Privacy Policy

Last Updated: 9th February 2026

1. Introduction

This Privacy Policy explains how Kalam Hussain trading as KHC Group (“we”, “us”, “our”) collects, uses, stores, and protects personal data.

We are committed to handling personal data lawfully, transparently, and securely in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy applies to all users of our website, services, forms, communications, and platforms.

2. Data Controller

Data Controller:
Kalam Hussain
Trading as: KHC Group

For privacy-related enquiries, please contact us using the details on our website.

3. Personal Data We Collect

3.1 Information You Provide

We may collect:

• Full name

• Business name

• Email address

• Telephone number

• Service interests and budget information

• Messages and enquiries

• Billing and invoicing details

• Contractual information

• Project-related communications

We do not store card or payment details.

3.2 Automatically Collected Data

When you use our website or services, we may collect:

• IP address

• Device and browser information

• Usage and interaction data

• Referral sources

• Cookies and tracking data

4. How We Collect Data

We collect personal data through:

• Website contact and enquiry forms

• Newsletter subscription forms

• Lead capture and booking systems

• Email, phone, and WhatsApp communications

• CRM and automation tools

• Analytics and tracking software

5. How We Use Your Data

We use personal data to:

• Respond to enquiries and applications

• Deliver and manage services

• Process payments and subscriptions

• Send service-related communications

• Provide customer support

• Send confirmation and follow-up emails

• Manage leads and onboarding

• Improve our website and systems

• Comply with legal obligations

• Provide marketing communications where permitted

We do not sell personal data.

6. Lawful Basis for Processing

We process personal data under the following lawful bases:

• Contractual necessity – to deliver services

• Legitimate interests – business operations and improvement

• Legal obligation – accounting and compliance

• Consent – newsletters and marketing communications

You may withdraw consent at any time.

7. Marketing & Newsletter Communications

7.1 We may send marketing emails, newsletters, and updates where:

• You have opted in, or

• You have provided consent, or

• We have a legitimate business relationship and lawful basis

7.2 You may unsubscribe at any time using provided links or by contacting us.

7.3 We use third-party email marketing platforms to manage subscriptions.

8. Payments & Third-Party Processors

Payments are processed via:

• Stripe

• Klarna (where applicable)

• Other authorised providers

We do not store payment card data.

9. Campaigns, Leads & Customer Data

When providing advertising and marketing services, we may process data on behalf of clients including:

• Lead details

• Enquiry information

• Form submissions

• Campaign performance data

In these cases:

• The client is the data controller

• KHC Group acts as data processor

• Data is processed only for agreed services

Clients are responsible for their own GDPR compliance.

10. Automation, CRM & Data Routing

We use automation and integration tools including:

• Website form systems

• Spreadsheet databases

• Automation platforms

• CRM systems

• Email routing tools

These systems may transfer data between platforms for operational purposes.

All systems are selected for GDPR compliance.

11. Advertising, Tracking & Retargeting

We may use tracking technologies including:

• Meta Pixel

• Google Ads conversion tracking

• Analytics tools

• Cookie-based tracking

These tools help us:

• Measure campaign performance

• Improve marketing effectiveness

• Deliver relevant advertising

You may manage cookies through browser settings.

12. Media & Creative Content

We may process personal data contained in:

• Video footage

• Photography

• Creative materials

• Advertising assets

Clients are responsible for ensuring appropriate consent and permissions for individuals featured.

13. Data Sharing

We may share personal data with:

• Payment processors

• Email platforms

• CRM providers

• Automation services

• Subcontractors

• Professional advisors

All third parties must process data lawfully.

14. International Data Transfers

Some providers may process data outside the UK.

Where this occurs, appropriate safeguards are in place in accordance with GDPR requirements.

15. Data Retention

We retain personal data only as necessary:

• Financial records: up to 6 years

• Client records: duration of engagement

• Enquiry data: as required for business purposes

• Marketing data: until consent is withdrawn

16. Your Rights

You have the right to:

• Access your data

• Correct inaccuracies

• Request deletion

• Restrict processing

• Object to processing

• Request portability

• Withdraw consent

Requests can be made via our website.

17. Data Security

We implement appropriate technical and organisational measures.

However, no system is entirely secure and absolute security cannot be guaranteed.

18. Children’s Data

Our services are not intended for individuals under 18.

We do not knowingly collect children’s data.

19. Changes to This Policy

We may update this policy periodically.

The latest version will always be available on our website.

Continued use constitutes acceptance.

20. Complaints

You may lodge complaints with:

Information Commissioner’s Office (ICO)
www.ico.org.uk