Privacy Policy

1. Who we are

KXCO is a software company operating as part of Knightsbridge Group, incorporated in the United Kingdom and the United States. We build and license trust and infrastructure software for licensed institutions, businesses and developers. We do not hold client assets, provide regulated financial services, or act as a custodian.

For the personal information handled through this website, the data controller is:

• Controller. KXCO by Knightsbridge Group
• ICO Data Protection Register. Registration no. ZC182579
• How to reach us. kxco.ai/contact

2. Scope of this policy

This policy covers the public KXCO website at kxco.ai and its informational subdomains. Some KXCO products and platforms, for example our signing, identity, wallet and network services, operate under their own terms and privacy notices, and where an institution deploys KXCO software to serve its own customers, that institution is the controller for its users' data, not KXCO. This policy does not cover third-party websites we link to.

3. Information we collect

Information you give us

When you use our contact or briefing form, or email us, we collect the details you choose to provide, typically your name, email address, company/organisation, and the content of your message. We only collect what you voluntarily submit; we do not require any information beyond what is needed to respond.

Information collected automatically

When you visit the site, our hosting and content-delivery layer records standard technical data for security and reliability: IP address, browser and device type, referring page, the pages you view, and timestamps. Our analytics tool records pseudonymous usage events and an approximate (city/region-level) location derived from your IP address.

4. Cookies & analytics

We use Google Analytics (Google gtag) to understand how the site is used and to improve it. Google Analytics sets first- and third-party cookies and processes a pseudonymous identifier and approximate location. We do not use advertising, retargeting or cross-site tracking cookies, and we do not sell any data.

You can block or delete cookies in your browser settings, and you can opt out of Google Analytics using Google's browser opt-out add-on. Blocking analytics cookies does not affect your ability to use the site.

5. How & why we use it, and our legal basis

Under the UK GDPR we must have a lawful basis for each use of your personal information:

We do not use your information for automated decision-making or profiling that produces legal or similarly significant effects, and we do not sell, rent or trade personal data.

6. Who we share it with

We share personal information only with service providers ("processors") who help us run the site, and only as needed to provide their service. These currently include:

We may also disclose information if required by law, court order or a regulator, or to protect our legal rights. If our business is reorganised, personal data may transfer as part of that process, subject to this policy.

7. International transfers

Some of our providers are based in the United States, so your information may be transferred outside the UK/EEA. Where it is, we rely on appropriate safeguards recognised under UK data protection law, such as the UK's International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with the provider's own data-protection commitments.

8. How long we keep it

Enquiry and contact-form submissions are kept for as long as needed to deal with your request, and are deleted within 12 months unless you enter into a commercial relationship with us (in which case relevant records are kept for the duration of that relationship and any period required by law). Technical logs and analytics data are retained for shorter periods in line with our providers' defaults.

9. How we protect it

All traffic to kxco.ai is encrypted in transit using modern TLS. We apply access controls and rely on reputable infrastructure providers with their own security programmes. No method of transmission or storage is completely secure, but we take reasonable technical and organisational measures to protect your information and to detect and respond to incidents.

10. Your rights

If you are in the UK or EEA, you have the right to:

• Access the personal data we hold about you;
• Rectify data that is inaccurate or incomplete;
• Erase your data ("right to be forgotten");
• Restrict or object to our processing, including processing based on legitimate interests;
• Request portability of data you provided to us; and
• Withdraw consent at any time, where we rely on consent.

To exercise any of these rights, contact us at kxco.ai/contact. We will respond within one month. Exercising your rights is free, and we will not treat you differently for doing so.

You also have the right to complain to the UK's supervisory authority, the Information Commissioner's Office (ICO), though we would appreciate the chance to address your concern first:

• Information Commissioner's Office. Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, United Kingdom. Helpline 0303 123 1113 · ico.org.uk

11. Children

This website is intended for businesses and professional users and is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with data, contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top reflects the latest revision. Material changes will be posted on this page; continued use of kxco.ai after an update constitutes acceptance of the revised policy.

13. How to contact us

For any privacy question, or to exercise your rights, reach us here:

• Controller. KXCO by Knightsbridge Group
• ICO registration. ZC182579
• Contact. kxco.ai/contact

This notice is provided for transparency and is not legal advice. If you rely on it for compliance, have it reviewed by a qualified data-protection adviser against your current processing and entity details.