Privacy Policy

1. Who we are

This Privacy Policy explains how Kumonix ("we", "us", "our") collects and uses personal data when you visit our website, contact us, or engage our services. Kumonix is the data controller for the personal data we process and is registered in England and Wales. For any privacy queries, contact us at contactus@kumonix.com.

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information we collect

• Contact details you provide, such as name, email address, telephone number, job title and company.
• Enquiry content you send via forms or email.
• Engagement data relating to projects, contracts and correspondence.
• Technical data such as IP address, browser type, device information and pages visited, collected through cookies and analytics.

3. How we use your information

We use personal data to:

• Respond to enquiries and provide information about our services.
• Deliver and manage our consulting and packaged solutions.
• Operate, secure and improve our website.
• Send service updates and, where you have opted in, marketing communications.
• Comply with legal, regulatory and contractual obligations.

4. Lawful bases for processing

Under UK GDPR, we rely on the following lawful bases:

• Consent — for marketing emails and non-essential cookies.
• Contract — to deliver services you have engaged us for.
• Legitimate interests — to operate our business, respond to enquiries and maintain website security, balanced against your rights.
• Legal obligation — where we must retain or disclose data by law.

5. Cookies

Our website uses cookies and similar technologies for essential functionality and, with your consent, analytics. You can manage cookies through your browser settings. Disabling cookies may affect your experience of the site.

6. Sharing your information

We do not sell your personal data. We may share it with trusted third parties who help us operate our business, including:

• Cloud hosting, email, analytics and CRM providers (including Microsoft).
• Professional advisers such as accountants and lawyers.
• Regulators or authorities where required by law.

All processors are bound by contractual obligations to protect your data and use it only for the purposes we specify.

7. International transfers

Some of our providers may process data outside the UK. Where this happens we ensure appropriate safeguards are in place, such as UK adequacy regulations, the International Data Transfer Agreement, or Standard Contractual Clauses with the UK Addendum.

8. Data retention

We retain personal data only for as long as necessary for the purposes set out in this policy, to meet our legal and contractual obligations, and to resolve disputes. Enquiry records are typically held for up to 24 months; client engagement records are typically held for up to 7 years to meet financial and regulatory requirements.

9. Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request erasure of your data in certain circumstances.
• Restrict or object to our processing.
• Request data portability.
• Withdraw consent at any time, where we rely on consent.

To exercise these rights, email contactus@kumonix.com.

10. Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse, including encryption, access controls and regular reviews of our security practices.

11. Complaints

If you are unhappy with how we have handled your personal data, please contact us first so we can try to resolve the issue. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority, at ico.org.uk.

12. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page indicates when it was last revised.