Privacy Policy

1. Who we are

[Registered company name], trading as Khumzi (“Khumzi”, “we”, “us”), operates this website and is the data controller for the personal data described in this policy.

• Registered address: [Registered address]
• Company registration number: [Company number]
• Privacy contact: info@khumzi.com

2. What we collect

Information you give us. When you submit the contact form on this site, we collect the name, work email address, company name, and area of focus you enter. If you email us directly, we receive your email address and whatever you choose to include in the message.

Information collected automatically. Our hosting provider records standard server logs when a page is requested, which typically include your IP address, browser type, referring page, and the time of the request. These logs are used to operate and secure the site.

What we do not collect. This site sets no advertising, analytics, or tracking cookies, and we do not build behavioural profiles or sell personal data to anyone.

3. Why we use it, and our legal basis

• To respond to your enquiry and arrange a call — necessary to take steps at your request before entering into a contract (UK/EU GDPR Article 6(1)(b)).
• To follow up about services you asked about, and to keep records of enquiries — our legitimate interest in running and growing a business-to-business service (Article 6(1)(f)).
• To keep the site available and secure — our legitimate interest in preventing abuse and diagnosing faults (Article 6(1)(f)).
• To meet legal, accounting, and tax obligations — compliance with a legal obligation (Article 6(1)(c)).

We do not use your details for unrelated marketing without asking you first, and any marketing email we do send will include an unsubscribe link.

4. Who we share it with

We share personal data only with service providers who process it on our behalf, under contract, and only as needed to deliver the service:

• Website hosting: [Hosting provider]
• Email and calendar: [Email provider]
• Customer relationship management: [CRM provider]

We may also disclose data where we are required to by law, or to establish, exercise, or defend legal claims. We never sell or rent personal data.

5. International transfers

Some of our providers operate outside your country. Where personal data is transferred internationally, we rely on an adequacy decision or on standard contractual clauses together with appropriate safeguards. You can ask us for details of the safeguards that apply.

6. How long we keep it

• Enquiries that do not become client relationships: up to [24 months] from your last contact with us, then deleted.
• Client records: for the duration of the engagement plus the period required by tax and accounting law, typically [6 years].
• Server logs: retained by our host for its standard log-retention period.

7. Your rights

Depending on where you live, you may have the right to request access to the personal data we hold about you, to have it corrected or erased, to restrict or object to how we use it, and to receive it in a portable format. You can also object to direct marketing at any time.

To exercise any of these rights, email info@khumzi.com. We will respond within one month. If you believe we have handled your data improperly, you may complain to your local data protection authority — in the UK, the Information Commissioner's Office at ico.org.uk.

8. Cookies and third-party content

This website does not set cookies of its own and does not run analytics or advertising scripts.

The site loads typefaces from Google Fonts. Doing so sends your IP address and browser details to Google as part of the request for those files. If you would prefer to avoid this, the fonts can be self-hosted on request — see Google's privacy notice at policies.google.com/privacy.

9. Security

We use reasonable technical and organisational measures to protect personal data, including encrypted connections (HTTPS), access controls on the systems that hold enquiry data, and vetting of the providers we use. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.

10. Children

This site offers business-to-business services and is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, contact us and we will delete it.

11. Changes to this policy

We may update this policy as our services or the law change. The “last updated” date at the top will always reflect the current version. Material changes will be highlighted on this page.

12. Contact

Questions about this policy or about how we handle your data: info@khumzi.com.