Website and enquiries privacy notice

Who we are and what this notice covers

Kinishi Limited is the controller responsible for the personal information described in this notice. We are a company registered in England and Wales under company number 06552861. Our registered office is The Sharp Project, Thorp Road, Manchester, England, M40 5BJ.

This notice applies when you visit this website, send an enquiry, communicate with us about our products, services or programmes, or become a business contact recorded in our customer relationship management system.

It does not describe data use by a Kinishi mobile app. See the separate app privacy notice. Third-party websites linked from this site have their own privacy notices.

Controller: Kinishi Limited
Privacy contact: contact@kinishi.co.uk
Automated decisions: None with legal or similarly significant effects

Information we use

We use only the information needed to understand, route and manage a business enquiry or relationship, operate the site, and understand whether the site is useful.

Enquiry details: enquiry type, name, organisation, email address, optional telephone number and the message you send.
Attribution details: the page and action that led to the form, and campaign parameters such as source, medium and campaign.
Business relationship details: correspondence, meeting notes, requirements, preferences, responsibilities and the history and outcome of an opportunity or customer relationship.
Website and device details: pages visited, interactions, referring page, approximate location, browser and device type, timestamps, IP address and security logs, depending on the services active when you visit.
Communication preferences: whether you have asked to receive, or not receive, business marketing communications.

Most information comes directly from you. We may also receive business contact details from a colleague, a specialist partner, an event, a referral, or a public professional source. If we obtain your information elsewhere and contact you, we will provide the required privacy information at or before the first communication.

Please do not include sensitive personal information, confidential third-party information or information about criminal offences in an enquiry unless we have specifically asked for it and explained why.

Why we use it and our lawful bases

Respond to and route enquiries: We use enquiry, contact and attribution details to understand what you need, direct the enquiry and respond. We rely on legitimate interests in managing relevant business enquiries and, where applicable, taking steps at your request before a contract.
Manage business relationships: We keep correspondence and proportionate CRM notes to manage opportunities, customer work, support, partnerships and follow-up. We rely on legitimate interests and, where applicable, performance of a contract.
Business marketing: We may send relevant Kinishi business communications where the law permits. We rely on consent where it is required and otherwise on legitimate interests for proportionate business-to-business communication. Every marketing message provides a way to opt out.
Operate, secure and improve the site: We use technical and security information to deliver the site, prevent abuse, diagnose faults and improve its content and journeys. We rely on legitimate interests in providing a secure and useful service, and on consent where required for analytics technologies.
Meet legal obligations: We may keep or disclose relevant records to meet legal, regulatory, tax, accounting, insurance or dispute-resolution requirements. We rely on legal obligation and legitimate interests in protecting our legal position.

Providing enquiry information is voluntary, but we cannot respond through the form without the required fields. You can instead contact us by telephone or email.

Analytics, cookies and similar technologies

The site may use essential technologies for security, form protection and remembering privacy choices. These are used only where they are necessary to provide the service you request or keep it secure.

With your consent, we use Google Analytics 4 to understand visits, traffic sources, journeys through the site and whether people complete an enquiry. Google may receive page addresses, referring pages, campaign and advertising click identifiers, browser and device information, approximate location, interaction events and cookie or similar identifiers.

We link Google Analytics 4 with Google Ads to measure how our advertising performs. A successful enquiry may be recorded as a Google Ads conversion so that we can attribute it to a campaign and improve our advertising. We do not use this measurement to make decisions about whether or how we respond to an enquiry.

Analytics and advertising measurement will not load unless you consent through the site’s privacy controls. You can change or withdraw that choice at any time through the same controls.

We do not use analytics information to make decisions with legal or similarly significant effects about individuals. We do not permit enquiry text, names, email addresses or telephone numbers to be sent to analytics services.

International transfers

Some providers may process information outside the UK. Where this is a restricted transfer, we use an applicable UK adequacy regulation or contractual safeguards such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with the required transfer assessment and supplementary measures.

You can contact us for more information about the safeguard used for a particular transfer.

How long we keep information

We apply the following working retention periods and delete or anonymise information when it is no longer needed:

Enquiries and prospective CRM records: up to 24 months after the last substantive contact, unless the relationship becomes active or a longer period is needed for a legal reason.
Customer, supplier and programme records: for the relationship and normally six years afterwards where needed for contracts, tax, accounting, insurance or legal claims.
Marketing records: until you opt out or the contact is no longer relevant; we review inactive records at least every 24 months. We may retain the minimum information needed to honour an opt-out.
Analytics event-level information: no more than 14 months. Aggregated statistics that no longer identify a visitor may be kept for longer.
Routine form and security logs: normally 30 days, unless an incident, investigation or legal requirement justifies longer retention.

We may keep information for a shorter or longer period where its nature, sensitivity, risk, purpose or a legal requirement makes that appropriate.

Your data protection rights

Depending on the circumstances and lawful basis, you may ask us for access to your personal information, correction, deletion, restriction, or transfer of information you provided. You may also withdraw consent at any time where we rely on consent.

You have the right to object to processing based on legitimate interests. Your right to object to direct marketing is absolute: if you object, we will stop using your personal information for that purpose.

These rights can be subject to legal limits. We may ask for enough information to verify your identity and protect your information. There is normally no fee, and we normally respond within one month.

To exercise a right, change a marketing choice or raise a concern, email contact@kinishi.co.uk.

Contact, complaints and changes

Please contact us first if you have a question or complaint so that we can investigate it.

Kinishi Limited
The Sharp Project
Thorp Road
Manchester
M40 5BJ
United Kingdom

Email contact@kinishi.co.uk or telephone +44 161 850 0056.

You may complain to the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, or telephone 0303 123 1113.

We will update this notice when our processing or providers change and will show the revised date at the top. If a change materially affects how we use information already held, we will provide additional notice where required.