We keep this Privacy Notice under review and will reflect any updates or changes to practice within this Privacy Notice. This Notice was last updated on 27 March 2022.
1 Important information and who we are
- register with us
- register for any of our events or resources
- fill out our online contact form
- correspond with us
- purchase a product or service
(b) This website is not intended for children, and we do not knowingly collect data relating to children.
(a) Kocho is the controller and responsible for the website.
Group Data Protection Officer
7-12 Noel Street
(c) You have the right to make a complaint at any time to the Information Commissioner’s Office, the UK supervisory authority for data protection issues (ico.org.uk) or to any equivalent body in the relevant jurisdiction (collectively, the “ICO”). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.
1.3 Changes to the privacy notice and your duty to inform us of changes
(a) It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.
1.4 Third-party links
2 The data we collect about you
2.1 Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).
2.2 We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:
- “Identity Data” includes first name, maiden name, last name, username or similar identifier, marital status, title, date of birth, photographs, job title, national insurance number, age, and gender.
- “Contact Data” includes billing address, residential address, delivery address, email address, work address, social media handles, telephone numbers, and fax number.
- “Financial Data” includes bank account details.
- “Transaction Data” includes details about payments to and from you and other details of products and services you have purchased from us.
- “Technical Data” includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plugin types and versions, operating system and platform, full ‘Uniform Resource Locators’ clickstream to, through and from the Site (including date and time), and other technology on the devices you use to access the Site.
- “Profile Data” includes your username and password, purchases or orders made by you, your interests, preferences, feedback and survey responses, products you viewed or searched for; page response times; download errors; length of visits to certain pages; and page interaction information (such as scrolling, clicks, mouse-overs, and methods used to browse away from the page).
- “Usage Data” includes information about how you use the Site, products, and services.
- “Marketing and Communications Data” includes your preferences in receiving marketing from us and our third parties, and your communication preferences. Where we need to collect personal data by law, or under the terms of a contract we have with you, and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with goods or services). In this case, we may have to cancel a product or service you have with us, but we will notify you if this is the case at the time.
3 How your personal data is collected
3.1 We use different methods to collect data from and about you including through:
(a) Direct interactions. You may give us your Identity Data, Contact Data and Financial Data by filling in forms or by corresponding with us by post, phone, email or otherwise . This includes personal data you provide when you:
- apply for our products or services
- register for any of our events
- create an account on the website
- request marketing to be sent to you
- promotion or survey
- give us some feedback
(b) Automated technologies or interactions. As you interact with the Site, we may automatically collect Technical Data about your equipment, browsing actions, and patterns. We collect this personal data by using cookies, server logs, and other similar technologies. We may also receive Technical Data about you if you visit other websites employing our cookies. See also section 4.8 below for further details.
(c) Third parties or publicly available sources. We may receive personal data about you from various third parties and public sources such as analytics providers; search information providers; advertising networks; technical, payment and delivery services; data brokers or aggregators; and publicly available sources, such as Companies House and the Electoral Register based inside the EU.
Please email [email protected] to find out more about the various third parties and public sources from which we may receive personal data about you.
4 How we use your personal data
4.1 We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:
- Where we need to perform the contract we are about to enter into or have entered into with you.
- Where it is necessary for our legitimate interest (or those of a third party) and your interests and fundamental rights do not override those interests.
- Where we need to comply with a legal or regulatory obligation.
Please email [email protected] to find out more about the types of lawful basis that we will rely on to process your personal data.
4.2 Generally, we do not rely on consent as a legal basis for processing your personal data other than in relation to sending third-party direct marketing communications to you via email or text message.
4.3 Promotional messages from us
(a) We strive to provide you with choices regarding certain personal data uses, particularly around marketing and advertising.
(b) We may use your Identity Data, Contact Data, Technical Data, Usage Data and Profile Data to form a view on what we think you may want or need, or what may be of interest to you. This is how we decide which products, services and offers may be relevant for you (we call this marketing).
(c) You will receive marketing communications from us if you have requested information from us, have purchased goods or services from us, or if you provided us with your details when you downloaded content or registered for an event. In each case, you have not opted out of receiving that marketing.
See also section 5 below for further details about how long we keep your data.
4.4 Opting out
(a) You can tell us or third parties not to contact you with updates and information regarding our products and services by following the unsubscribe instructions on any communications sent to you.
You also have the right to withdraw consent to marketing at any time by emailing [email protected].
(b) Where you opt out of receiving these marketing messages, this will not apply to personal data provided to us because of a product/service purchase, product/service experience or other transactions.
Please Note: Opting out does not preclude you from submitting forms on our website – e.g. to sign up for a webinar. As a result of you taking this action, some communications will be triggered even if you have chosen to opt out of marketing previously, so that we can meet the request you have made by submitting the form (e.g. to provide a join link to the webinar).
4.5 Profiling, segmentation and targeting
(a) The information you provide may also be used for profiling, segmentation and targeting purposes via our CRM and/or marketing automation platform.
This enables us to personalise your experience and improve business performance – for example, by helping to determine which content you may find most relevant, so that we can direct you to more of this and to less of the information that you find less useful.
Typical uses include dividing our database into sub-groups based on shared characteristics, lead nurturing and triggered communications.
You also have the right to withdraw consent to this profiling by emailing [email protected].
