top of page

Privacy Policy

Privacy Policy (UK)

Last updated: 6th Jan 2026

​

This Privacy Policy explains how KJP Procurement (“we”, “us”, “our”) collects and uses personal data when you use [Website URL] (the “Website”), in accordance with the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018.

1) Who we are (Data Controller)

Data Controller: KJP Procurements
If you have any questions about this policy or how we use your data, contact us using the contact form on the website.

2) What personal data we collect

We may collect and process the following categories of personal data:

  • Identity and contact data, if you provide them to us: name, email address, telephone number, postal address.

  • Enquiry and communications data: messages you send via forms, email, phone, or other channels.

  • Technical data: IP address, browser type/version, device information, operating system, time zone, and other technology identifiers.

  • Usage data: pages visited, links clicked, time spent on pages, referral sources.

  • Marketing preferences: your preferences for receiving marketing and communications.

3) How we collect your data

We collect personal data in the following ways:

  • Directly from you when you complete forms, request quotes, contact us, or correspond with us.

  • Automatically through your use of the Website via logs and cookies/analytics tools (see Cookies section).

  • From third parties where applicable (e.g., embedded tools you use, subject to their settings and policies).

4) How we use your data and our lawful bases

We use your personal data for the purposes below. UK GDPR requires us to have a lawful basis for each use:

  1. To respond to enquiries and provide quotes/services

    • Data: Identity/contact, communications

    • Lawful basis: Legitimate interests (running our business, customer service) and/or Contract (steps prior to entering a contract)

  2. To provide and manage our services (where applicable)

    • Data: Identity/contact, service-related communications

    • Lawful basis: Contract and Legitimate interests

  3. To operate, secure, and improve the Website

    • Data: Technical, usage

    • Lawful basis: Legitimate interests (maintaining and improving our Website and security)

  4. To comply with legal obligations

    • Data: as required

    • Lawful basis: Legal obligation

  5. Marketing communications (if used)

    • Data: contact details, marketing preferences

    • Lawful basis: Consent (where required) and/or Legitimate interests (for existing customer relationships, where permitted)

You can opt out of marketing at any time by using the unsubscribe link (if provided) or contacting us.

5) Cookies and analytics

We use cookies and similar technologies to operate the Website and, where enabled, to understand how it is used.

  • Strictly necessary cookies: required for the Website to function.

  • Analytics/performance cookies: help us understand usage and improve the Website

  • Functional cookies: remember your preferences (if applicable).

Cookie choices: 
You can also control cookies through your browser settings. If you disable cookies, parts of the Website may not work properly.

6) Who we share personal data with

We may share personal data with trusted third parties where necessary to operate our business and Website, such as:

  • Website hosting and infrastructure providers (for example, Wix)

  • Email, CRM, and communications providers 

  • Professional advisers (accountants, solicitors, insurers)

  • Contractors/suppliers helping deliver services

We require third parties to respect the security of your personal data and to treat it in accordance with the law.

7) International transfers

Some service providers may process data outside the UK. Where personal data is transferred internationally, we ensure appropriate safeguards are in place, such as:

  • UK adequacy regulations; and/or

  • International Data Transfer Agreement (IDTA) or UK Addendum to EU Standard Contractual Clauses; and/or

  • Other lawful safeguards permitted under UK GDPR.

8) Data security

We implement appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure, alteration, or destruction.

However, no internet transmission is completely secure, and you provide data at your own risk.

9) Data retention

We keep personal data only for as long as necessary for the purposes set out in this policy, including to satisfy legal, accounting, or reporting requirements.

Typical retention periods may include:

  • Enquiry records: 12 months

  • Customer/service records: 6 years

  • Analytics data: 14 months

10) Your rights under UK GDPR

Considerations may vary depending on context, but you generally have the right to:

  • Access your personal data

  • Rectify inaccurate or incomplete data

  • Erase your data (in certain circumstances)

  • Restrict processing (in certain circumstances)

  • Object to processing based on legitimate interests or direct marketing

  • Data portability (in certain circumstances)

  • Withdraw consent at any time where we rely on consent

  • Complain to the Information Commissioner’s Office (ICO)

To exercise your rights, contact us using the details in section 1.

ICO contact: Information Commissioner’s Office (UK). You can raise a complaint via the ICO website.

11) Links to third-party websites

Our Website may contain links to third-party websites or embedded content. We are not responsible for the privacy practices of those websites. Please review their privacy policies.

12) Children’s privacy

Our Website is not intended for children under 13, and we do not knowingly collect personal data from children.

13) Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top shows when it was most recently revised.

14) Contact forms and anti-spam

We use a third party captcha to protect our forms from spam and abuse. This service may collect hardware/software data and other information. Use of the service is subject to the provider’s terms and privacy policy.

bottom of page