Privacy Policy

We respect your privacy and are committed to protecting your privacy and personal data and providing you with a safe online experience. This Privacy Policy covers the collection, use, and disclosure of personal information collected through the website at www.kocho.co.uk (the “Website”) and limited amounts of personal information processed via our several applications, including without limitation, Alira Software Application (“Applications”). In addition, this Privacy Policy applies to certain data processing purposes as described below. To make this Privacy Policy easier to read, the Website and the Applications are collectively called the “Services.” This Privacy Policy applies where it is referred to, e.g. in electronic communication messages.

We keep this Privacy Policy under review and will reflect any updates or changes to practice within this Privacy Policy. This Policy was last reviewed on 9 October 2025. This Privacy Policy may be amended from time to time, at our sole discretion. If there are any material changes to this Privacy Policy, we will notify you as required by applicable law which may include posting to our Website, sending an email, or other means.
In this Privacy Policy “personal information” means information relating to an identified or identifiable natural person, as defined in Art. 4 (1) GDPR. Examples include your name, telephone number, and email address.

Please note that unless otherwise stated herein, this Privacy Policy does not apply to personal information that the Applications process on behalf of a subscriber (“Subscriber Data”). The Applications will process Subscriber Data only in accordance with the documented instructions of the subscriber as set forth in the applicable contract we have with the subscriber.

1 Important information and who we are

1.1 Purpose of this Privacy Policy

(a) This Privacy Policy aims to give you information on how we collect and process your personal information through your use of our Website and/or Application, including any information you may provide through the Website and/or Application when you:

• register with us
• register for any of our events or resources
• fill out our online contact form
• correspond with us
• purchase a product or service
• use the functionalities of the application

(b) The Website and Applications are not intended for children, and we do not knowingly collect data relating to children.

(c) It is important that you read this Privacy Policy together with any other privacy notice or fair processing notice we may provide on specific occasions when we are collecting or processing personal data about you, so that you are fully aware of how and why we are using your data. This Privacy Policy supplements the other notices and is not intended to override them.

1.2 Controller

(a) Kocho is the controller and responsible for the Website and/or Applications.

(b) We have appointed a Group Data Protection Officer (DPO) who is responsible for overseeing questions in relation to this Privacy Policy. If you have any questions about this Privacy Policy, including any requests to exercise your legal rights, please contact the DPO using the following details:

Group Data Protection Officer
Kocho
Uncommon Holborn
81-87 High Holborn
London
WC1V 6DF
Email: [email protected]

(c) You have the right to make a complaint at any time to the Information Commissioner’s Office, the UK supervisory authority for data protection issues (ico.org.uk) or to any equivalent body in the relevant jurisdiction (collectively, the “ICO”). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.

1.3 Changes to the privacy notice and your duty to inform us of changes

(a) It is important that the personal information we hold about you is accurate and current. Please keep us informed if your personal information changes during your relationship with us.

1.4 Third-party links

(a) The Website and/or Applications may include links to third-party websites, plugins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share information about you. We do not control these third-party websites or applications and are not responsible for their privacy statements. When you leave the Website and/or Application, we encourage you to read the privacy policy of every website you visit or application you use.

2 The data we collect about you

2.1 Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).

2.2 We may collect, use, store and transfer different kinds of personal information about you which we have grouped together as follows:

• “Identity Data” includes first name, maiden name, last name, username or similar identifier, title, photographs, job title, and job seniority.
• “Contact Data” includes billing address, residential address, delivery address, email address, work address, social media handles, and telephone numbers.
• “Financial Data” includes bank account details.
• “Transaction Data” includes details about payments to and from you and other details of products and services you have purchased from us.
• “Technical Data” includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plugin types and versions, operating system and platform, full ‘Uniform Resource Locators’ clickstream to, through and from the Site (including date and time), and other technology on the devices you use to access the Site.
• “Profile Data” includes your username and password, purchases or orders made by you, your interests, preferences, feedback and survey responses, products you viewed or searched for; page response times; download errors; length of visits to certain pages; and page interaction information (such as scrolling, clicks, mouse-overs, and methods used to browse away from the page).
• “Marketing and Communications Data” includes your preferences in receiving marketing from us and our third parties, and your communication preferences. Where we need to collect personal data by law, or under the terms of a contract we have with you, and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with goods or services). In this case, we may have to cancel a product or service you have with us, but we will notify you if this is the case at the time.