4.6 Analysing the use of our website
(a) To better understand how users access and use our website, both on an individual and aggregated basis, we use:
- HubSpot – to track individual activities and interactions.
- Google Analytics – aggregated and de-identified information on audience, acquisition, behaviour and conversions.
This data is collected and analysed with the intention of improving the user experience and the performance of our website.
4.7 Understanding marketing/campaign performance
(a) We use the following platforms to understand how our marketing activities are performing:
- HubSpot – including email performance metrics.
- GoToWebinar – including attendance data.
- Google Analytics – including acquisition source.
- LinkedIn – including performance metrics.
(b) Data may be aggregated and analysed to create business intelligence which will enable us to report on performance and make better informed decisions about future activities.
(a) We, or third-party service providers we use, may automatically collect and store information about your visits and interactions with our site in collective or aggregated data that does not identify you specifically , but is automatically received and recorded by us through the use of “cookies.”
(b) A cookie, also known as an HTTP cookie, web cookie, or browser cookie, is used by our web site to communicate certain information to and from your browser and the website.
This will include:
- Device ID
- Operating System
- Device Name and Model
- Location (e.g. Country or City)
- Pages viewed
- Links clicked
- Time of visit
- Length of visit
- Referring URL/web page
Most browsers will allow you to see what cookies you have and delete them from particular or all websites.
Be aware that any preference you have set will be lost if you delete all cookies.
4.9 Clear GIFs, pixel tags and other technologies
(a) Clear GIFs are tiny graphics with a unique identifier, similar in function to cookies, which are embedded invisibly on web pages. We or our service providers may use clear GIFs, in connection with our site to track your activities and compile statistics about usage of our site (e.g. web or social media analytics).
For example, we use HubSpot to deliver our email communications. We gather statistics around email opening and clicks using industry standard technologies including clear gifs to help us monitor and improve performance.
4.10 Change of purpose
(a) We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us.
(b) If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.
(c) Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.
5 How long we keep your information
5.1 As long as you keep engaging with us, we will retain your personal information under legitimate interest for as long as we consider there is value to you and to us of maintaining contact, unless you ask us to delete it sooner.
Contacts are only kept in our marketing database if they are showing signs of engagement (i.e. our database and system records at least an email click). This means we will stop emailing you if we haven’t heard from you for 12 months, and from this point you will be considered an inactive or ‘non-marketing’ contact. If you re-engage with us (by submitting a form on the website for example), you will be re-added to our mailing list and will start to receive emails again.
Non-marketing contacts are retained for a further 12 months before being permanently deleted if no further engagement is received.
6 Who we might share this information with
6.1 We may disclose your information to vendors, service providers or agents who perform functions on our behalf and enable us to:
- Fulfil requests for information
- Host content and assets
- Receive and send communications
- Update our records and marketing lists
- Generate reports
- Analyse data
Third-party platform providers include:
- HubSpot: Marketing automation platform.
- Salesforce/Kimble: CRM system.
- GoToWebinar: Webinar hosting platform.
- Google Analytics: Web analytics.
- LinkedIn: Insights Tag (i.e. advertising).
- Hootsuite: Social media management tool.
- SurveyMonkey: Online survey tool.
- iVent: Virtual events hosting platform.
6.2 Kocho staff
(a) To enable us to respond to your enquiries and contact you with relevant offers, your personal information will be disclosed to our employees, including sales and marketing personnel.
Our employees will only use your information to the extent necessary to perform their functions.
6.3 Business transfers
(a) In the event that we undergo re-organisation (including rebranding) or if we are acquired by/merge with another company, you agree that any personal information we hold about you may be transferred to that re-organised entity or third party.
6.4 Legal authorities
(a) We may disclose personal information if required to do so by law, court order or for the purposes of prevention of fraud or other crime, or if we believe that such action is reasonably necessary to protect and defend the rights, property or personal safety of Kocho, the Kocho website or its visitors.
6.5 Aggregate and de-identified information
(a) We may disclose aggregate or de-identified information about our users to third parties for marketing, advertising, research or similar purposes.
7 How we protect your information
7.1 We have taken reasonable steps to help protect the information we collect from loss, misuse, unauthorized access, disclosure, alteration, and destruction. These include training and awareness programmes for all staff and appropriate technical measures such as encryption of laptops, enforcement of strong password controls and virus and malware detection.
We do not transfer information outside the EEA.
8 Your rights to access, amend or delete the information we hold
8.1 You have the right to review and correct and/or delete the personal information we have collected about you, and to restrict the way in which we process that information.
Requests will be dealt with wherever possible within one month of receipt.
To make a request for personal information Kocho holds about you, please contact:
Group Data Protection Officer
7-12 Noel St
Ready to ‘Become greater’?
When you sign up to our mailing list, you’ll get the best content, expert resources, and exclusive event invites sent directly to your inbox.
Latest content and resources
Azure AD B2B vs B2C: What are the key differences between Microsoft’s external access products?
Microsoft Security and Compliance Roadshow – Edinburgh
Learn about the latest Azure and Microsoft 365 technologies and understand how you can maximise your Microsoft licencing investment to securely transform your firm and gain a competitive advantage.
Financial services juggernaut overhauls records management system and strengthens its compliance posture
The best Microsoft compliance tools you've never heard of!
Our compliance experts lift the lid on the capabilities of Microsoft’s leading compliance management solutions.
We’re here to help you on your journey towards becoming greater. Get in touch to find out how.