1. Who we are
This Privacy Policy applies to data collected by Kyroq Ltd ("Kyroq", "we", "us", "our"), a company registered in England and Wales. Our registered office is in London, and we operate engineering and field-team functions from Santiago, Chile.
For questions about this policy, or to exercise any of your rights described below, contact privacy@kyroq.com.
2. What this policy covers
This policy explains what personal data we collect when you interact with our website (kyroq.com), our scheduling and contact forms, our email correspondence, and any scoping engagements you participate in with us.
It does not cover the customer-side data you bring into a Kyroq engagement under a separate Master Services Agreement, Data Processing Agreement or non-disclosure agreement. Those engagements are governed by their own contractual terms.
3. What we collect
We collect only what we need to respond to you and to run the conversation you started.
Information you give us directly. When you book a call, submit the pilot enquiry form, email us, or download a resource: your name, your work email, your role and institution, the nature of the underwriting question you are bringing to us, and the date and time of the contact.
Information collected automatically. When you visit kyroq.com our hosting provider records standard server logs: IP address, browser type, operating system, referring URL, pages viewed, and timestamp. These are retained for security and abuse-detection purposes only.
Information from third-party tools we use. If you book a call via our scheduling provider (Calendly), Calendly collects the information you submit through their form on our behalf, subject to their own privacy policy. If you submit a pilot enquiry, the submission is captured in our Google Workspace (Google Sheets and Google Drive).
4. Why we collect it (lawful basis)
Under UK and EU GDPR, we rely on the following lawful bases:
Consent — for the pilot enquiry form and any other form where you check a box agreeing to be contacted. You can withdraw consent at any time by emailing privacy@kyroq.com.
Legitimate interests — for follow-up correspondence after you have initiated a conversation with us, for the operation and security of our website, and for record-keeping necessary to run a business. We have assessed that our interests do not override your rights and freedoms.
Contract — for any data processing necessary to deliver an engagement you have entered into with us.
Legal obligation — for record-keeping required by law, including tax, accounting and any regulatory obligation that becomes applicable to us.
5. How we use your information
To respond to your enquiry. To schedule and conduct conversations and scoping engagements. To send you follow-up correspondence about a conversation you have initiated. To send occasional newsletter updates if you have explicitly subscribed. To improve our website and content. To meet legal and regulatory obligations.
We do not sell your personal data. We do not share it with advertisers. We do not use it for automated decision-making that produces legal or similarly significant effects on you.
6. Who we share it with
We share personal data only with carefully selected sub-processors who help us operate the business, and only to the extent necessary. Current sub-processors include:
Google Workspace (Google LLC and Google Ireland Limited) — email, document storage, form submissions and calendar.
Calendly (Calendly LLC) — meeting scheduling.
Our website hosting provider — static site hosting and server logging.
We may also share personal data with professional advisers (lawyers, accountants, auditors) where necessary, and with regulators or law enforcement where required to do so by law.
In the event of a corporate transaction (merger, acquisition, financing), personal data may be transferred to the relevant counterparty subject to the same protections set out in this policy.
7. International transfers
Some of our sub-processors are based outside the UK and the European Economic Area, including in the United States. Where personal data is transferred outside the UK or EEA, we rely on appropriate safeguards including the UK International Data Transfer Agreement, the European Commission Standard Contractual Clauses, and the EU-US Data Privacy Framework where applicable.
8. How long we keep it
We keep personal data only for as long as we need it for the purposes described above. As a general rule:
Pilot enquiry submissions and conversation records: up to 24 months from the date of last contact.
Subscriber lists: until you unsubscribe.
Records required by law: for the period required by the relevant law (typically 6 years for tax and accounting records).
Server logs: up to 12 months.
You can ask us to delete your data earlier by contacting privacy@kyroq.com, subject to any legal retention requirements that apply to us.
9. Your rights
Under UK and EU GDPR, you have the following rights in relation to personal data we hold about you:
Right to access — you can ask us for a copy of the personal data we hold about you.
Right to rectification — you can ask us to correct any data that is wrong or incomplete.
Right to erasure ("right to be forgotten") — you can ask us to delete your data, subject to any legal retention requirements.
Right to restrict processing — you can ask us to pause processing of your data while a query is being resolved.
Right to data portability — you can ask us to provide your data in a portable format.
Right to object — you can object to processing that relies on legitimate interests.
Right to withdraw consent — where we rely on consent, you can withdraw it at any time.
To exercise any of these rights, contact privacy@kyroq.com. We will respond within one month.
If you are unhappy with how we have handled your personal data, you have the right to complain to the Information Commissioner's Office (ICO) in the UK at ico.org.uk, or to your local supervisory authority in the EEA.
10. Cookies and tracking
kyroq.com uses only essential cookies necessary for basic site functionality (for example, remembering whether you have already dismissed a banner). We do not use analytics cookies, advertising cookies, or third-party tracking pixels at this time. Embedded third-party widgets (such as the Calendly booking widget) may set their own cookies; see their respective privacy policies.
If we begin using analytics in the future, we will update this policy and seek your consent where required.
11. Security
We apply reasonable technical and organisational measures to protect your personal data, including encrypted transport (HTTPS), access controls on internal systems, and secure handling of sub-processor relationships. No system is completely secure, but we take security seriously and review our practices regularly.
12. Children
Kyroq's website and services are intended for business users at financial and development institutions. We do not knowingly collect personal data from anyone under the age of 16. If you believe we have collected such data, please contact privacy@kyroq.com and we will delete it.
13. Changes to this policy
We may update this Privacy Policy from time to time as our practices, sub-processors or applicable law change. The current version is always available at this URL. Material changes will be notified to subscribers and prominently posted on this page. The "Effective date" at the top of this page indicates the latest version.
14. Contact
For all privacy-related questions, requests or complaints:
Email: privacy@kyroq.com
General contact: contact@kyroq.com