Privacy Policy

Effective date: 1 August 2026

1. Who we are

Konect Plus Ltd is the controller of the personal information described in this Privacy Policy.

Konect Plus Ltd
Company number 09151760
Registered in England and Wales
Registered office: 93 Lakers Rise, Banstead, England, SM7 3LA

For privacy questions or to exercise a data protection right, contact hello@konectplus.com.

2. Information we collect

When you contact us or request an assessment, we may collect your name, work email address, telephone number, job title, organisation, country, preferred contact method and the message or enquiry you submit.

For an assessment request, we may also collect the route you select and answers relevant to that route, such as organisation type, sector, approximate user numbers, current systems, priorities, processes and services of interest.

We record your Privacy Policy acknowledgement and, if you choose it, your separate marketing preference. Where present, we may also receive referral and campaign parameters supplied with the request.

To protect the website and its forms, we process limited technical information including a one-way hash of the submitting IP address, browser user-agent information, session and CSRF security data, and rate-limiting or abuse-prevention information. Authorised administrators may add an enquiry status, assignment, internal notes and an event history while handling the request.

Please do not submit passwords, secret keys, full user lists, administration credentials, confidential documents or sensitive personal information through the public forms.

3. How we obtain information

Most information is provided directly by you when you complete a form or communicate with Konect Plus. Limited technical information is generated when the website receives and protects your request. Referral or campaign information may be supplied by your browser or by a link used to reach the form.

4. Why we use information and our lawful bases

• Contact and assessment enquiries: to receive, assess and respond to your request. Where applicable, we rely on steps taken at your request before entering into a contract. Otherwise, we rely on our legitimate interests in responding to professional and institutional enquiries.
• Enquiry and opportunity management: to qualify a request, arrange a conversation and keep an appropriate record. We rely on our legitimate interests in managing genuine enquiries and business relationships.
• Website security and abuse prevention: to protect our forms, systems and users from spam, misuse and security threats. We rely on our legitimate interests in operating and protecting the service.
• Legal, regulatory and accounting requirements: where processing is necessary to comply with a legal obligation.
• Optional marketing: to send relevant Konect Plus updates, programmes or event information only where you have given separate, explicit consent. Marketing is optional and the box is not selected by default.

This first release does not sell products or conclude contracts online. Confirming that you have read this Privacy Policy is an acknowledgement that the information was presented to you; it is not general consent to all processing.

5. Who receives information

Access is limited to authorised Konect Plus personnel who need the information to review, respond to or administer an enquiry. We may also use the following categories of recipient where necessary:

• hosting and cPanel infrastructure providers;
• email delivery providers;
• secure backup and storage providers;
• professional and technical providers acting on Konect Plus instructions; and
• public authorities where disclosure is legally required.

6. International transfers

Some providers may process personal information outside the United Kingdom. Where a restricted transfer takes place, we will rely on an applicable adequacy decision or put appropriate safeguards in place as required by data protection law. You may contact us for information about the safeguards relevant to your information.

7. How long we keep information

• Unsuccessful or inactive enquiries: 24 months after the last meaningful contact.
• Client and contractual records: for the duration of the relationship and then for as long as needed for legal, accounting and claims-management obligations.
• Marketing data: until consent is withdrawn or after 24 months of inactivity. We may retain minimal suppression information so that we continue to respect an objection or withdrawal.
• Security logs: 12 months, unless they are required for longer to investigate or manage an incident.
• Audit and opportunity records: 24 months.
• Backups: through the normal backup rotation, which has a maximum period of 90 days.

We review retained information quarterly and delete or anonymise it when the applicable period expires. Validated rights requests are handled manually. Information in backups is removed through the normal rotation.

8. Automated decisions

Information submitted through the public forms is not currently used for solely automated decisions that produce legal or similarly significant effects. Enquiries are reviewed by people.

9. Your data protection rights

Depending on the processing and its lawful basis, you may have rights to ask for access to your personal information, correct inaccurate information, request erasure, restrict processing, object to processing, and receive certain information in a portable format.

You have an absolute right to object to direct marketing. Where processing relies on consent, you may withdraw that consent at any time without affecting processing carried out before withdrawal. Contact hello@konectplus.com to make a request or withdraw marketing consent.

10. Complaints

Please contact us first if you have a concern about how we use personal information. You may also complain to the UK Information Commissioner’s Office. Current contact and complaint information is available at ico.org.uk/make-a-complaint.

11. Essential cookies and similar technologies

The website currently uses only first-party Laravel session and CSRF protection cookies. The application session cookie maintains the session, language choice, form validation state and security context. The CSRF token protects form submissions against cross-site request forgery. These technologies are necessary to provide and secure the requested website functions.

The first release does not use analytics cookies, advertising pixels or non-essential tracking scripts. No consent banner is used while this remains true. We will update this policy and implement an appropriate consent mechanism before introducing any non-essential technology that requires consent.

12. Changes and contact

We may update this Privacy Policy when our services or data-handling practices change. The effective date above identifies the current version. Questions and rights requests should be sent to hello@konectplus.com.