KFTA Group LTD (“KFTA Group”, “we”, “us”, “our”) is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, share, and protect personal data when you visit our websites, submit an enquiry, or otherwise interact with our services (together, the “Services”).
1) Who we are (Data Controller)
Data Controller: KFTA Group LTD
Registered address: 128 City Road, London, EC1V 2NX, United Kingdom
Email: [email protected]
Company Number: 16706929
If you have questions about this policy or your personal data, contact us at [email protected].
2) Where we operate
We build and operate performance marketing and lead acquisition services across the United Kingdom, United States, Canada, and Australia. Depending on your location and the service requested, your enquiry may be handled by our team and systems operating across these regions.
3) The personal data we collect
We may collect and process the following categories of personal data:
A) Information you provide to us
Identity and contact details: name, email address, telephone number, business name (if provided)
Enquiry and qualification information: details you submit in forms, assessments, or messages (for example, requirements, preferences, eligibility criteria, location, and other information relevant to your enquiry)
Communications: records of your communications with us (e.g., emails, form submissions)
B) Information we collect automatically
Technical data: IP address, browser type, device type, operating system
Usage data: pages viewed, time spent, clickstream, referring URLs, and interaction data
Cookie and tracking data: cookie IDs and similar identifiers (see Cookies section)
C) Information from third parties
Where lawful, we may receive information from:
advertising and analytics platforms (e.g., attribution data, campaign interaction signals)
partners or lead sources where you requested information and your data was shared appropriately
4) How we collect your data
We collect personal data when you:
submit a form, assessment, or enquiry on our website
contact us by email or phone
browse our website (cookies and similar technologies)
interact with our ads or content (where tracking is enabled and permitted)
5) How we use your data (purposes)
We use your personal data to:
respond to your enquiry and provide the information you requested
assess and validate enquiries (e.g., verifying details, checking fit against criteria)
arrange follow-up contact and progress next steps
operate our business, including internal record keeping and service administration
improve our website and Services (analytics, troubleshooting, optimisation)
measure marketing effectiveness and improve targeting (where permitted)
protect our business and users (fraud prevention, security, compliance)
comply with legal obligations and respond to lawful requests
6) Legal bases for processing (UK GDPR)
We process personal data under one or more of the following legal bases:
Consent: where you provide consent (for example, where required for certain cookies or marketing communications)
Contract / steps prior to contract: where processing is necessary to take steps at your request (for example, responding to an enquiry)
Legitimate interests: where necessary to operate and improve our business, respond to enquiries, prevent fraud, and maintain security, balanced against your rights
Legal obligation: where required to comply with applicable laws
7) Phone calls and follow-up contact (calls only)
If you provide a telephone number, we may contact you by phone call to:
respond to your enquiry,
confirm information you submitted, and
discuss next steps related to your request.
If you do not wish to receive calls, you can tell us during the call or email [email protected], and we will use reasonable efforts to respect your request subject to legal and operational requirements.
Call recording: We do not routinely record calls unless we tell you in advance and it is lawful to do so. Where call recording is used, we will provide appropriate notice and explain the purpose.
8) Marketing communications
We may send marketing communications by email only where permitted by law and where required, with your consent. You can opt out at any time by using an unsubscribe link (where provided) or by emailing [email protected].
9) Cookies and similar technologies
We use cookies and similar technologies to:
enable core site functionality,
understand how visitors use our website,
measure marketing performance, and
improve content and user experience.
You can control cookies through your browser settings and, where available, through our cookie banner/preferences tool. Blocking certain cookies may affect website functionality.
10) Sharing your data
We may share your personal data in the following situations:
A) Service providers (processors)
We may share data with trusted third-party service providers that help us operate our business, such as:
website hosting and infrastructure providers
analytics and performance tools
CRM and workflow systems
email and communications providers
These providers are required to protect your data and only process it under our instructions.
B) Partners and fulfilment recipients (where relevant)
If your enquiry relates to a service that is delivered by or in collaboration with a third party, we may share the information necessary to respond to your request and progress it efficiently (for example, your name, contact details, and enquiry information).
Where relevant, lead recipients and operational partners may be located in the UK, US, Canada, or Australia, depending on your location and the service requested. We share data using an appropriate legal basis and, where required, with your consent.
C) Legal and safety reasons
We may disclose personal data where required to comply with law, enforce our terms, or protect our rights, users, or the public.
11) International data transfers
Because we operate across the UK, US, Canada, and Australia, your personal data may be processed in, accessed from, or stored in these countries, including by our service providers.
Where personal data is transferred outside the UK, we use appropriate safeguards as required by UK GDPR, which may include:
the UK International Data Transfer Agreement (IDTA) and/or the UK Addendum to EU Standard Contractual Clauses (as applicable), and
additional technical and organisational measures where appropriate.
You can contact us at [email protected] for further information about the safeguards used.
12) Data retention
We keep personal data only as long as necessary for the purposes described in this policy, including to:
respond to enquiries,
maintain business records,
resolve disputes, and
comply with legal obligations.
Retention periods vary depending on the type of data and the purpose of processing. You may request deletion where applicable (see Your Rights below).
13) Your rights (UK GDPR)
Depending on the circumstances, you may have the right to:
Access your personal data
Rectify inaccurate or incomplete data
Erase your data (in certain circumstances)
Restrict processing (in certain circumstances)
Object to processing (including objection to direct marketing)
Data portability (in certain circumstances)
Withdraw consent at any time (where we rely on consent)
To exercise your rights, email [email protected]. We may need to verify your identity before responding.
14) Complaints
If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the UK supervisory authority:
Information Commissioner’s Office (ICO)
15) Security
We implement appropriate technical and organisational measures to protect personal data. However, no system is completely secure, and we cannot guarantee absolute security of information transmitted online.
16) Children’s privacy
Our Services are not intended for children, and we do not knowingly collect personal data from children.
17) Changes to this policy
We may update this Privacy Policy from time to time. The latest version will always be published on our website with the updated “Last updated” date.
18) Contact us
For any questions or requests relating to this Privacy Policy or your personal data, contact: [email protected]