Privacy Policy (UK & GDPR Compliance)

Effective Date: January 1, 2024

K & P (UK) LIMITED ("Company", "we", "us", "our") is committed to protecting the personal data of our corporate partners, their employees, and individual users. This policy outlines our data processing practices in strict compliance with the General Data Protection Regulation (GDPR) and the Data Protection Act 2018 (UK).

1. Data Controller Identification

The data controller responsible for your information is K & P (UK) LIMITED, registered at Bridge House 9-13 Holbrook Lane, Coventry CV6 4AD. Our Data Protection Officer (DPO) can be contacted directly at info@thecrustco.sbs for any queries regarding data sovereignty.

2. Categories of Data Processed

We process data necessary for the fulfillment of industrial logistics contracts, including but not limited to: Corporate contact details, geolocation data of delivery terminals, employee dietary requirements (when provided for catering), and financial transaction history. We also collect telemetry data from our mobile interfaces to optimize user experience and routing efficiency.

3. Legal Basis for Processing

Processing is carried out under the following legal grounds: (a) Performance of a contract; (b) Compliance with legal obligations (FSA standards); (c) Legitimate interests in improving logistics infrastructure; (d) Explicit consent for marketing communications.

4. Data Retention & Deletion

Financial records are retained for 7 years as required by UK tax law. Operational logistics data is anonymized after 24 months. You retain the right to request erasure ("right to be forgotten") under Article 17 of the GDPR, subject to statutory retention requirements.