3 How your personal data is collected

3.1 The methods of personal information we collect depend on how you interact with our Services.

(a) Direct interactions. You may give us your Identity Data, Contact Data and Financial Data by filling in forms or by corresponding with us by post, phone, email or otherwise. This includes personal information you provide when you:

• apply for our products or services
• register for any of our events
• create an account on any of the Applications
• request marketing to be sent to you
• participate in promotion or survey
• provide us with feedback

(b) Customer or Potential Customer. If you are affiliated or associated with a Kocho customer or a potential Kocho customer, we may collect personal information such as your name, gender, business e-mail address, job title/job function/role/department, home or work address, telephone and fax number, and other related information. We also might obtain personal information about you from third-party business partners or sources, such as contact information provided by any of our referral partners or publicly available sources. We use this personal information for marketing activities or for Kocho customer and potential Kocho customer support, such as when you submit requests to us or send us emails in the context of our relationship as an actual or potential service provider to you.

c) Authorized User. If you are an authorized user of one of our subscribers, we may collect personal information associated with your Application account such as your name, work email address, and information about how you use the Applications. We use this personal information for account provisioning and to improve our Services.

d) Supplier, Vendor or Partner. If you are affiliated or associated with a Kocho supplier, vendor, or partner, we may collect personal information from you such as your name, gender, business email address, job title/job function/role/department, home or work address, telephone and fax number, banking information (sole trader / independent contractors only) and other related information. We may collect personal information either directly from you or from other sources, such as from business contacts or publicly available sources. We use this personal information either to fulfil a contract with you, to pursue our legitimate interest to maintain a database on our suppliers, vendors, or partner, or in case of consent.

e) Job Applicants. If you respond to one of the job openings or opportunities we post on our Website or on social media (e.g. LinkedIn), we will collect the personal information contained in your submission such as your maiden name, private email address and private telephone number, employment history, references, certificates, documents, work permit detail (if relevant), date of birth and age. Your personal information may be collected by an independent recruitment agency. We use this personal information to assess your suitability, aptitude, skills, and qualifications for employment with Kocho.

f) Subscriber Data. In some cases, our subscribers may permit us to process personal information contained in Subscriber Data documents the Applications process on their behalf such as name and business email address, job function. We use this personal information to pursue our legitimate interest to improve and optimize Kocho’s offerings, provide information to machine learning mechanisms, and generate internal industry-relevant analyses through the use of algorithms.

g) Automated technologies or interactions. As you interact with the Website and/or Applications, we may automatically collect Technical Data about your equipment, browsing actions, and patterns. This personal information can include your IP address, browser type, domain names, access times and referring website addresses, and other personal information about how you use the Services. We use this personal information to ensure network and information security, to market Kocho’s products and services, and to provide general statistics and analytics regarding the use of the Services according to our legitimate interests. We collect this personal information by using cookies, server logs, and other similar technologies. We may also receive Technical Data about you if you visit other websites employing our cookies. See also section 4.7 below for further details.

h) Third parties or publicly available sources. We may receive personal information about you from various third parties and public sources such as analytics providers; search information providers; advertising networks; technical, payment and delivery services; data brokers or aggregators; and publicly available sources, such as Companies House and the Electoral Register based inside the EU.

Please email [email protected] to find out more about the various third parties and public sources from which we may receive personal data about you.

4 How we use your personal data

Kocho collects and uses your personal information in accordance with applicable laws for a variety of business purposes, including:

4.1 To provide the Services or Information Requested, such as:

• Where we need to perform the contract we are about to enter into or have entered into with you.
• Managing your information and account.
• Responding to questions, comments, and other requests.
• Processing payment card and/or other financial information to facilitate your use of the Services.
• Providing access to certain areas, functionalities, and features of our Services.
• Answering requests for customer or technical support.
• Allowing you to register for events.

4.2 Administrative Purposed, such as:

• Where it is necessary for our legitimate interest (or those of a third party) and your interests and fundamental rights do not override those interests. These include, without limitation, direct marketing, research and development (including marketing research), network and information security, and fraud prevention.
• Contract management/administration (e.g., billing, etc.).
• Measuring interest and engagement in our Services.
• Improving the Services.
• Developing new products and services.
• Ensuring internal quality control and safety.
• Authenticating and verifying individual identities.
• Carrying out audits.
• Communicating with you about your account, activities on our Services, and Privacy Policy changes.
• Preventing and prosecuting potentially prohibited or illegal activities.
• Assessing and recording information about a job applicant’s qualifications in order to decide to whom to offer the position.
• Enforcing our contracts.
• Where we need to comply with a legal or regulatory obligation.

