Privacy Policy

Last updated: 30 October 2026.

Who we are

Kivyu Automation ("we") is the controller of your personal data. Contact: yassinefusion9@gmail.com.

What we collect

Contact details you give us (name, email, phone, business name).
Audit questionnaire answers and business documents you share for a project.
Payment and invoicing records (card payments are processed by our payment provider; we do not store card numbers).
Basic website usage data (server logs; analytics only with consent).

Why and lawful basis (UK GDPR Art. 6)

To deliver services you order – contract.
To keep accounting records – legal obligation.
To contact businesses about relevant services, and improve our site – legitimate interests. You can object at any time.
Non-essential cookies and email marketing to individuals – consent (PECR).

Sharing

We use processors such as hosting, email, payment and AI/automation providers, under contracts requiring appropriate safeguards. Where data is transferred outside the UK we rely on adequacy regulations or the UK International Data Transfer Agreement/Addendum. We never sell personal data.

Retention

Client project data: up to 12 months after the project ends unless you ask us to delete it sooner. Financial records: 6 years after the end of the tax year. Enquiries that do not proceed: 12 months.

Your rights

You can request access, rectification, erasure, restriction, portability, or object to processing, and withdraw consent at any time. Email yassinefusion9@gmail.com; we respond within one month. You may complain to the Information Commissioner's Office: ico.org.uk, 0303 123 1113.

Security

We use access controls, encryption in transit and least-privilege access for client systems.