Privacy Policy

📅 Last Updated: May 2025 🏛️ Governed by UK GDPR 🇬🇧 Registered in England & Wales

At KAS Digital Technologies, we are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website or use our services. Please read this policy carefully. By using our website or services, you agree to the terms described herein.

01

Introduction

KAS Digital Technologies ("we," "us," "our," or "the Company") is a technology services company registered in England and Wales. We provide IT services including software development, website development, logo and brand design, AI modelling, IT consultancy, cloud solutions, cybersecurity, and digital marketing.

This Privacy Policy applies to all personal data we process in connection with our website at kasdigitaltech.co.uk and our services. It has been prepared in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data Controller: KAS Digital Technologies, United Kingdom
Contact: sales@kasdigitaltech.co.uk | 123456
02

Information We Collect

We may collect and process the following categories of personal data:

Information you provide directly:

  • Name, email address, phone number, and company name when you submit an enquiry or contact form
  • Project briefs, requirements, and related communications
  • Billing information and payment details for service agreements
  • Feedback, survey responses, or testimonials you choose to provide

Information collected automatically:

  • IP address, browser type and version, operating system
  • Pages visited, time spent on pages, and referral sources
  • Device identifiers and cookie data
  • Approximate geographic location based on IP address

Information from third parties:

  • Business contact information from professional networking platforms
  • Analytics data from tools such as Google Analytics
03

How We Use Your Data

We use the personal data we collect for the following purposes, relying on the lawful bases indicated:

  • To deliver our services — Fulfilling contracts and service agreements (Contractual necessity)
  • To respond to enquiries — Answering questions and providing support (Legitimate interests)
  • To process payments — Managing billing and transactions (Contractual necessity)
  • To send communications — Service updates, proposals, and newsletters where you have opted in (Consent / Legitimate interests)
  • To improve our services — Analysing usage patterns to enhance our website and offerings (Legitimate interests)
  • To comply with legal obligations — Meeting regulatory and statutory requirements (Legal obligation)
  • To protect our interests — Preventing fraud, resolving disputes, and enforcing agreements (Legitimate interests)

We will never use your personal data for purposes incompatible with those for which it was collected without your explicit consent.

04

Data Sharing & Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your data only in the following limited circumstances:

  • Service providers: Trusted third-party vendors who assist in operating our business (e.g., cloud hosting providers, payment processors, email platforms), all subject to strict data processing agreements
  • Professional advisers: Lawyers, accountants, and auditors where necessary for legal or financial compliance
  • Legal requirements: Where disclosure is required by law, court order, or regulatory authority
  • Business transfers: In the event of a merger, acquisition, or sale of assets, personal data may be transferred to the acquiring entity with equivalent protections maintained
  • Protection of rights: Where necessary to protect the rights, property, or safety of KAS Digital Technologies, our clients, or the public
Important: All third-party processors we engage are contractually bound to handle your data securely and only as instructed by us, in compliance with UK GDPR.
05

Data Security

We implement appropriate technical and organisational measures to protect your personal data from unauthorised access, use, alteration, disclosure, or destruction. These measures include:

  • SSL/TLS encryption for all data transmitted via our website
  • Access controls and role-based permissions for staff accessing personal data
  • Regular security assessments and vulnerability testing
  • Secure data storage with encrypted backups
  • Staff training on data protection and information security

While we strive to protect your personal data, no method of transmission over the internet or electronic storage is 100% secure. In the event of a data breach that is likely to result in risk to your rights, we will notify you and the relevant supervisory authority as required by law.

06

Cookies

Our website uses cookies and similar tracking technologies to enhance your experience, analyse traffic, and personalise content. Cookies are small text files stored on your device by your browser.

Types of cookies we use:

  • Strictly necessary cookies: Essential for the website to function correctly — these cannot be disabled
  • Performance cookies: Help us understand how visitors interact with our website (e.g., Google Analytics)
  • Functional cookies: Remember your preferences to improve your experience
  • Marketing cookies: Used to deliver relevant advertisements and track campaign effectiveness (only with your consent)

You may control or disable cookies through your browser settings. Please note that disabling certain cookies may affect website functionality. For more information, visit aboutcookies.org.

07

Your Rights (UK GDPR)

Under UK GDPR, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at sales@kasdigitaltech.co.uk.

📋

Right of Access

Request a copy of the personal data we hold about you (Subject Access Request).

✏️

Right to Rectification

Request correction of inaccurate or incomplete personal data without undue delay.

🗑️

Right to Erasure

Request deletion of your personal data where there is no compelling reason to retain it.

⏸️

Right to Restrict Processing

Request that we limit how we use your data in certain circumstances.

📦

Right to Data Portability

Receive your data in a structured, machine-readable format to transfer to another provider.

🚫

Right to Object

Object to processing based on legitimate interests or for direct marketing purposes.

We will respond to all valid requests within one calendar month. Where requests are complex or numerous, we may extend this by a further two months and will inform you accordingly. There is no fee for exercising your rights unless requests are manifestly unfounded or excessive.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

08

Data Retention

We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

  • Client project data: Retained for 7 years after project completion in line with statutory accounting requirements
  • Enquiry and contact data: Retained for 2 years from the date of last contact
  • Marketing communications: Until you unsubscribe or withdraw consent
  • Website analytics data: Up to 26 months, as per our analytics platform settings
  • Financial records: 7 years in accordance with HMRC requirements

Upon expiry of the applicable retention period, or upon a valid erasure request, we will securely delete or anonymise your personal data within 30 days.

09

Third-Party Links

Our website may contain links to third-party websites, plugins, and applications. Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy practices.

We encourage you to read the privacy notice of every website you visit when you leave ours. This Privacy Policy applies solely to information collected by KAS Digital Technologies.

10

Children's Privacy

Our services are not directed at children under the age of 13, and we do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal data without your consent, please contact us immediately at sales@kasdigitaltech.co.uk and we will take steps to delete such information.

11

International Data Transfers

Where we transfer personal data outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements. This may include:

  • Transfers to countries with an adequacy decision from the UK Secretary of State
  • Use of UK International Data Transfer Agreements (IDTAs) or Addendum to EU Standard Contractual Clauses
  • Other lawful transfer mechanisms as approved by the ICO

You may request details of the safeguards we apply to international transfers by contacting us.

12

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

  • Update the "Last Updated" date at the top of this page
  • Notify registered users or active clients via email where the changes are significant
  • Display a prominent notice on our website

We encourage you to review this Privacy Policy periodically. Your continued use of our website or services following any changes constitutes acceptance of the updated policy.

13

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way we handle your personal data, please contact our team:

KAS Digital Technologies
📞 123456
✉️ sales@kasdigitaltech.co.uk
📍 United Kingdom

We aim to respond to all privacy-related enquiries within 5 business days. For formal Subject Access Requests, our response time is up to one calendar month in line with UK GDPR requirements.

↑ Back to top