Privacy Policy

KHC Group - Growth System
Last Updated: 14.04.2026

1. Introduction

This Privacy Policy explains how Kalam Hussain trading as KHC Group (“we”, “us”, “our”) collects, uses, stores, and protects personal data.

We are committed to handling personal data lawfully, fairly, and transparently in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy applies to all users of our website, systems, communications, and services.

2. Data Controller & Contact Details

Data Controller:
Kalam Hussain
Trading as: KHC Group

For all data protection enquiries, please contact us via the details provided on our website.

3. Categories of Personal Data

We may collect and process the following types of personal data:

3.1 Data You Provide

• Full name

• Business name

• Email address

• Telephone number

• Enquiry and communication content

• Service requirements and preferences

• Billing and invoicing information

• Contractual and onboarding information

3.2 Communication & Interaction Data

Where you or your customers interact with systems we manage, we may process:

• Messages (SMS, email, chat, social media)

• Call data (including timestamps, recordings where applicable)

• Form submissions and responses

• Appointment and booking data

• Conversation history and engagement data

3.3 Technical & Usage Data

• IP address

• Device and browser information

• System usage data

• Tracking and analytics data

• Referral and source data

4. How We Collect Data

We collect personal data through:

• Website forms and applications

• Booking systems and lead capture pages

• Email, phone, and messaging platforms

• CRM and automation systems

• Third-party integrations and connected platforms

• Analytics and tracking technologies

5. How We Use Personal Data

We use personal data to:

• Respond to enquiries and applications

• Deliver and operate the Growth System

• Manage communications and interactions

• Automate responses and follow-ups

• Process payments and subscriptions

• Provide support and account management

• Improve systems, performance, and user experience

• Comply with legal and regulatory obligations

We do not sell personal data.

6. Lawful Basis for Processing

We process personal data under the following lawful bases:

• Contractual necessity – to deliver services

• Legitimate interests – to operate and improve our systems

• Legal obligations – for compliance and record-keeping

• Consent – where required (e.g. marketing communications)

7. Acting as Data Controller and Data Processor

7.1 When you interact with KHC Group directly, we act as a Data Controller.

7.2 When providing the Growth System to clients, we may process data relating to their customers.

7.3 In such cases:

• The client is the Data Controller

• KHC Group acts as a Data Processor

7.4 We process such data strictly in accordance with client instructions and service requirements.

8. CRM, Automation & System Processing

8.1 The Growth System utilises advanced CRM, automation, and communication infrastructure.

8.2 This may involve:

• Automated messaging and responses

• AI-assisted communication processing

• Data routing between systems

• Workflow-based data handling

8.3 These processes are designed to:

• Improve response times

• Reduce missed enquiries

• Enhance operational efficiency

8.4 All systems are selected with consideration for data protection and compliance.

9. Communications & Call Handling

9.1 We may process communications including:

• SMS and messaging conversations

• Emails

• Social media interactions

• Telephone calls (including recordings where applicable)

9.2 Such data may be used for:

• Service delivery

• Quality control

• Training and system improvement

10. Third-Party Services & Infrastructure

10.1 We rely on third-party providers for hosting, communication, automation, and analytics.

10.2 These providers may process personal data on our behalf.

10.3 We take reasonable steps to ensure such providers:

• Meet data protection standards

• Process data lawfully

• Maintain appropriate safeguards

10.4 We are not responsible for the independent practices of third-party platforms.

11. International Data Transfers

11.1 Some data may be processed outside the UK.

11.2 Where this occurs, appropriate safeguards are implemented in accordance with UK GDPR, including:

• Standard contractual clauses

• Approved transfer mechanisms

12. Data Retention

We retain personal data only as long as necessary:

• Client data: duration of service + reasonable period thereafter

• Financial records: up to 6 years

• Enquiry data: as required for business operations

• Communication data: as required for system functionality and records

13. Data Security

13.1 We implement appropriate technical and organisational measures to protect personal data.

13.2 These include:

• Secure systems and access controls

• Encryption and authentication measures

• Restricted access to authorised personnel

13.3 However, no system is completely secure and absolute security cannot be guaranteed.

14. Your Rights

You have the right to:

• Access your personal data

• Correct inaccurate data

• Request deletion

• Restrict processing

• Object to processing

• Request data portability

• Withdraw consent

Requests can be made via our website.

15. Marketing Communications

15.1 We may send marketing communications where permitted by law.

15.2 You may opt out at any time.

16. Client Responsibilities

16.1 Clients using the Growth System are responsible for:

• Ensuring lawful data collection

• Obtaining appropriate consent where required

• Maintaining their own privacy policies

• Complying with GDPR and applicable laws

16.2 KHC Group is not responsible for client misuse of data.

17. Changes to This Policy

17.1 We may update this policy periodically.

17.2 Continued use of our services constitutes acceptance of updates.

18. Complaints

If you have concerns, you may contact:

Information Commissioner’s Office (ICO)
www.ico.org.uk