4.3 Promotional messages from us for marketing product and services

• We may use personal information to tailor and provide you with content and advertisements. We may provide you with these materials as permitted by applicable law.
• We strive to provide you with choices regarding certain personal data uses, particularly around marketing and advertising.
• We may use your Identity Data, Contact Data, Technical Data, Usage Data and Profile Data to form a view on what we think you may want or need, or what may be of interest to you. This is how we decide which products, services and offers may be relevant for you.
• You will receive marketing communications from us if you have requested information from us, have purchased goods or services from us, or if you provided us with your details when you downloaded content or registered for an event. In each case, you have not opted out of receiving that marketing.
• If you have any questions about our marketing practices or would like to opt out of using your personal information for marketing purposes, you may contact us at any time as set forth below

4.4 De-identified and Aggregated Information Use
We may use personal information and other data about you to create de-identified and/or aggregated information, such as de-identified demographic information, de-identified location information, information about the device from which you access our Services or other analyses we create. De-identified and/or aggregated information is not personal information, and we may use and disclose such information in a number of ways, including research, industry analysis, analytics, and any other legally permissible purposes.

4.5 Authorized Users
In cases where you use our Services as an authorized user on behalf of an organization that is our subscriber (e.g., your employer), that organization may access information associated with your use of the Services including usage and other data. Please note that your information may also be subject to such organization’s privacy policy. Kocho is not responsible for the privacy or security practices of our subscribers.
Please email [email protected] to find out more about the types of lawful basis that we will rely on to process your personal data.

5. Advertising

5.1 We partner with third parties to either display advertising on our Website or to manage our advertising on other sites. Our third-party advertising partners may use technologies such as cookies to gather information about visitor and customer activities on our Website and other sites in order to provide advertising based upon visitor and customer browsing activities and interests.

5.2 You may stop or restrict the placement of these advertising cookies on your device or remove them by adjusting your preferences as your browser or device permits.

5.3 You must separately opt-out in each browser and on each device. Please note this does not opt you out of being served non-personalized ads on our Website.

6. Opting out and Do Not Track

6.1 If you subscribe to our newsletter(s), or if otherwise permitted by law, we will use your name and email address to send promotional material and periodic updates to you. You may choose to stop receiving these communications can tell us or third parties not to contact you with updates and information regarding our products and services by following the unsubscribe instructions included on any communications sent to you or you can contact us at [email protected]. You also have the right to withdraw consent to marketing at any time by emailing [email protected].

6.2 Where you opt out of receiving marketing messages, this will not apply to information provided to us that we need to use to provide a purchased product or service, or mandatory communications relating to agreed products or services.

6.3 Please Note: Opting out does not preclude you from submitting forms on our Website – e.g. to sign up for a webinar or any event. As a result of you taking this action, some communications will be triggered even if you have chosen to opt out of marketing previously, so that we can meet the request you have made by submitting the form (e.g. to provide a meeting link to the webinar, etc.).

6.4 Do Not Track (“DNT”) is a privacy preference that users can set in certain web browsers. Please note that we do not respond to or honor DNT signals or similar mechanisms transmitted by web browsers.

7. Profiling, segmentation and targeting

7.1 The information you provide may also be used for profiling, segmentation and targeting purposes via our CRM and/or marketing automation platform.

7.2 This enables us to personalize your experience and improve business performance – for example, by helping to determine which content you may find most relevant, so that we can direct you to more of this and to less of the information that you find less useful.

7.3 Typical uses include dividing our database into sub-groups based on shared characteristics, lead nurturing and triggered communications.

7.4 You also have the right to withdraw consent to this profiling by emailing [email protected].

8. Analysing the use of our Website and Applications

8.1 To better understand how users’ access and use our Website and/or Applications, both on an individual and aggregated basis, we use:

• HubSpot – to track individual activities and interactions.
• Google Analytics – aggregated and de-identified information on audience, acquisition, behaviour and conversions.

8.2 This information is collected and analysed with the intention of improving the user experience and the performance of our Services.

