Privacy Policy

This Privacy Policy explains how KS Grillz collects, uses, stores and protects personal data when you visit our website and how you can exercise your data protection rights. We are committed to protecting your privacy and handling your personal data securely and responsibly, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. What personal data we collect

We only collect personal data that is needed to provide information about our services and to respond to enquiries. This may include:

Contact information you provide (name, email address, phone number) via an enquiry/contact form or email.
Technical data collected automatically when you visit the site (IP address, browser type/version, device type, pages visited, referring URL, date/time stamps).
Cookies and similar technologies (see Cookie Policy below).
Location data only if you provide it (for example, when asking for directions).

We do not collect payment information, create user accounts, or process online orders on this website.

2. How we use your personal data (purposes and lawful bases)

We will only use your data where we have a lawful basis for doing so under UK law. Typical uses include:

To respond to enquiries/contact requests: Lawful basis: Contractual performance / legitimate interest (to reply to information requests).
To operate and improve the website (technical administration, security, fault diagnosis). Lawful basis: Legitimate interest (to run the site securely and effectively).
For analytics and performance monitoring (to understand how the site is used), the Lawful basis is consent or legitimate interest, depending on the cookie/analytics setup. We will ask for consent for non-essential cookies.
For legal or safety reasons (e.g., to respond to legal requests), Lawful basis: Legal obligation.

We will not use your personal data for marketing unless you have explicitly opted in.

3. Sharing your data

We do not sell your personal data. We may share personal data with:

Service providers who help run the website (e.g., web host, analytics providers, form processors). These parties act as data processors and only process data per our instructions.
Legal or regulatory bodies, when required by law or to protect our rights.
Third parties where you have given consent or where it is necessary for the service you have requested.

When third parties process data outside the UK, we will use appropriate safeguards (e.g., approved transfer mechanisms) to protect your information.

4. Cookies & Cookie Policy

What are cookies?

Cookies are small text files placed on your device when you visit websites. They help the site remember preferences and provide useful functionality.

How we use cookies

We use cookies and similar technologies for the following purposes:

Essential cookies (strictly necessary)

Required for the website to function (e.g., site navigation, security). These do not require consent.

Performance / Analytics cookies

Help us understand how visitors use the site (pages visited, time spent). Examples (where used): Google Analytics cookies such as _ga and _gid. These generally require your consent.

Functional cookies

Remember preferences you choose (e.g., language or location settings). These may require consent depending on implementation.

Advertising / targeting cookies (if applicable)

Used by third parties to deliver relevant ads; these require explicit consent and are not used unless you opt in.

Consent and managing cookies

On the first visit, we will display a cookie notice (if implemented) asking for consent for non-essential cookies. You may withdraw consent at any time.
You can manage or disable cookies in your browser settings (e.g., delete cookies, block all cookies, or set preferences). Each browser has its own instructions (e.g., Chrome, Firefox, Edge, Safari).
For advertising cookies, you can visit global opt-out resources such as the Your Online Choices tool to manage targeted advertising preferences.

If you disable cookies, some parts of the website may not work as intended.

5. Data retention

We retain personal data only for as long as necessary for the purpose for which it was collected and to meet legal or business requirements. Typical retention periods:

Enquiry/contact form messages: retained for up to 2 years unless you request deletion sooner.
Analytics data: retained in aggregated or anonymised form; raw analytics data may be retained for up to 26 months (or as set by the analytics provider).
Security logs/system data: retained for the period necessary for security and fraud prevention, as required.

If you want your personal data removed sooner, please contact us (see “Your rights” below).

6. Your rights

Under the UK GDPR, you have rights in relation to your personal data. These include:

Right of access: Request a copy of the personal data we hold about you.
Right to rectification: Ask us to correct inaccurate or incomplete data.
Right to erasure: Request deletion of your personal data in certain circumstances.
Right to restrict processing: Request restriction of processing in certain circumstances.
Right to object: Object to processing based on legitimate interests (including profiling).
Right to data portability: Receive personal data in a structured, commonly used format (where applicable).
Right to withdraw consent: Where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, please contact us at [Insert contact email] (or by post to our address). We may need to verify your identity before responding. We will reply to requests within the required statutory timescales.

If you remain dissatisfied with our handling of your personal data, you also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).

7. Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. These measures include secure hosting, access controls and encryption where appropriate. However, no internet transmission is completely secure; if you have concerns about sending personal data by email, please contact us for alternatives.

8. Children

Our website is not directed at children under 13. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without appropriate consent, we will delete that data as soon as possible.

9. Third-party links and services

The website may contain links to third-party websites, social media pages or content. We are not responsible for the privacy practices or content of those sites. Please review the privacy policies of any third-party sites you visit.

10. International transfers

Some of the service providers we use may transfer or process data in countries outside the UK. When we transfer data internationally, we will ensure appropriate safeguards are in place (e.g., SCCs or other lawful transfer mechanisms) to protect your data.

11. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised effective date. Please check back periodically to stay informed about how we use your data.

12. How to contact us

If you have questions about this Privacy Policy, wish to exercise your rights, or would like to request deletion of your personal data, please contact:

KS Grillz (Data Controller)
36G Rookery Road, Birmingham, B21 9NB
Email: bookings@ksgrillz.co.uk
Phone: 0121 798 5673

You may also contact the Information Commissioner’s Office (ICO) for guidance on data protection rights in the UK.