 123 1113. We would, however, appreciate the chance to address your concerns directly before you approach the ICO.

We may update this policy from time to time to reflect changes to our practices, to our services, or to applicable law. The “last updated” date at the top of this page tells you when the current version came into force. We recommend reviewing this page periodically.