Privacy Policy.

KNOTWOOD LTD – PRIVACY POLICY (UNITED KINGDOM)

1. Introduction

Knotwood Ltd and its subsidiaries and affiliates (“Knotwood”, “we”, “us”, or “our”) respect your privacy and are committed to protecting personal data in accordance with the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data, as well as the rights you have under UK law. By using our website or providing personal data to us, you acknowledge that you have read and understood this Privacy Policy.

2. Information We Collect

We may collect, use, store, and transfer the following types of personal data: (a) Identity data – including name, title, date of birth, and gender. (b) Contact data – including postal address, email address, and telephone number. (c) Technical data – including IP address, browser type, device identifiers, operating system, and activity on our website. (d) Marketing and communications data – including preferences for receiving marketing from us or our partners. (e) Commercial and transactional data – including trade account information, purchase history, and credit references (where applicable). (f) Usage data – including how you use our website, forms, and marketing materials. (g) Any other data you choose to provide voluntarily.

3. How We Collect Personal Data

We collect personal data through: (a) Direct interactions – when you complete a contact form, request information, subscribe to marketing, or communicate with us by phone or email. (b) Automated technologies – when you use our website, we collect technical and usage data through cookies, analytics tools (Google Analytics 4), Meta Pixel, and similar technologies. (c) Third parties – such as CRM and marketing providers (HubSpot, Mailchimp), hosting services (Cloudways), analytics providers (Google), and advertising platforms (Meta). You can manage cookies through your browser settings or, where applicable, via our cookie consent banner provided by Complianz.

4. How We Use Personal Data

We will only use your personal data when the law allows us to. Under the UK GDPR, the lawful bases we rely on are: (a) Consent – where you have given clear consent to process your personal data for a specific purpose (e.g. marketing). (b) Contract – where processing is necessary for the performance of a contract with you. (c) Legal obligation – where processing is necessary to comply with the law. (d) Legitimate interests – where processing is necessary for our legitimate business purposes and your rights do not override those interests. We may use personal data to: – Provide and manage our products and services. – Communicate with you and respond to enquiries or complaints. – Maintain trade or supplier relationships. – Operate and improve our website and digital marketing. – Conduct analytics, research, and remarketing. – Comply with legal and regulatory obligations.

5. Marketing and Communications

We may send marketing communications if you have requested information or purchased goods from us, or if you have provided consent. You can withdraw consent or opt out of marketing at any time by selecting “unsubscribe” in any email or contacting us directly at privacy@knotwood.com. We may use Meta Pixel, Google Ads, HubSpot, and Mailchimp to deliver and measure our marketing campaigns.

6. Disclosure of Personal Data

We may share personal data with: (a) Service providers and business partners who assist with our operations, such as hosting, CRM, analytics, and marketing. (b) Professional advisers, accountants, auditors, and insurers. (c) Regulators, government bodies, or law enforcement where required by law. (d) Third parties in connection with a business sale, merger, or restructuring. (e) Other third parties with your consent. All service providers are required to handle personal data in accordance with applicable data protection laws and contractual confidentiality obligations.

7. International Data Transfers

Personal data may be transferred outside the United Kingdom to countries that do not have the same level of data protection, including the European Union, United States, Singapore, and Australia, where our service providers (Cloudways, HubSpot, Mailchimp, Google, Meta) maintain servers. We ensure that appropriate safeguards are in place, including the use of standard contractual clauses approved by the UK Government, to protect your data in accordance with UK GDPR.

8. Data Security and Retention

We take reasonable technical and organisational measures to secure personal data against accidental loss, misuse, or unauthorised access. Security measures include encryption, role-based access controls, and secure cloud hosting. We retain personal data only for as long as necessary for the purposes for which it was collected, or as required by law. Typical retention periods include: – Analytics and website logs – 13 months – Customer and supplier records – 7 years – Marketing data – until you withdraw consent or unsubscribe When personal data is no longer required, it will be securely deleted or anonymised.

9. Cookies and Tracking Technologies

Our website uses cookies, pixels, and similar technologies for analytics, advertising, and performance purposes. Cookies help us understand website usage, personalise content, and improve our services. You can control cookies through your browser or, where applicable, through the Complianz consent banner. For more information, please refer to: – Google Privacy Policy: https://policies.google.com/privacy/ – Meta Privacy Policy: https://www.facebook.com/privacy/policy/ – HubSpot Privacy Policy: https://legal.hubspot.com/privacy-policy/ – Mailchimp Privacy Policy: https://www.intuit.com/privacy/statement/

10. Your Rights Under UK Data Protection Law

Under the UK GDPR, you have the following rights: (a) Right of access – to obtain a copy of the personal data we hold about you. (b) Right to rectification – to correct inaccurate or incomplete data. (c) Right to erasure – to request that we delete your data in certain circumstances. (d) Right to restriction of processing – to limit how we use your data. (e) Right to data portability – to receive your data in a structured, commonly used format. (f) Right to object – to processing for direct marketing or other legitimate interest purposes. (g) Right to withdraw consent – at any time, where processing is based on consent. To exercise your rights, please contact us at sales@knotwood.com. We may require verification of identity and will respond within one month as required by law. If you are not satisfied with our response, you may contact the Information Commissioner’s Office (ICO) at https://ico.org.uk or telephone 0303 123 1113.

11. Children’s Privacy

Our website and services are not directed at children under 13 years old, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so that we can remove it.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in law or our practices. The updated version will be posted on our website with a revised effective date.

13. Contact Us

Our contact details are:

The Privacy Policy was last updated October 2025.