9. Understanding marketing/campaign performance

9.1 We use the following platforms to understand how our marketing activities are performing:

• HubSpot – including email performance metrics.
• Microsoft Teams – for webinar attendance and engagement data.
• Google Analytics – including acquisition source.
• LinkedIn – including performance metrics.

9.2 Collected information may be aggregated and analysed to create business intelligence which will enable us to report on performance and make better informed decisions about future activities.

10. Cookies

10.1 The Website uses “cookies” to help you personalize your online experience. We, or third-party service providers we use, may automatically collect and store information about your visits and interactions with our Website in collective or aggregated data that does not identify you specifically , but is automatically received and recorded by us through the use of “cookies.”

10.2 A cookie, also known as an HTTP cookie, web cookie, or browser cookie, is a text file that is placed on your local storage (usually your browser’s storage) by a web page server. Cookies are used by our Website to communicate certain information to and from your browser and the Website. This will include:

• Browser
• Language
• Device ID
• Operating System
• Device Name and Model
• Location (e.g. Country or City)
• Pages viewed
• Links clicked
• Time of visit
• Length of visit
• Referring URL/web page

10.3 Cookies cannot be programmed, cannot carry viruses, and cannot install malware on your computer. Learn more about cookies on our Cookie Policy page.

10.4 Most web browsers automatically accept cookies, but if you prefer, you may refuse the use of cookies by selecting the appropriate settings in your browser. If you disable cookies you may still browse public areas of the Website, but some features and services may not function.

10.5 Most browsers will allow you to see what cookies you have and delete them from particular or all websites.

10.6 Be aware that any preference you have set will be lost if you delete all cookies.

10.7 For more information on how to modify your browser settings to block or filter cookies, see aboutcookies.org or cookiecentral.com/faq/.

11. Clear GIFs, pixel tags and other technologies

11.1 Clear GIFs are tiny graphics with a unique identifier, similar in function to cookies, which are embedded invisibly on web pages. We or our service providers may use clear GIFs, in connection with our site to track your activities and compile statistics about usage of our site (e.g. web or social media analytics).
For example, we use HubSpot to deliver our email communications. We gather statistics around email opening and clicks using industry standard technologies including clear gifs to help us monitor and improve performance.

12. Our Lawful Basis for Processing

12.1 Kocho’s processing of your personal information may be supported by the following lawful bases and purposes:

• Performance of a Contract: Kocho processes personal information where it is necessary for the performance of a contract to which you are a party or in order to take steps at your request prior to entering into a contract with you.
• Legitimate Interest: Kocho processes personal information to further its legitimate interests but only where its interests are not overridden by your interests or fundamental rights and freedoms.
• Consent: In some cases, Kocho also relies on your consent to process personal information. You can withdraw your consent at any time, which will not affect the lawfulness of the processing before your consent was withdrawn. If you would like to withdraw your consent, you may contact us at any time.
• Compliance with our Legal Obligations: Kocho processes personal information to comply with its legal obligations.

12.2 We will only use your personal information for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is aligned with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us.

12.3 If we need to use your personal information for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.

12.4 Please note that we may process your personal information without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.

13. How long we keep your information

13.1 As long as you keep engaging with us and your account is active, we will retain your personal information, as needed to provide you with Services and as necessary to comply with our legal obligations, resolve disputes, enforce our contracts, or where there is a legitimate interest pursued by us or a third party that is not overridden by your personal rights and freedoms. for as long as we consider there is value to you and to us of maintaining contact, unless you ask us to delete it sooner.

13.2 Contacts are only kept in our marketing database if they are showing signs of engagement (i.e. our HubSpot CRM records at least an email open). This means we will stop emailing you if we haven’t heard from you in over 24 months. From this point you will be considered an inactive or ‘non-marketing’ contact. If you re-engage with us (by submitting a form on the website for example), you will be re-added to our mailing list and will start to receive emails again. Note: if your contact details are updated in our CRM this may also trigger a sync back to our mailing list, although we will endeavour to prevent this happening and/or remove you if/when we become aware.

13.3 Non-marketing contacts are typically retained for 24 months before being permanently deleted from our marketing database if no further engagement is received.

