Privacy Notice

1. Who is respinsible for your information?

The data controller is Simon Wells, trading as K2Joom, at 18 Ardingly Drive, Worthing, BN12 4TR. Contact: hellothere@k2joom.com

If K2Joom processes personal information on behalf of a customer while providing website services, K2Joom may act as a processor for that activity. The roles and responsibilities must be agreed for each relevant service.

2. Information we may collect

Depending on how you interact with us, we may collect:

• Contact details such as name, business name, email address, telephone number and postal address.

• Enquiry and project information, including your requirements, correspondence, quotations, approvals and support requests.

• Billing and transaction records needed to manage payments and accounts. Payment-card data should be handled by the relevant payment provider wherever possible.

• Technical information such as IP address, browser/device details, security logs and website usage data, where these are collected by the website, hosting provider or enabled tools.

• Information you choose to provide, such as website copy, images, logos and other project materials.

• We aim to keep the information on this website accurate and up to date. However, information is provided for general information and service enquiry purposes and may be changed without notice. You should confirm the scope, price, timescale and conditions of any proposed service with us before placing an order.

3. How we use information and our lawful bases

We use personal information only where we have a lawful basis. Depending on the activity, this may include:

• Responding to enquiries and taking steps requested before entering a contract: pre-contract steps.
• Delivering services, managing projects, billing and support: contract.
• Maintaining appropriate business, tax, accounting and legal records: legal obligation.
• Protecting the website, preventing misuse, managing disputes and improving services: legitimate interests, where those interests are not overridden by your rights.
• Sending direct marketing where permitted: consent or another lawful basis permitted by applicable law, with a simple way to opt out.
• Setting non-essential cookies or using similar technologies where required: consent.

Where we rely on consent, you can withdraw it. Withdrawal does not affect processing carried out before withdrawal.

4. Who we share information with

We may share relevant information with service providers where needed to operate the business, for example hosting and domain providers, email and form services, website security and backup providers, analytics or mailing-list services, payment providers, professional advisers and public authorities where legally required.

We do not authorise suppliers to use customer information for unrelated purposes simply because they provide a service to us.

5. International transfers

Some suppliers may process information outside the United Kingdom. Where this occurs, we will identify the relevant transfer and ensure that an appropriate legal transfer mechanism and safeguards are in place where required. Confirm the locations and transfer arrangements of actual suppliers before publishing this section.

6. How long we keep information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including service delivery, legal obligations, accounting, dispute resolution and security. Retention periods depend on the type of record. Our internal Retention and Disposal Policy sets out the intended retention approach.

7. Your rights

Depending on the circumstances, you may have rights to request access to your personal information, correction, erasure, restriction of processing, data portability, or to object to processing. Where processing is based on consent, you may withdraw consent. Some rights are subject to conditions and exceptions.

You can contact us using the details above to exercise a right. We may need to verify your identity before responding. You also have the right to complain to the UK Information Commissioner’s Office (ICO). Current guidance is available at https://ico.org.uk/.

To the extent permitted by law, we exclude implied terms and liability for losses arising solely from reliance on general website information that has not been confirmed as part of a written service agreement. This does not affect any rights you have under applicable law.

8. Security

We use appropriate technical and organisational measures intended to protect personal information. No online service or transmission can be guaranteed completely secure. Access to information should be limited to people and providers who need it for an authorised purpose.

9. Children

Our business services and this website are not specifically directed at children. Please do not provide children’s personal information unless it is necessary and you are authorised to do so.

10. Links and external websites

Our website may link to third-party websites. Their privacy practices are governed by their own notices, which you should review before providing information.

11. Changes to this notice

We may update this notice when our processing activities or legal requirements change. The current version, revision and effective date will be shown on this page.

12. Contact and complaints

Questions about these terms can be sent to: hellothere@k2joom.com.
Business operator and address: K2Joom, 18 Ardingly Drive, Worthing, West Sussex. BN12 4TR