Privacy Policy

1. Who we are and how to contact us

Data controller

For the purposes of UK data protection law (including the UK General Data Protection Regulation and the Data Protection Act 2018), the data controller is:

Contact details for privacy matters

Email: info@kilnbyte.com

If you have any questions about this Privacy Policy or how we handle your personal data, you can contact us using the details above.

2. Scope of this Privacy Policy

This Privacy Policy applies to:

• Visitors to our website
• Individuals who contact us by email, contact form or other channels
• Customers who buy our digital kits, resources, workshops or consulting services
• Individuals who sign up for our updates, resources or email communications

It does not cover:

• The privacy practices of any third-party websites or services linked from our site (for example payment providers, social networks or other tools)
• Data you provide directly to those third parties – they will have their own privacy policies

3. The personal data we collect

The information we collect depends on how you interact with us.

3.1 Information you provide to us directly

You may provide us with:

• Contact details – name, email address, business name, role and any other details you choose to share
• Enquiry details – information you include when you contact us (e.g. about your business, your current operations, your goals or challenges)
• Billing and purchase details – information related to orders you place with us (products purchased, amounts, dates, currency, basic billing details)
• Account / access details (if applicable) – if we later offer accounts or portals, we may collect login-related information such as username and password
• Marketing preferences – whether you wish to receive updates, resources or marketing from us and how you prefer to be contacted

3.2 Information collected automatically

When you visit our website, we may automatically collect:

• Technical information – IP address, browser type and version, device type, operating system, approximate location (country/region), and similar technical data
• Usage information – pages visited, time spent on pages, links clicked, referring/exit pages and other information about how you use our website

This information is typically collected through cookies and similar technologies. For more information, please see our Cookie Policy.

3.3 Information from third parties

We may receive information about you from:

• Payment providers – basic confirmation of payment status and limited transaction details (e.g. last four digits of card, card type, transaction ID, amount and currency). We do not receive or store full card numbers or CVV codes
• Email or marketing tools – information about email delivery, opens, clicks and unsubscribes so we can measure and improve our communications
• Referral partners or collaborators – if another business or individual refers you to us, they may share basic contact information and context so we can respond appropriately

4. How we use your personal data

We use your personal data for the following purposes:

4.1 To provide our products and services

• Processing and managing orders for Kilnbyte kits, resources and services
• Delivering digital content, templates and materials you purchase
• Providing customer support and responding to questions
• Managing calls, workshops or sessions where these are included in your purchase

4.2 To respond to enquiries and provide information

• Responding to contact form submissions and email enquiries
• Helping you decide which kit, resource or package is suitable for your situation
• Following up on conversations, where appropriate

4.3 To manage payments and prevent fraud

• Processing payments through third-party payment providers
• Keeping basic records of payments, refunds and related communications
• Monitoring for unusual or potentially fraudulent activity

4.4 To operate, maintain and improve our website and services

• Understanding how visitors use our website so we can improve navigation, content and user experience
• Monitoring website performance, security and reliability
• Fixing issues, testing new features and improving our offerings over time

4.5 To send you updates and marketing (where allowed)

• Sending you resources, updates, invitations or offers related to Kilnbyte if you have opted in or if we are otherwise allowed to do so under applicable law
• Allowing you to unsubscribe or change your email preferences at any time

You can opt out of marketing emails at any time by clicking the "unsubscribe" link in our emails or by contacting us.

4.6 To comply with legal and regulatory requirements

• Keeping records required by tax or accounting rules
• Responding to lawful requests from regulators, law enforcement or courts
• Enforcing our terms, protecting our rights and pursuing or defending legal claims

5. Legal bases for processing (UK / EEA visitors)

If you are in the UK or the European Economic Area (EEA), we must tell you the legal bases we rely on for processing your personal data. These are:

• Contract – where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract (for example, when you purchase a kit or ask us to prepare a proposal)
• Legitimate interests – where processing is necessary for our legitimate business interests and your interests and fundamental rights do not override those interests (for example, to run our website, respond to enquiries, maintain security and develop our services)
• Consent – where you have given clear consent for us to process your data for a specific purpose (for example, email marketing in some cases)
• Legal obligation – where we are required to process data to comply with a legal obligation (for example, tax and accounting rules, or responding to regulatory requests)

6. Cookies and similar technologies

We use cookies and similar technologies on our website to:

• Make the website function correctly
• Remember certain preferences (where applicable)
• Understand how visitors use our site so we can improve content and navigation

Some cookies are essential for the site to work. Others are optional and may require your consent, depending on your location.

