Welcome to Akendi UK's comprehensive privacy policy. We are committed to protecting your personal data and respecting your privacy rights in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and all applicable UK data protection laws. This policy explains how we collect, use, store, and protect your personal information when you visit our website or engage with our services.
Akendi operates as a data controller for the personal information we collect about you. We are registered with the Information Commissioner's Office (ICO) and comply with all relevant UK data protection regulations.
As a UK resident, you have specific rights regarding your personal data:
We collect and process the following categories of personal data:
We process your personal data under the following legal bases as defined by UK GDPR:
We process your personal data for the following purposes:
We use cookies and similar technologies to enhance your website experience. Our cookies fall into these categories:
You can manage your cookie preferences through our cookie banner or by contacting us. Withdrawing consent for non-essential cookies may affect website functionality.
We may share your personal data with:
Post-Brexit Data Transfers: For international data transfers, we implement appropriate safeguards including Standard Contractual Clauses (SCCs) approved by the UK authorities or rely on adequacy decisions. We ensure all transfers comply with UK data protection requirements.
We retain your personal data only for as long as necessary:
We implement robust technical and organisational measures to protect your personal data, including:
In accordance with UK GDPR requirements, we will report any personal data breach to the ICO within 72 hours of becoming aware of it, where feasible. We will also inform affected individuals without undue delay where the breach is likely to result in high risk to their rights and freedoms.
Our services are not directed at children under 16 years of age. We do not knowingly collect personal data from children under 16. If we become aware that we have collected such data, we will take immediate steps to delete it.
We may update this privacy policy periodically to reflect changes in our practices or applicable law. We will notify you of any material changes by posting the updated policy on our website and updating the "last updated" date. For significant changes, we may also provide additional notice via email.
We are registered with the Information Commissioner's Office (ICO). If you have concerns about our data processing practices, you can contact us directly. You also have the right to lodge a complaint with the ICO at any time:
Under UK GDPR, you have several fundamental rights including the right to be informed, right of access, right to rectification, right to erasure ('right to be forgotten'), right to restrict processing, right to data portability, right to object, and rights related to automated decision making including profiling. These rights are designed to give you control over your personal data.
To request deletion of your personal data, please contact us at contact@akendi.com with 'Data Deletion Request' in the subject line. Include your full name, email address, and specify which data you'd like deleted. We will respond within one month and delete your data where legally permissible under UK GDPR. Note that we may need to retain some data for legal or legitimate business purposes.
Post-Brexit, the UK has its own data protection regime based on UK GDPR and the Data Protection Act 2018. For international transfers, we use appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by UK authorities or rely on adequacy decisions. We ensure all data transfers comply with both UK requirements and destination country laws, maintaining the same high level of protection.
Yes, we are registered with the Information Commissioner's Office (ICO) as required under UK data protection law. We comply with all ICO guidelines and would report any qualifying data breaches within 72 hours of becoming aware of them, as required by UK GDPR.
We use three types of cookies: essential cookies for basic website functionality (these don't require consent), analytics cookies to understand user behaviour and improve our website (requires consent), and marketing cookies for advertising purposes (requires consent). You can manage your cookie preferences at any time through our cookie banner or by contacting us directly.
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Typically, client project data is kept for 7 years for legal and accounting purposes, marketing data until you withdraw consent or we determine it's no longer relevant, website analytics data for 26 months, and general communication records for 3 years. Specific retention periods depend on the type of data and legal requirements.
You can withdraw consent for marketing communications at any time by clicking the 'unsubscribe' link in any marketing email, updating your preferences in your account settings, or contacting us directly at contact@akendi.com. Withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.
In the unlikely event of a personal data breach, we follow UK GDPR requirements by reporting qualifying breaches to the ICO within 72 hours of becoming aware of them. If the breach is likely to result in high risk to your rights and freedoms, we will also notify you directly without undue delay. We have comprehensive incident response procedures to minimise any potential impact.
Yes, you have the right to request a copy of all personal data we hold about you. This is called a Subject Access Request (SAR). Contact us at contact@akendi.com with 'Subject Access Request' in the subject line. We'll provide this information free of charge within one month, along with details about how we process your data.
We do not use automated decision-making or profiling that would significantly affect you. Any analytics we conduct is for general website improvement and business purposes. If we were to implement automated decision-making in the future, we would update this policy and ensure compliance with UK GDPR requirements, including your right to human intervention.
help you?