Skip to content

Kindred CSR Ltd. Privacy Policy

Here’s an updated generic Privacy Policy for Kindred CSR, aligned with UK GDPR and suitable for use across your sales, CRM, and app platforms. It retains your company tone and structure but broadens the scope to all business systems where personal data may be processed for sales and service delivery.


Privacy Policy

Last Updated: [Insert Date]

Introduction

Kindred CSR Ltd (“we,” “us,” or “our”) respects your privacy and is committed to protecting the personal data you share with us. This Privacy Policy explains how we collect, use, and protect your information when you interact with our sales, CRM, and application platforms (collectively, “Services”).

By using our Services, you acknowledge that you have read and understood this policy and consent to the processing of your personal data as described herein, in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.


Data Collection and Use

We collect, process, and store personal data that is necessary to provide, promote, and improve our Services. The types of personal data we may collect include:

  • Contact and Account Information: Such as name, email address, telephone number, organisation, and role, provided when you register, enquire, or engage with our sales and CRM systems.

  • Transactional Data: Information relating to product or service enquiries, quotations, and completed sales.

  • Usage Data: Details on how you interact with our applications or websites, including access logs, device information, cookies, and analytics data to improve user experience.

  • User Content: Any files, data, or information you upload or submit when using our platforms.

We may collect this information directly from you or automatically through your use of our Services.


Purpose of Data Collection

Your personal data is collected and processed for the following lawful purposes:

  • Contractual Necessity: To process sales transactions, provide our Services, and fulfil customer requests.

  • Legitimate Interests: To manage customer relationships, improve our platforms, and communicate relevant offers, insights, or service updates.

  • Legal Obligations: To maintain business records, comply with accounting, auditing, and regulatory requirements.

  • Consent (where applicable): For marketing communications or use of optional cookies and analytics tools.

We do not use your personal data for automated decision-making that produces legal or similarly significant effects.


Data Sharing

We do not sell or rent personal data. We may share your information only in the following cases:

  • Service Providers: With trusted third parties that support our sales, CRM, hosting, analytics, or communications systems. All such partners are contractually bound to handle your data securely and in compliance with data protection laws.

  • Legal and Regulatory Compliance: When required to do so by law, regulation, or in response to lawful requests.

  • Business Transfers: In the event of a merger, acquisition, or sale of business assets, your data may be transferred under equivalent data protection safeguards.


Data Security

We use appropriate technical and organisational measures to safeguard your data against loss, misuse, unauthorised access, disclosure, alteration, or destruction. These include encryption, access control, and secure data storage. However, no system is completely secure, and users are encouraged to protect their own login credentials.


AI and Analytics

Certain parts of our Services may incorporate AI-driven tools or analytics systems. Any personal data processed by these tools is used solely to enhance your experience, support sales and service delivery, and improve performance insights. We do not use AI to profile individuals for marketing or employment decisions.


Data Retention

We retain personal data only as long as necessary to:

  • Fulfil the purposes outlined in this policy;

  • Comply with legal and accounting obligations;

  • Resolve disputes or enforce our agreements.

After this period, data will be securely deleted or anonymised.


Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

  • Access and Rectification: Request access to or correction of your data.

  • Erasure (“Right to be Forgotten”): Request deletion of your data where there is no lawful basis for retention.

  • Restriction and Objection: Request to restrict processing or object to certain uses of your data.

  • Data Portability: Request transfer of your data in a commonly used format.

  • Withdraw Consent: Withdraw consent for processing where applicable.

To exercise these rights, please contact us at [email protected]. We will respond within the statutory timeframe.


International Transfers

Where your data is transferred outside the UK, we ensure appropriate safeguards are in place (such as UK-approved Standard Contractual Clauses) to maintain equivalent data protection standards.


Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal obligations. Updates will be posted on our website, and significant changes will be communicated directly where appropriate.


Contact Information

For any questions, concerns, or data requests, please contact:

Data Protection Officer
Kindred CSR Ltd
Email: [email protected]
Address:  Berkeley House, 6 The Square, Kenilworth, CV8 1EB