Privacy Policy

Last updated: May 2026

1. Introduction

KGCP GROUP Limited ("KGCP," "we," "our," or "us") is committed to protecting the privacy and personal data of individuals who interact with our website and services. This Privacy Policy explains how we collect, use, store and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller

The data controller responsible for your personal data is:

3. Data We Collect

We collect personal data only when you voluntarily provide it through our website contact forms. The data we collect includes:

• Full name
• Email address
• Company or organisation name (optional)
• Telephone number (optional)
• The content of your message or inquiry

We do not collect sensitive personal data (also known as special category data) through our website.

4. How We Use Your Data

We use the personal data you provide for the following purposes:

• To respond to your inquiries and provide the information or services you have requested
• To communicate with you regarding potential business opportunities or partnerships
• To comply with legal obligations and regulatory requirements

5. Legal Basis for Processing

We process your personal data on the following legal grounds under Article 6 of the UK GDPR:

Consent

When you submit a contact form on our website, you provide your consent for us to process your personal data for the purpose of responding to your inquiry. You may withdraw your consent at any time by contacting us at info@kgcp.co.uk.

Legitimate Interest

We have a legitimate interest in responding to inquiries, managing business relationships and ensuring the security and proper functioning of our website. We have assessed that these interests do not override your fundamental rights and freedoms.

6. Analytics

We use Plausible Analytics, a privacy-first analytics service, to understand how visitors use our website. Plausible does not use cookies, does not collect personal data and does not track individual users across websites. All data is aggregated and anonymous. No personal information is stored or processed by our analytics provider.

7. Cookies

Our website uses only essential cookies that are strictly necessary for the functioning of the website, such as session management cookies. We do not use marketing cookies, advertising cookies, or third-party tracking cookies.

Because we only use strictly necessary cookies, consent is not required under the Privacy and Electronic Communications Regulations (PECR).

8. Data Retention

Personal data submitted through our contact forms is retained for a maximum period of 24 months from the date of submission. After this period, your data is securely deleted from our systems. If a business relationship is established as a result of your inquiry, retention may be extended in accordance with our contractual and legal obligations.

9. Third-Party Sharing

We do not sell, trade, or otherwise share your personal data with third parties for marketing purposes. Your data may only be disclosed to third parties in the following limited circumstances:

• Where we are required to do so by law, regulation, or court order
• Where necessary to protect our legal rights, safety, or property
• To trusted service providers who assist in the operation of our website, subject to appropriate data processing agreements

10. International Data Transfers

We primarily process your data within the United Kingdom and the European Economic Area. In the event that data is transferred outside of these jurisdictions, we will ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK Information Commissioner's Office.

11. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption of data in transit (TLS/SSL), access controls, and regular security reviews.

12. Your Rights

Under the UK GDPR, you have the following rights regarding your personal data:

• Right of access: you may request a copy of the personal data we hold about you
• Right to rectification: you may request correction of inaccurate or incomplete data
• Right to erasure: you may request deletion of your personal data where there is no compelling reason for continued processing
• Right to data portability: you may request transfer of your data to another organisation in a structured, commonly used format
• Right to object: you may object to processing based on legitimate interest
• Right to restrict processing: you may request that we limit how we use your data

To exercise any of these rights, please contact us at info@kgcp.co.uk. We will respond to your request within one calendar month.

13. Complaints

If you are dissatisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection:

Our ICO registration number is ZA533699.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on this page with a revised "Last updated" date. We encourage you to review this policy periodically.