Privacy policy

Effective Date: 22 October 2025


Last Updated: 23 October 2025

1. Introduction
   
   Koiton Limited (“Koiton”, “we”, “us”, or “our”) respects your privacy and is committed to protecting your personal data.

This Privacy Notice explains the types of information we collect through our website, koiton.com (“Website”), how we use it, with whom we share it, and your rights under applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and, where applicable, the EU GDPR.
   It also describes how we protect your information, how long we retain it, and how you can contact us about our privacy practices or exercise your data protection rights.

   
   

2. Information We Collect
   
   (a) Information You Provide to Us
   We may collect and store personal information you voluntarily provide through our Website or when contacting us directly.

“Personal Information” means any information relating to an identified or identifiable individual.
   Examples include:
   Contact details such as your name, email address, and phone number.
   Any other information you choose to share with us through forms or correspondence.
   
   (b) Information We Receive from Other Sources
   We may receive your Personal Information from publicly available sources or trusted partners (such as professional databases or business directories).

   (c) Information Collected Automatically
   When you visit our Website, we automatically collect limited technical information through cookies and similar technologies. This information does not identify you personally and is used solely to improve website performance and user experience. The data collected may include:

   • IP address and device identifiers

   • Browser type and settings

   • Operating system information

   • Date and time of access

   • Pages visited and links clicked

   • Referring and exit pages

   • Interaction data (e.g., time on site, clickstream behaviour)

   For more details, please see our Cookie Policy, which forms part of this Privacy Notice.

   
   

3. How We Use Personal Information
   
   We use your personal information for the following legitimate purposes:
   To respond to your enquiries and provide services or information you request.
   To operate, improve, and personalise our Website and services.
   To communicate administrative updates, such as changes to our terms, privacy policy, or practices.
   To market our services, where permitted by law or with your consent.
   To protect against, identify, and prevent fraud, misuse, or security incidents.
   To comply with legal and regulatory obligations.
   To perform data analytics, audits, and internal operations.
   To aggregate or anonymise data for business insights and performance monitoring.
   We process personal information on the basis of:
   Your consent (where required);
   The performance of a contract;
   Our legitimate business interests; or
   Compliance with a legal obligation.

   
   

4. Sharing of Personal Information
   
   We may share your Personal Information with:
   Service providers who perform functions on our behalf (e.g., website hosting, analytics, or IT support).

These providers are bound by confidentiality and data protection obligations.
   Authorities or regulators, where required by law or in connection with legal claims.
   Business partners or successors, in the event of a reorganisation, merger, or sale of assets.
   Other parties, with your consent.
   We do not sell or rent your personal information to third parties.

   
   

5. International Data Transfers
   
   Your personal information may be transferred to and processed in countries outside the UK or European Economic Area (EEA), where data protection laws may differ.
   When transferring data internationally, we ensure appropriate safeguards are in place, such as:
   Adequacy decisions by the UK or EU authorities; or
   Standard Contractual Clauses (SCCs) approved by the European Commission or UK authorities.
   Copies of these safeguards can be requested by contacting us using the details below.

   
   

6. Your Rights Under GDPR
   
   Under the UK GDPR and EU GDPR, you have the following rights:
   Access – Request a copy of your personal information.
   Rectification – Request correction of inaccurate or incomplete data.
   Erasure (“Right to be Forgotten”) – Request deletion of your data in certain circumstances.
   Restriction – Request limitation of how we process your data.
   Data Portability – Request your data in a structured, machine-readable format.
   Objection – Object to processing based on legitimate interests or direct marketing.
   Withdraw Consent – Where we rely on your consent, you may withdraw it at any time.
   To exercise these rights, please contact us (see Section 11).

We will respond in accordance with applicable law.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) or your local supervisory authority.

   
   

7. Retention of Personal Information
   
   We retain your personal information only as long as necessary for the purposes outlined in this policy, including:
   For as long as we have an ongoing relationship with you;
   To comply with legal or regulatory obligations; or
   To resolve disputes and enforce agreements.
   When personal information is no longer required, it will be securely deleted or anonymised.

   
   

8. Data Security
   
   We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, or unauthorised access.

Access to your personal data is restricted to authorised employees and service providers who require it for legitimate business purposes.
   If you believe your interaction with us is no longer secure, please contact us immediately.

   
   

9. Children’s Privacy
   
   Our Website is not directed at individuals under the age of 16, and we do not knowingly collect personal information from children.

If you believe a child has provided us with personal data, please contact us, and we will delete it promptly.

   
   

10. Updates to This Privacy Notice
    
    We may update this Privacy Notice from time to time to reflect changes in our practices, legal requirements, or for other operational reasons.

The latest version will always be available on this page, with the “Effective Date” displayed at the top.

    
    

11. Contact Us
    
    Koiton Limited is the data controller for personal data collected through this Website.
    Registered Office:

Koiton Limited

11 Milestone Road

Crystal Palace, London, England
    Company Number: 07715335



    If you have any questions about this Privacy Notice or wish to exercise your rights, please contact us using the details below.
    For privacy correspondence: privacy@koiton.com. For GDPR concerns GDPR@koiton.com.