PRIVACY POLICY

Privacy Policy

Last updated: 28/04/2025

The Purpose

This Privacy Policy applies to Kraken Technology Group Ltd (Kraken, we, us and our) and explains how we collect, use, and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

By using our services or accessing our website, you agree to the collection and use of your personal data as described in this policy.

This Privacy Policy does not apply to websites, or any embedded content of our partners or to any other third parties, even if their websites are linked to our website, or contain embedded content. We recommend you review the privacy notices of the other parties that you interact with.

Data Controller

The data controller responsible for processing your personal data is:

Kraken Data Protection Officer

Kraken Technology Group
5 Sopwith Park, Concorde Close
Segensworth
Fareham
PO15 5RT

kraken.privacy@krakentechnology.com

If you have any questions or concerns about this Privacy Policy or how we handle your personal data, please contact us using the details above.

Data Protection Principles

We will comply with data protection law. This says that the personal information we hold about you must be:

·      Used lawfully, fairly and in a transparent way.

·      Collected only for valid purposes that we have clearly explained to you and not used in any way that is incompatible with those purposes.

·      Relevant to the purposes we have told you about and limited only to those purposes.

·      Accurate and kept up to date.

·      Kept only as long as necessary for the purposes we have told you about.

·      Kept securely.

The Kind of Information We Hold About You

Personal data, or personal information, means any information about an individual from which that person can be identified.  It does not include data where the identity has been removed (anonymous data).

Personal information that we collect depends on the services we undertake but typically, it consists of:

·      Personal Contact: such as name, title, addresses, telephone numbers, and personal email addresses.

·      Technical Information: such as IP address, browser type, operating system, device information, and browsing activity.

·      Communication Data: such as correspondence with us, feedback, and customer service interactions.

·      Professional Information: such as job applications, CVs, background checks, evidence of your right to work.

·      Sensitive Personal Information: such as medical history, genetic information and biometric data, information about criminal convictions/allegations and offences.

How We Collect Your Personal Data

We use various methods to collect personal information:

·      Through our application and recruitment process.

·      Enter into a contract or agreement with us.

·      Accessing our premises.

·      Through the use of our IT and communication systems.

·      Via third parties who may disclose your information to us – i.e. business partners.

Legal Basis for Processing Your Data

We process your personal data based on the following legal grounds:

·      Consent: We will seek your consent before collecting and processing your personal data when required by law.

·      Contractual Necessity: We process your personal data to fulfil our contract with you or take steps to enter a contract with you

·      Legitimate Interests: We process your personal data based on our legitimate interests, provided that these interests do not override your rights and freedoms (e.g., improving our services, providing technical support).

·      Legal Obligation: We may process your data when necessary to comply with legal obligations (e.g., screening processes).

How We Use Your Personal Data

We use your personal data for the following purposes:

·      To provide our products and services to you.

·      To process job applications where you apply to work for us and where necessary, screen your personal information as part of employment background checks.

·      To communicate with you about your account.

·      To improve and personalize your experience on our website.

·      To send you marketing communications, with your consent (you can opt out at any time).

·      To screen your personal information for controlling access to our premises.

·      To comply with legal obligations and resolve any disputes.

Sharing Your Personal Data

We may share your personal data with the following third parties:

·      Service Providers: We may share your data with third-party providers who assist us with services like hosting, payment processing, and customer support.

·      Business Partners: We may share your data with trusted business partners for marketing purposes or joint offers, with your consent.

·      Legal Compliance: We may disclose your personal data if required by law or to protect our rights, property, or safety, or the rights, property, or safety of others.

We do not sell or rent your personal data to third parties.

International Data Transfers

We may transfer your personal data to countries outside the European Economic Area (EEA). In such cases, we will ensure that appropriate safeguards are in place to protect your data, such as Standard Contractual Clauses or other legal mechanisms.

Data Retention

We will retain your personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required by law, whichever is longer.

Your Rights Under GDPR

You have the following rights under the GDPR:

·      Right to Access: You have the right to request access to the personal data we hold about you.

·      Right to Rectification: You can request that we correct any inaccurate or incomplete personal data.

·      Right to Erasure (Right to be Forgotten): You can request that we delete your personal data, subject to certain conditions.

·      Right to Restriction of Processing: You can request that we restrict the processing of your personal data in certain circumstances.

·      Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another data controller.

·      Right to Object: You can object to the processing of your personal data in certain circumstances, including for direct marketing purposes.

·      Right to Withdraw Consent: If we process your data based on consent, you can withdraw that consent at any time.

·      Right to Lodge a Complaint: If you believe your rights have been violated, you have the right to lodge a complaint with a supervisory authority.

To exercise any of these rights, please contact us using the contact information provided in the "Data Controller" section.

Security of Your Data

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction.  In addition, we operate a strict need-to-know policy and limit access to only those authorised.

Procedures are in place to deal with any suspected data breach, and we will notify you, and the appropriate regulatory authority of a breach where we are legally required to do so.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to improve your experience on our website, analyse usage patterns, and deliver personalized content. You can manage your cookie preferences through your browser settings. For more details, please see our Cookie Policy.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. Please review this Privacy Policy periodically to stay informed about how we protect your data.