Your information, treated with care.

This notice explains how KIR TECHNOLOGY LTD (company number 17368808) handles personal information received through kirtechnology.it.com. KIR TECHNOLOGY LTD is the controller of that information. Our registered office is 66 Paul Street, London, EC2A 4NA. Last updated: 3 September 2026.

KIR Verify local file screening

The public-preview version of KIR Verify performs its automated file screening inside your web browser. The image or PDF you select is not uploaded to KIR Technology, Sanity, Vercel, or another analysis provider by this feature. The report is generated locally and is only downloaded if you choose to save it. Normal website hosting and aggregate analytics may still process limited technical request information when you visit the KIR Verify page, but they do not receive the selected file or its analysis result.

To operate the KIR Verify free allowance, we collect and verify an email address and retain that address, its verification status, and the number and timing of checks linked to it. This information is used only to prevent abuse of the three-check, 48-hour allowance; the selected file and its analysis result are not stored by this access-control feature.

KIR Secure scans, reviews and monitoring requests

The free KIR Secure Exposure Scout uses the website address you enter only to retrieve public HTTPS, response-header, DNS, and cookie signals. To prevent misuse, it asks for an email sign-in link and keeps the verified email address plus timestamps of recent scans for the purpose of enforcing the free allowance. A single guest scan is also available without email sign-in; we retain only a one-way identifier derived from the visitor's network address and a timestamp to prevent repeated guest scans. It does not retain a scan report or access private systems. If you request a KIR Secure Review or Monitor pilot, we collect your name, organisation, business email address, website domain, requested scope, and confirmation that you are authorised to make the request. We send a one-time link to the supplied business email address to confirm control of that mailbox. This is an email-based control check, not DNS ownership verification and not a security assessment.

Information we collect

When you submit an enquiry or request a consultation, we receive the information you provide, which may include your name, email address, telephone number, selected service, preferred appointment details, time zone, message, and, for KIR Secure Review or Monitor requests, organisation, website domain, requested scope, and authorisation confirmation. Our hosting and security providers may also process limited technical information needed to deliver and protect the website.

Why we use it and our lawful bases

We use your details to respond, arrange requested consultations, prepare proposals, validate authority before deeper KIR Secure work, deliver requested services, maintain appropriate business records, secure the website, and meet legal obligations. Depending on the circumstances, we rely on taking steps at your request before entering a contract, performing a contract, our legitimate interests in operating and protecting our business and responding to potential customers, and compliance with legal obligations.

Website analytics

We use Vercel Web Analytics to understand aggregate website activity, such as page visits and general usage patterns. This helps us improve the website and does not enable us to read information entered into enquiry or booking forms.

Who processes information

Vercel hosts and monitors the website, Sanity stores enquiry and consultation records, Resend sends transactional notifications, and Zoho provides our business email service. These providers process information on our behalf under their applicable data-protection terms. We do not sell personal information. We may also disclose information where required by law or where necessary to establish, exercise, or defend legal rights.

International processing

Some providers may process information outside the United Kingdom. Where this occurs, we rely on an applicable adequacy regulation or contractual and organisational safeguards provided under data-protection law.

How long we keep it

Enquiries and unconfirmed consultation requests are normally retained for up to 24 months so we can respond and maintain relevant business records. Information connected with an active customer relationship may be retained for longer where needed for the contract, accounting, legal obligations, or disputes. Information no longer required is deleted or anonymised.

Your rights

Depending on the circumstances, you may ask for access to your information, correction, deletion, restriction, portability, or object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it at any time. A request does not affect processing that was lawful before withdrawal, and some rights are subject to legal exceptions.

Questions and complaints

To exercise a right or ask a privacy question, email hello@kirtechnology.it.com. If you are unhappy with our response, you may complain to the UK Information Commissioner's Office.

Changes to this notice

We may update this notice when our services, providers, or legal obligations change. The current version and update date will always appear on this page.