14. Security of Your Personal Information

14.1 The security of personal information is very important to us. Kocho uses commercially reasonable efforts to put measures in place that are designed to secure your personal information from unauthorized access, use, or disclosure. We use commercially reasonable efforts to follow generally accepted standards to protect the personal information submitted to us, both during transmission and once we receive it. That said, no method of transmission over the Internet, or method of electronic storage, is 100% secure. We cannot guarantee the security of any information you provide to us. To the fullest extent permitted by applicable laws, we do not accept liability for unauthorized access, use, or disclosure. If you have any questions about security on the Website or Applications, you can contact us.

15. Who we might share this information with

We will share your personal information with third parties in the ways that are described in this Privacy Policy. Except as set forth in this Privacy Policy, Kocho does not sell, rent or lease its customer lists to third parties.

15.1 Affiliates, Vendors, Service Providers and Agents: We may share your information with affiliates or third-party vendors, service providers or agents who perform functions and/or services on our behalf (such as to perform statistical analysis, send you email or postal mail, provide customer support or otherwise support our business and the Services) and enable us to:

• Fulfil requests for information
• Host content and assets
• Receive and send communications
• Update our records and marketing lists
• Generate reports
• Analyse data

Third-party platform providers include:

• HubSpot: Marketing automation platform.
• Salesforce/Kimble: CRM system.
• Google Analytics: Web analytics.
• LinkedIn: Insights Tag (i.e. advertising).

15.2 Kocho staff: To enable us to respond to your enquiries and contact you with relevant offers, your personal information will be disclosed to our employees, including our sales and marketing personnel. Our employees will only use your information to the extent necessary to perform their functions.

15.3 Business transfers: In the event that we undergo re-organization (including rebranding) or if we are acquired by/merge with another company or we are involved in financing due diligence, bankruptcy, receivership, the transition of service to another provider, or sale of all or a portion of our assets,, you agree that any personal information we hold about you may be sold or transferred as a part of such transaction, as permitted by law and/or contract.

15.4 Legal authorities: We may disclose your personal information if required to do so by law, court order or for the purposes of prevention of fraud or other crime, or if we believe that such action is reasonably necessary or advisable to (i) comply with law enforcement or national security requests and legal processes, such as a court order or subpoena; (ii) protect your, our or others’ rights, property, or safety; (iii) protect and defend the rights, property or personal safety of Kocho, the Kocho Website, the Application or its visitors; (iv) enforce Kocho’s policies and contracts; (v) collect amounts owed to us; or (vi) prevent financial loss or in connection with an investigation or prosecution of suspected or actual illegal activity.

15.5 Aggregate and de-identified information: We may disclose aggregate or de-identified information about our users to third parties for marketing, advertising, research or similar purposes.

15.6 Event sponsors and partners: We may disclose personal information from event registrations to sponsors and partners, where an interest has been expressed in their services.

16. Kocho’s privacy policy concerned with recruitment

16.1 Purpose
(a) For Kocho to operate its recruitment process, we need to process personal information about candidates and job applicants. The organisation is committed to being transparent about how it collects and uses data in line with data protection obligations. The purpose of this section is to inform you how we will use and protect personal information provided by candidates.

(b) Except as set out in this Notice, or as required by law, your personal data will not be provided to any third party without your prior written consent.

(c) Our email address for all recruitment purposes is [email protected] and our phone number is (0800 044 5009).

16.2 The data we collect about you for recruitment purposes

(a) Your personal data will be held by Kocho. This will include information within your application and any additional information about you that you provide, or that is provided by others as part of the recruitment process. This includes the following:

• Your application form and any attached correspondence; the content of any emails, letters and telephone calls (which may be recorded) and any conversations.
• Your name, address and contact details including telephone number and email address.
• Details of your education history, employment history (including absence information), your qualifications, skills and experience.
• Information about your current levels of remuneration, including benefit entitlements, notice periods.
• Any information we receive from referees or from other organisations such as agencies.
• Any information related to credit checking and criminal activity.
• Information for your entitlement to work in UK.
• If you have a disability or there are other factors that Kocho needs to take into account in the recruitment process, including the need to make reasonable adjustments to the process to meet your requirements.

(b) Special categories and criminal information

• Some personal information is defined as “special categories” data (for example information related to ethnic origin, political opinions, religious beliefs, physical/mental health). Data may also be required in relation to, criminal proceedings and offences. We may request this type of information as part of the recruitment process for the purposes of Equal Opportunities Monitoring or for carrying out Disclosure and Barring Service (DBS) checks.
• If we do request this sensitive information, where appropriate, we will ask for your explicit consent to the processing of this information; and ensure such information is treated confidentially.

