This policy explains what personal data KC Technology Ltd collects, why we collect it, and what rights you have over it. We are the data controller for the personal data described here.
1What we collect
- Account data. Name, email address, password in hashed form, and the settings you choose.
- Billing data. Subscription status, plan, payment history and the reference used to match a payment to an account. Card details are handled by our payment provider and are not stored by us.
- Verification data. Where identity or age verification is required, identity documents and related checks are processed by a specialist verification provider. We receive the outcome of the check and limited supporting detail, not the full document set.
- Content and operational data. Listings, images, orders, messages and other material you put into the service so that it can be synchronised, published, delivered or displayed.
- Technical data. IP address, browser and device information, and logs of activity in the service, used for security, diagnostics and abuse prevention.
2Why we use it, and our lawful basis
- To provide the service you have subscribed to. Lawful basis: performance of a contract.
- To take payment and manage subscriptions. Lawful basis: performance of a contract.
- To verify identity and age where required for the service or by a payment provider. Lawful basis: legal obligation and legitimate interests in preventing misuse.
- To keep the service secure, investigate abuse and fix faults. Lawful basis: legitimate interests.
- To contact you about your account, service changes and support. Lawful basis: performance of a contract.
- To send marketing, only where you have opted in. Lawful basis: consent, which you can withdraw at any time.
3Who we share it with
We do not sell personal data. We share it only with the providers needed to run the service, each acting under contract and only for the purpose we specify:
- Hosting and infrastructure providers.
- Payment providers, for taking and reconciling payment.
- Identity and age verification providers.
- Email delivery providers, for account and service messages.
- Third party platforms you have chosen to connect, and only the data needed to carry out the action you have asked for.
We may also disclose data where we are required to by law, or to establish or defend legal claims.
4Where data is held
Data is held on servers in the United Kingdom and the European Economic Area. Where a provider processes data outside the UK or EEA, we rely on an appropriate safeguard such as an adequacy decision or standard contractual clauses.
5How long we keep it
- Account and content data is kept while the account is open, and for a reasonable period afterwards so an account can be restored if closure was in error.
- Billing records are kept for six years to meet accounting and tax obligations.
- Verification outcomes are kept for as long as we are required to evidence that a check was carried out.
- Security logs are kept for a limited period and then deleted or aggregated.
6Your rights
Under UK data protection law you have the right to access your data, to have inaccurate data corrected, to have data erased in certain circumstances, to restrict or object to processing, and to receive your data in a portable form. Where we rely on consent, you can withdraw it at any time.
To exercise any of these, email hello@kctechnology.me. We will respond within one month.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk.
7Cookies
We use cookies that are necessary for the service to work, such as keeping you signed in and protecting against cross site request forgery. Where we use anything beyond strictly necessary cookies we will ask for your consent first.
8Security
Access to personal data is restricted to those who need it. Passwords are stored hashed, connections are encrypted in transit, and we keep logs that let us investigate unauthorised access. No system is perfectly secure, and we will notify you and the regulator where we are required to do so following a breach.
9Changes
We may update this policy. The date at the top shows when it last changed, and we will tell you directly where a change materially affects you.