Privacy Notice

The Kellions is the controller of personal information described in this notice unless a client agreement says we act as a processor on a client’s instructions. Contact us at hello@kellions.com or The Kellions, London, United Kingdom.

Depending on how you interact with us, we may collect:

• identity and business contact details, including name, employer, role, email address and phone number;
• enquiry, consultation, support and correspondence details you choose to provide;
• account, subscription, contract and billing information for clients;
• technical and security information such as IP address, device, browser, sign-in and audit events; and
• website preferences and usage information, subject to your cookie choices.

Please do not include special-category or highly confidential information in a general website enquiry unless we specifically ask for it through an appropriate secure channel.

We receive information directly from you, from your employer or colleagues, from systems you authorise us to support, and from service providers or public business sources where lawful. When we act as a processor, the relevant client decides what information is placed in the service.

• Contract: to provide requested services, administer accounts, bill clients and support users.
• Legitimate interests: to respond to business enquiries, improve services, protect systems, prevent fraud, manage relationships and keep appropriate records.
• Legal obligation: to meet tax, accounting, security, regulatory and law-enforcement requirements.
• Consent: where required for optional marketing or non-essential storage technologies. You may withdraw consent at any time.

We may share information with vetted hosting, communications, identity, security, analytics, payment and professional-adviser providers; with a client that manages your account; and with regulators, courts or authorities where required. Providers may use information only for agreed purposes and must protect it. We do not sell personal information.

Some suppliers may process information outside the UK. Where the destination is not covered by UK adequacy regulations, we use an approved safeguard such as the UK International Data Transfer Agreement or UK Addendum, together with appropriate risk and security measures. You may ask us for more information about relevant safeguards.

We keep personal information only as long as needed for the purpose collected, including to provide services, respond to enquiries, maintain security and audit records, and meet legal, tax or contractual requirements. We set retention periods by considering the data’s nature, sensitivity, volume, risk and applicable limitation periods, then delete or anonymise it securely.

Depending on the circumstances, you may ask us for access, correction, deletion, restriction or portability of your information, or object to processing. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing.

You have an absolute right to object to the use of your personal information for direct marketing.

Email hello@kellions.com to exercise a right. We may need to verify your identity. You can also complain to the Information Commissioner’s Office, though we would appreciate the chance to address your concern first.

We do not use website visitor information to make solely automated decisions that have legal or similarly significant effects. Our business services are not directed at children, and we do not knowingly collect children’s information through this website.

We use proportionate technical and organisational measures to protect personal information. No online system is completely secure, so please use an approved secure channel for sensitive material. We will update this notice when our practices or the law materially change. See our GDPR commitment and Cookie Notice for more detail.