(c) References

• Successful candidates will be asked to provide references and other background check information, such as proof of right to work, credit and other financial history checks, and sometimes criminal records checks.
• We will seek references only once an offer of employment has been made and we will obtain your consent before we contact your referee. It is your responsibility to ensure the referee is aware you have provided us with their details and is happy for you to do so and that they are happy to be contacted by us.

16.3 Submitting your personal data
(a) Kocho collects information in a variety of ways, for example through application forms, CVs, obtained from your passport or any other identity documents, or information collected through interviews or other forms of assessment.

(b) By submitting your personal data and application for employment, you:

• Declare you have read, understood and freely accept the statements provided in this Privacy Notice.
• Declare the information provided is complete and accurate to the best of your knowledge.
• Understand that deliberate omissions and incorrect information may lead to your application being rejected.
• Allow Kocho to process the information contained in your application and any other information you may provide separately as part of the recruitment process in support of your application.
• And for successful candidates, authorise Kocho to make any reference checks, credit and criminal checks that are considered as necessary for your application.

16.4 How we handle your personal data during the recruitment process

(a) While processing your application we may contact you by post, email, telephone or text message using the contact details you provided. During the recruitment process we may research comments and opinions via publicly available social media platforms such as LinkedIn, Twitter and Facebook. Your personal data you provide as part of the recruitment process will only be held and processed for the purpose of the recruitment/ selection process and in connection with subsequent employment/ placement.

(b) Kocho has a legitimate interest in processing personal data during the recruitment process and keeping records for the process. Processing data from the recruitment process allows us to manage the recruitment process, assess the suitability of the candidate for employment and to decide whether to make an offer of employment.

(c) In the event of your application being successful (resulting in an offer of employment and your acceptance of that offer), the personal information collected by Kocho during the recruitment process will be held in recruitment and HR systems, and emails or other IT systems for the duration of your employment, subject to the Kocho Privacy Notice for Employees.

(d) In the event your application was unsuccessful, your personal information will be held on our system for a period of up to 6 months. The purpose of the retention of this personal data is that it might be accessed or re-used in future recruitment processes or in relation to subsequent applications for employment made by you and to respond to statutory reporting requests. At the end of the period as stated above, or once you withdraw consent, your data will be deleted and destroyed.

16.5 Sharing your personal data

(a) Where your application for employment with us is via a recruitment agency, we will share your details with them.

(b) If you are successful in your application and we make a search via a credit reference agency in assessing your application, we will keep a record of the search whether or not the results are successful or not. Our search results are used for purposes related to money laundering and debt. You have the right to request this information from the credit reference agency.

16.6 Who has access to your data?

(a) Your information will be shared internally for the purpose of the recruitment exercise. This includes members of the People and recruitment teams, interviewers and managers involved in the recruitment process.
16.7 What if you do not provide personal data?

(b) You are under no statutory, or contractual obligation to provide personal data to Kocho during the recruitment process.

(c) However, if you do not provide this information, it might affect our ability to process your application properly, or even at all.

17. Your rights to access, amend or delete the information we hold

17.1 All personal information processed by us may be transferred, processed, and stored anywhere in the EEA. We have taken reasonable steps to help protect the information we collect from loss, misuse, unauthorized access, disclosure, alteration, and destruction consistent with the requirements of applicable laws. These include training and awareness programmes for all our staff and appropriate technical measures such as encryption of laptops, enforcement of strong password controls and virus and malware detection.
We do not transfer information outside the EEA.

18. Your Rights

18.1 You have a number of rights with regard to your personal data. You have the right to:

• Request a copy of the personal data that we hold about you.
• Correct or delete your personal data.
• Restrict, suspend, or pause the processing of your personal data, if, for example, it is wrong and needs to be changed.
• Object to the processing of your personal data, as well as in certain circumstances the right to data portability.

18.2 If you have provided consent for the processing of your data you have the right to withdraw that consent at any time. This will not affect the lawfulness of the processing before your consent was withdrawn.

18.3 Requests will be dealt with wherever possible within one month of receipt.

18.4 To make a request for personal information Kocho holds about you, please contact:

Group Data Protection Officer
Kocho
[email protected]