7. How we share your personal data

We may share your personal data with:

7.1 Service providers

Trusted third-party service providers who help us operate our business, such as:

• Payment processors and merchant services
• Email and newsletter platforms
• Web hosting and cloud storage providers
• Analytics and website performance tools
• Professional advisers (e.g. accountants, legal advisers)

These providers only process your data on our instructions and are bound by contractual obligations to protect your information.

7.2 Legal and regulatory bodies

We may disclose your information:

• Where required by law, regulation, court order or official request
• To protect our rights, property or safety, or that of our customers or others
• In connection with the investigation or prevention of fraud or other illegal activity

7.3 Business transfers

If we ever sell, transfer or merge parts of our business, or if Kilnbyte is acquired or enters into a similar transaction, your data may be transferred as part of that process. In such cases, we will ensure that your rights continue to be protected and that you are informed where appropriate.

8. International transfers

We are based in the UK, but some of our service providers may be located outside the UK or EEA.

Where we transfer your personal data outside the UK or EEA, we will ensure that appropriate safeguards are in place, such as:

• An adequacy regulation (where the destination country is recognised as providing an adequate level of protection), or
• Standard contractual clauses approved by the UK or EU authorities, or
• Other legally acceptable safeguards

You can contact us if you would like more information about how we protect personal data when it is transferred internationally.

9. How long we keep your data

We keep personal data only for as long as necessary for the purposes we collected it for, including:

• Providing our products and services
• Managing our relationship with you
• Meeting legal, accounting or reporting requirements

In general:

When data is no longer needed, we will delete it or anonymise it so it can no longer be linked to you.

10. How we protect your data

We take appropriate technical and organisational measures to protect your personal data, including:

• Using reputable hosting and service providers
• Limiting access to personal data to those who need it for their work
• Using secure passwords and authentication methods
• Keeping software and systems up to date
• Training and awareness around data protection best practices (as the team grows)

11. Your rights (UK / EEA residents)

If you are in the UK or EEA, you have certain rights regarding your personal data. Subject to some conditions and exceptions, you may have the right to:

• Access – ask for a copy of the personal data we hold about you
• Rectification – ask us to correct inaccurate or incomplete data
• Erasure – ask us to delete your personal data in certain circumstances
• Restriction – ask us to restrict the processing of your data in certain circumstances
• Data portability – request that we provide your data in a structured, commonly used and machine-readable format, or transfer it to another organisation where technically feasible
• Object – object to certain types of processing, including where we rely on legitimate interests or for direct marketing
• Withdraw consent – where we rely on your consent, you can withdraw it at any time (this will not affect processing carried out before withdrawal)

You also have the right to lodge a complaint with your local data protection authority. In the UK, this is the Information Commissioner's Office (ICO). We would, however, appreciate the chance to deal with your concerns first, so please contact us in the first instance.

12. Children's privacy

Our website, kits and services are designed for adults and business users. They are not intended for children under 18.

13. Third-party links

Our website may include links to third-party websites, tools or resources. We do not control these sites and are not responsible for their privacy practices or content.

When you follow a link to a third-party site, their own terms and privacy policy will apply. We encourage you to read those policies before providing any personal data on external sites.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations or how we process personal data.

When we make changes, we will:

• Update the "Last updated" date at the top of this page, and
• Take reasonable steps to inform you of significant changes (for example, by email or by a notice on our website)

We encourage you to review this page periodically to stay informed about how we protect your information.

15. How to contact us about privacy

If you have any questions, concerns or requests regarding this Privacy Policy or your personal data, you can contact us at: