The KA2 Privacy Policy

Terms of use (version 4 updated July 2026)

Use of the KA2 Limited website is subject to these terms of use. By using the website, users agree to use it lawfully and in a way that does not infringe the rights of others, restrict or inhibit the use of the website by others, or interfere with the operation, security or availability of the website. 

KA2 Limited may update the website, these terms, or this privacy policy from time to time. The current version will be made available on the website. 

Copyright and trade marks

All materials on the KA2 Limited website are owned by KA2 Limited or are used with permission from the relevant rights holder unless otherwise stated. 

Website materials may be viewed, retrieved and downloaded for personal or internal business reference only. They must not be copied, modified, published, distributed, reproduced, exploited or used for commercial purposes without prior written permission from KA2 Limited. 

All rights are reserved. 

Disclaimer

The information on the KA2 Limited website is provided for general information only. It does not constitute professional, legal, regulatory, technical, financial or other advice and should not be relied upon as such. 

KA2 Limited makes reasonable efforts to ensure that website information is accurate and up to date but does not guarantee that it is complete, current, accurate or suitable for any particular purpose. 

To the fullest extent permitted by law, KA2 Limited excludes liability for loss or damage arising from use of, or reliance on, information published on the website. 

Nothing in these terms excludes or limits liability where it would be unlawful to do so. 

User Conduct 

Users must not post, transmit, upload or submit material through the website that: 

  • is unlawful, offensive, defamatory, fraudulent, deceptive, misleading, harmful, harassing or obscene;  
  • infringes intellectual property, privacy, confidentiality or other rights;  
  • contains malware, viruses, malicious code or other harmful components;  
  • interferes with the normal operation, security or availability of the website;  
  • attempts to gain unauthorised access to KA2 Limited systems, data, accounts or services;  
  • is excessive, automated or abusive in a way that may disrupt the website.  

KA2 Limited may restrict, block or investigate use of the website where misuse, security risk or unlawful activity is suspected. 

Links to Other Websites

The KA2 Limited website may contain links to third-party websites or external resources. 

KA2 Limited is not responsible for the content, security, availability or privacy practices of third-party websites. Users should review the terms and privacy notices of any third-party website before providing personal data or relying on its content. 

Governing Law 

These terms of use are governed by the laws of England and Wales. 

Any dispute arising from use of the website shall be subject to the jurisdiction of the courts of England and Wales. 

Who We Are

KA2 Limited is responsible for the personal data it collects and uses through the website. 

For privacy questions or requests relating to personal data, contact: 

Data Protection Officer 

dpo@ka2.io 

Data Protection Law

KA2 Limited processes personal data in accordance with applicable UK data protection law, including the UK GDPR and the Data Protection Act 2018. 

KA2 Limited is committed to handling personal data lawfully, fairly, transparently and securely. 

Personal Data We May Collect

KA2 Limited may collect personal data through the website or related communications, including: 

  • name;  
  • job title;  
  • organisation;  
  • business email address;  
  • telephone number;  
  • enquiry details;  
  • information submitted through website forms;  
  • information provided when requesting services, information or contact;  
  • associate, supplier or recruitment-related information where submitted through or in connection with the website;  
  • technical information such as IP address, browser type, device information, pages visited, referring website and website usage information;  
  • marketing preferences;  
  • correspondence and communication records.  

KA2 Limited should not be sent special category data, highly confidential information or customer-sensitive information through general website forms unless specifically requested or agreed. 

How We Collect Personal Data

KA2 Limited may collect personal data: 

  • when users submit a website form;  
  • when users contact KA2 Limited by email, phone or other communication routes published on the website;  
  • when users request information about KA2 services;  
  • when prospective associates, suppliers or applicants provide information;  
  • through website analytics, cookies or similar technologies;  
  • through normal business communication following a website enquiry.  

How We Use Personal Data

KA2 Limited may use personal data for the following purposes: 

  • responding to enquiries;  
  • providing information about KA2 Limited services;  
  • managing customer, supplier, associate or prospective business relationships;  
  • assessing suitability for associate, supplier, recruitment or engagement opportunities where relevant;  
  • arranging meetings, calls, demonstrations or follow-up communications;  
  • preparing proposals, contracts, statements of work or service information;  
  • providing services to customers;  
  • maintaining business records;  
  • managing website security, performance and functionality;  
  • analysing website use and improving website content;  
  • sending marketing or service communications where lawful;  
  • complying with legal, regulatory, contractual, tax, accounting, audit and information security obligations;  
  • protecting KA2 Limited’s rights, systems, information, customers and users.  

Lawful Bases for Processing

KA2 Limited will rely on one or more lawful bases when processing personal data, including: 

  • where processing is necessary to respond to an enquiry or take steps before entering into a contract;  
  • where processing is necessary to perform a contract;  
  • where processing is necessary to comply with a legal obligation;  
  • where processing is necessary for KA2 Limited’s legitimate interests, provided those interests are not overridden by individual rights and freedoms;  
  • where consent has been provided, for example for certain marketing or optional communications;  
  • where processing is necessary to establish, exercise or defend legal claims.  

KA2 Limited’s legitimate interests may include operating and improving the website, responding to enquiries, developing business relationships, marketing relevant services, protecting systems and information, and managing business records. 

Marketing Communications

KA2 Limited may use contact details to send information about services, events, reports, updates or other business communications where permitted by law. 

Individuals may opt out of marketing communications at any time by using the unsubscribe option provided or by contacting KA2 Limited. 

KA2 Limited will not sell personal data for marketing purposes. 

Cookies and Website Analytics

KA2 Limited may use cookies, analytics tools or similar technologies to operate the website, understand website usage, improve content, support security and measure performance. 

Where required, users will be provided with information about cookies and choices about non-essential cookies. 

Technical information collected through cookies or analytics may include IP address, browser type, device information, pages visited, date and time of visit, referring website and interaction with website content. 

Read our Cookie Policy.

Sharing Personal Data

KA2 Limited may share personal data where necessary and lawful, including with: 

  • IT, hosting, website, email, cloud and security providers;  
  • professional advisers, including legal, accounting, tax and insurance advisers;  
  • suppliers and service providers supporting KA2 Limited operations;  
  • customers, where information is provided in connection with services, associate engagement or contractual activity;  
  • group or associated companies where required for business administration or service delivery;  
  • regulators, public authorities, courts or law enforcement where required by law or necessary to protect rights;  
  • third parties involved in a business sale, merger, restructuring or transfer, subject to appropriate safeguards.  

Where service providers process personal data on KA2 Limited’s behalf, KA2 Limited shall require appropriate confidentiality, security and data protection commitments. 

International Transfers

Where personal data is transferred outside the UK, KA2 Limited shall ensure that appropriate safeguards are in place where required. 

Safeguards may include adequacy regulations, standard contractual clauses, transfer risk assessments, supplier due diligence, contractual protections or other lawful transfer mechanisms. 

Security 

KA2 Limited applies appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, disclosure or destruction. 

These measures may include access control, authentication, encryption, secure cloud services, supplier assurance, confidentiality obligations, security monitoring, incident response and secure retention/disposal controls. 

Although KA2 Limited takes reasonable steps to protect personal data, transmission of information over the internet cannot be guaranteed to be completely secure.

Retention

KA2 Limited retains personal data only for as long as necessary for the purposes for which it was collected, including legal, regulatory, contractual, audit, tax, accounting, insurance, information security and business record requirements. 

Retention periods vary depending on the type of information, the purpose of processing, legal obligations and business need. 

When personal data is no longer required, it will be securely deleted, anonymised, archived or otherwise disposed of in accordance with KA2 Limited’s retention and disposal arrangements. 

Individual Rights 

Individuals have rights under UK data protection law, subject to legal conditions and exemptions. These may include: 

  • the right to be informed about how personal data is used;  
  • the right of access to personal data;  
  • the right to rectification of inaccurate personal data;  
  • the right to erasure;  
  • the right to restrict processing;  
  • the right to object to processing;  
  • the right to data portability;  
  • the right to withdraw consent where processing is based on consent;  
  • rights relating to automated decision-making, where applicable.  

Requests should be sent to: 

dpo@ka2.io 

KA2 Limited may need to verify identity before responding to a request. 

In most cases, KA2 Limited will not charge a fee for responding to a rights request. A reasonable fee may be charged, or a request may be refused, where permitted by law, for example where a request is manifestly unfounded or excessive. The ICO says most subject access requests cannot be charged for, except in limited cases such as manifestly unfounded or excessive requests or further copies.  

Complaints

Individuals may contact KA2 Limited first if they have concerns about how their personal data is handled. 

Individuals also have the right to complain to the UK Information Commissioner’s Office. 

Information Commissioner’s Office 

Website: https://ico.org.uk/make-a-complaint/data-protection-complaints/ 

Changes to This Policy 

KA2 Limited may update this policy from time to time. 

Where material changes are made, the updated version will be published on the KA2 Limited website. 

Learn more about KA2.