At Skrifts KPO Ltd., your privacy is our priority. This Privacy Policy explains how we collect, use, store, and protect your personal data in compliance with the United Kingdom General Data Protection Regulation (UK GDPR) and other applicable data protection laws. We are committed to safeguarding your information with transparency, integrity, and respect.

Data Controller

Skrifts KPO Ltd., registered in Scotland, United Kingdom, acts as data controller for the personal data collected through our website and services. Our contact details, including our Data Protection Officer (DPO), are provided at the end of this Policy.

Information We Collect

We collect personal data to provide and enhance our consulting services. Types of information collected include:

• Contact Information: Name, email, telephone number, mailing address.

• Professional Information: Job title, company name, and related business details.

• Usage Information: IP addresses, browser type, pages accessed, and interaction data from our website.

• Communication Data: Information you provide when contacting us via email, forms, or other channels.

We gather this data when you engage with us as a client, partner, job applicant, newsletter subscriber, or website visitor.

How We Use Your Information

We use your personal data for the following purposes, based on appropriate legal bases:

• Providing Services: Fulfilling our contractual obligations and delivering consulting services (Legal basis: Performance of a contract).

• Communication: Responding to inquiries, sharing service information, and managing relationships (Legal basis: Legitimate interests and contract performance).

• Service Improvement: Analyzing usage trends and enhancing our offerings (Legal basis: Legitimate interests).

• Marketing: Sending promotional content upon your consent, with opt-out options available (Legal basis: Consent).

• Compliance: Fulfilling legal and regulatory requirements (Legal basis: Legal obligation).

Data Sharing and Disclosure

We will not sell or rent your personal information. Data sharing is limited to:

• Trusted service providers who support our operations under confidentiality agreements.

• Legal authorities when required by law or court orders.

• Business transfers, such as mergers or acquisitions, with continued commitment to this Privacy Policy.

International Data Transfers

As a global firm, your data may be processed outside the UK. Transfers comply with UK GDPR requirements using safeguards like standard contractual clauses to ensure protection.

Your Data Protection Rights

Under the UK GDPR, you have rights including:

• Access to your personal data.

• Correction of inaccuracies.

• Deletion under certain conditions.

• Objection to processing for marketing or other purposes.

• Restriction of processing.

• Data portability in a structured format.

• Withdrawal of consent at any time.

You may exercise these rights by contacting our DPO at the details below.

Data Security

We employ robust technical and organizational measures to protect your data from unauthorized access, loss, or destruction. Security includes encrypted servers, regular audits, and strict access controls.

Exemption from ICO Registration

Skrifts KPO Ltd. processes personal data predominantly for exempt purposes under UK data protection laws, such as staff administration, marketing and public relations related to our own business, and maintaining Accounts and Records. Based on guidance from the Information Commissioner’s Office (ICO), organizations whose data processing activities fall solely under these exempt categories are not required to register and pay the data protection fee to the ICO.

Despite exemption from formal registration, Skrifts KPO Ltd. remains fully compliant with all other UK GDPR obligations. This includes adhering to principles of lawful, fair, and transparent processing; respecting data subject rights; ensuring data security; and maintaining accountability.

We regularly review our data processing activities to confirm ongoing eligibility for this exemption. Should our processing scope change such that exemption no longer applies, we commit to notifying the ICO promptly and fulfilling registration requirements accordingly.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect legal, technological, or operational changes. We inform users about significant changes via our website or direct communications.

Contact Information

Questions or concerns about this Privacy Policy or data protection matters can be directed to our Data Protection Officer:

Email: info@skrifts.com

You also have the right to file a complaint with the UK Information Commissioner’s Office (ICO) regarding our data handling practices.

Effective Date: 01st Jan 2025