Privacy Policy

Last Updated: 18/12/2025:
1. Introduction

This Privacy Policy explains how Kalam Hussain, trading as KHC Group (also trading as KH Creative and KH Connect) (“we”, “us”, “our”) collects, uses, stores, and protects personal data.

We are committed to protecting your privacy and handling personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Who We Are (Data Controller)

Data Controller:
Kalam Hussain
Trading as: KHC Group, KH Creative, KH Connect

For any privacy-related enquiries, you can contact us via the details provided on our website.

3. What Personal Data We Collect

3.1 Information You Provide

• Name

• Business name

• Email address

• Phone number

• Billing and invoicing details

• Project information and communications

• Payment confirmations (we do not store card details)

3.2 Automatically Collected Data

• IP address

• Browser type and device information

• Website usage data (via analytics tools)

4. How We Use Your Data

We use personal data to:

• Provide and manage our services

• Communicate regarding projects or enquiries

• Process payments and subscriptions

• Issue invoices and receipts

• Improve our website and services

• Comply with legal and tax obligations

We do not sell personal data to third parties.

5. Lawful Basis for Processing

We process personal data under the following lawful bases:

• Contractual necessity – to deliver agreed services

• Legitimate interests – business operations and service improvement

• Legal obligation – tax, accounting, and regulatory compliance

• Consent – where explicitly provided (e.g. marketing communications)

6. Payments & Third-Party Processors

Payments are processed securely via Stripe and associated payment providers (e.g. Klarna for one-off invoices where applicable).

We do not store or process card details directly. Payment providers process data in accordance with their own privacy policies.

7. Client Campaigns, Leads & Customer Data

When providing marketing and advertising services (including Meta advertising), KHC Group may process personal data on behalf of clients, such as:

• Lead information

• Contact details submitted via forms

• Campaign performance data

In these cases:

• The client remains the data controller

• KHC Group acts as a data processor

• Data is processed solely for the purpose of delivering agreed services

Clients are responsible for ensuring lawful collection, consent, and compliance relating to their customers’ data.

8. Media, Footage & Advertising Content

As a media and marketing agency, we may process personal data contained within:

• Video footage

• Photographs

• Creative assets

• Advertising materials

Such data may be used for:

• Campaign execution

• Marketing and advertising

• Portfolio or promotional purposes (as outlined in our Terms & Conditions)

Unless agreed otherwise, the client is responsible for ensuring that appropriate permissions, releases, and consents have been obtained for individuals featured in provided or commissioned content.

9. Data Sharing

Personal data may be shared only where necessary, including with:

• Payment processors

• Accounting or legal service providers

• Subcontractors or freelancers for service delivery

All third parties are required to process data securely and lawfully.

10. International Data Transfers

Some third-party services may process data outside the UK. Where this occurs, appropriate safeguards are in place to ensure GDPR compliance.

11. Data Retention

We retain personal data only as long as necessary:

• Contractual and financial records: up to 6 years

• Project files: as outlined in our Terms & Conditions

• Enquiry data: until no longer required

12. Your Rights Under GDPR

You have the right to:

• Access personal data

• Request correction

• Request deletion

• Restrict or object to processing

• Request data portability

• Withdraw consent at any time

Requests can be made using the contact details on our website.

13. Cookies & Analytics

Our website may use cookies and analytics tools to improve user experience. You can manage or disable cookies through your browser settings.

14. Data Security

We implement reasonable technical and organisational measures to protect personal data. However, no system is completely secure, and absolute security cannot be guaranteed.

15. Children’s Data

Our services are not intended for individuals under 18, and we do not knowingly collect children’s personal data.

16. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website.

Continued use of our services constitutes acceptance of the updated policy.

17. Complaints

If you believe personal data has been mishandled, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO).