Privacy and
security policy

How KYNEKT^® protects your data

1. Commitment to privacy

KYNEKT^® LIMITED is committed to protecting your personal data and safeguarding the confidentiality, integrity and availability of all information it processes. We comply fully with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information we collect

We collect:

• Account information: name, contact details and KYNEKT ID verification data.
• Inventory data: details of tools and equipment you register.
• Location and telemetry data: real-time tracking information from K | TRAK^® devices.
• Transaction data: purchases and sales via ToolTrade^® (processed securely through third parties).
• Technical and analytical data: cookies, device identifiers and usage metrics.

3. How we use your data

We process personal data to:

• Provide and manage your KYNEKT account and services;
• Verify ownership and enable secure transactions;
• Detect and prevent fraud or misuse;
• Maintain security, analytics and service improvement; and
• Comply with legal or regulatory obligations.

Processing bases include contractual necessity, legitimate interests, consent and legal obligations.

4. Information security and governance

KYNEKT^® maintains a structured information-security management framework ensuring:

• Clear leadership accountability;
• Regular security reviews and objectives;
• Staff and contractor awareness training; and
• Documented policies consistent with risk-assessment outcomes.

5. Risk management and asset protection

We maintain an ongoing risk assessment covering systems, data and physical assets. All assets are inventoried and assigned an owner. Sensitive data and portable devices are encrypted, access-controlled and securely destroyed when redundant.

6. Access control and technical safeguards

Access is limited to authorised personnel only. We enforce multi-factor authentication, secure password policies, automatic timeouts and encryption of data in transit and at rest. Firewalls, anti-malware protection and intrusion monitoring are continuously maintained.

7. Physical and environmental security

Physical premises and information systems are protected by locks, surveillance and controlled entry. Portable equipment is safeguarded under a remote-working and device-management policy.

8. Data accuracy, retention and disposal

Data is reviewed for accuracy and necessity. It is retained only as long as required for service delivery or legal compliance, then securely erased or destroyed using certified methods.

9. Business continuity and incident management

Regular backups and tested disaster-recovery plans protect business continuity. In the event of an incident, KYNEKT^® will contain, investigate, notify affected users and authorities (where legally required), and review procedures to prevent recurrence.

10. Personnel and supplier management

All staff and contractors are bound by confidentiality and trained in data protection. Third-party providers (for example payment, analytics and hosting) must meet KYNEKT^®’s security and privacy standards and are contractually bound to equivalent safeguards.

11. Your rights

Under the UK GDPR, you may:

• Access, correct, delete or restrict processing of your data;
• Withdraw consent for marketing; and
• Request data portability.

Requests should be directed to privacy@kynekt.co.uk, or by post to KYNEKT LIMITED, 311 Regents Park Road, London, N3 1DP.

12. Compliance statement

KYNEKT^® LIMITED maintains comprehensive governance, risk-management and cybersecurity controls consistent with recognised UK industry standards. Policies, training and technical safeguards are reviewed annually to ensure resilience and compliance.

This policy is provided in good faith and may be updated from time to time. Last reviewed June 2026.