Privacy Policy

Last Updated: November 20, 2025

Kingsbury IT Solutions Limited ("we", "our", or "us") is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller

For the purposes of data protection laws, the Data Controller is Kingsbury IT Solutions Limited, a company registered in England and Wales. You can contact us regarding data protection matters at hello@kingsbury.io.

2. Information We Collect

We may collect and process the following data about you:

• Identity Data: Name, job title, company name.
• Contact Data: Email address, telephone number, billing address.
• Technical Data: IP address, browser type, operating system, and usage data collected via cookies.
• Project Data: Information you provide during consultations or project execution.

3. How We Use Your Data

We only use your data when the law allows us to. Most commonly, we use your personal data in the following circumstances:

• Performance of Contract: To deliver the services you have engaged us for.
• Legitimate Interests: To manage our business relationship, improve our website, and for marketing purposes (where you have not opted out).
• Legal Obligation: To comply with legal or regulatory requirements (e.g., tax reporting).

4. Data Sharing

We do not sell your data. We may share your data with:

• Service providers acting as processors (e.g., cloud hosting providers like AWS or Vercel, email services).
• Professional advisers (lawyers, accountants).
• HM Revenue & Customs and other authorities.

5. International Transfers

Some of our external third parties are based outside the UK. Whenever we transfer your personal data out of the UK, we ensure a similar degree of protection is afforded to it by ensuring appropriate safeguards (such as the UK International Data Transfer Agreement) are in place.

6. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way. Access to your personal data is limited to those employees and partners who have a business need to know.

7. AI Deployment Models & Data Handling

When we build AI solutions as part of our consulting services, we follow these principles:

• Single-Tenant Deployments: Where possible, we deploy AI infrastructure in your own cloud environment or dedicated instances, ensuring your data never shares resources with other clients.
• Region Selection: We configure AI services and data storage in regions that meet your compliance requirements (UK, EU, or other specified jurisdictions).
• Data Minimisation: We design systems to process only the minimum data necessary for each task. PII is stripped, masked, or pseudonymised before reaching AI models where technically feasible.
• No Training on Your Data: We configure AI providers to disable model training on your data where such options are available, and select providers with appropriate data processing agreements.
• Audit Logging: All AI interactions are logged with timestamps, input/output hashes, and user identifiers to support compliance and incident response.

Boundaries: While we control the architecture we deploy, we cannot guarantee the internal behaviour of third-party AI model providers. We mitigate this through provider selection, contractual agreements, and architectural controls (input sanitisation, output filtering).

8. Your Legal Rights

Under certain circumstances, you have rights under data protection laws in relation to your personal data, including the right to:

• Request access to your personal data.
• Request correction of your personal data.
• Request erasure of your personal data.
• Object to processing of your personal data.
• Request restriction of processing your personal data.
• Request transfer of your personal data.
• Withdraw consent.

9. Cookies

We use essential cookies to make our website work. We may also use analytics cookies to help us improve our website. You can set your browser to refuse all or some browser cookies, though this may affect website functionality.