Global Privacy Policy

(UK GDPR + EU GDPR + International Compliance Framework)

Global Privacy Policy

Definitions and Interpretation

1.1

In this Privacy Policy:

“Company” means KeyPar Ltd, a company incorporated in England and Wales.
“Personal Data” means any information relating to an identified or identifiable natural person.
“UK GDPR” means the United Kingdom General Data Protection Regulation.
“EU GDPR” means Regulation (EU) 2016/679.
“EEA” means the European Economic Area.
“Data Protection Legislation” means UK GDPR, EU GDPR (where applicable), the Data Protection Act 2018 and any other applicable privacy or data protection laws in any jurisdiction where the Company operates.
“Services” means the website www.keypar.co.uk and all associated commercial activities including supply, logistics coordination, and related services.

Scope and Application

2.1

This Privacy Policy applies to all Personal Data processed by the Company globally.

2.2

The Company provides Services to customers located in the United Kingdom, the European Economic Area and internationally.

2.3

Where local laws apply to individuals located outside the UK, this Privacy Policy shall apply subject to such mandatory local requirements.

Status of the Company

3.1

The Company acts as a Data Controller when determining the purposes and means of processing Personal Data.

3.2

Where the Company processes Personal Data on behalf of another organisation, it acts as a Data Processor in accordance with contractual terms.

Lawful Basis for Processing

4.1

Personal Data is processed in accordance with applicable Data Protection Legislation.

4.2

Where UK GDPR or EU GDPR applies, processing shall be based on:

(a) Consent;
(b) Performance of a contract;
(c) Compliance with legal obligations;
(d) Legitimate interests pursued by the Company.

4.3

For individuals located outside the UK or EEA, processing shall be undertaken in accordance with applicable legal requirements in their jurisdiction.

Categories of Personal Data

The Company may collect and process:

(a) Identity Data – name and contact details;
(b) Contact Data – email address, telephone number, shipping and billing addresses;
(c) Financial Data – transaction details and payment information processed via secure third-party providers;
(d) Technical Data – IP address, browser type, device information and network identifiers;
(e) Usage Data – website interaction data and analytics;
(f) Communications Data – records of correspondence via email or other channels.

The Company does not intentionally collect Special Category Data.

Cookies and Tracking Technologies

6.1

The Company uses cookies and similar technologies to:

Operate the website securely
Remember user preferences
Analyse performance
Improve Services

6.2

Users may manage cookies through browser settings.

Purposes of Processing

Personal Data is processed for:

(a) Providing and maintaining Services;
(b) Processing transactions and fulfilling orders;
(c) Customer communication;
(d) Business development and service improvement;
(e) Fraud prevention and security monitoring;
(f) Compliance with legal, tax and regulatory obligations;
(g) Marketing communications where permitted by law.

International Data Transfers

8.1

Due to the global nature of the Company’s operations, Personal Data may be transferred between jurisdictions.

8.2

Where Personal Data is transferred outside the UK or EEA, the Company shall implement appropriate safeguards, including:

Adequacy decisions
Standard Contractual Clauses
Equivalent contractual safeguards
Technical and organisational security measures

8.3

Transfers shall be conducted in compliance with applicable Data Protection Legislation.

Disclosure of Personal Data

Personal Data may be disclosed:

(a) To payment processors and logistics providers;
(b) To IT and hosting providers;
(c) To professional advisers;
(d) To regulatory or governmental authorities where legally required;
(e) To prevent fraud or protect legal rights.

10.

Data Retention

10.1

Personal Data shall be retained only as long as necessary.

10.2

Financial and tax records may be retained in accordance with statutory obligations.

10.3

Data no longer required shall be securely deleted or anonymised.

11.

Data Security

11.1

The Company implements appropriate technical and organisational measures to protect Personal Data.

11.2

While commercially reasonable safeguards are applied, no system can guarantee absolute security.

12.

Data Subject Rights (UK, EEA and International)

12.1

Where applicable under UK GDPR or EU GDPR, individuals may have the right to:

Access Personal Data
Rectify inaccuracies
Request erasure
Restrict processing
Object to processing
Request data portability
Withdraw consent

12.2

Individuals located outside the UK or EEA may have similar rights under applicable local laws.

12.3

Where required by law, individuals may raise concerns with a competent supervisory authority in their jurisdiction.

12.4

The Company may require identity verification before responding to requests.

13.

Children

The Services are not directed to individuals under the age of 18. The Company does not knowingly collect Personal Data from children.

14.

Third-Party Websites

The Company is not responsible for the privacy practices of third-party websites linked from the Company’s website.

15.

Changes to this Policy

The Company may amend this Privacy Policy from time to time. The current version shall be published on the website.