Privacy Policy
Last updated: 10 April 2026
1. Data Controller
NewcoHunter is a trading name of KK London (Designs & Fashion) Ltd, a company registered in England and Wales under company number 12968488 ("we", "us", "our"). We are the data controller responsible for your personal data.
We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and all applicable data protection legislation.
If you have any questions about this policy or how we handle your data, contact us at [email protected].
2. Information We Collect
We collect the following categories of personal data:
- Account information: name, email address, and hashed password when you register an account.
- Billing information: payment details are collected and processed directly by our payment processor, Stripe. We do not store your full card details on our servers.
- Usage data: search queries, saved searches, pages visited, and feature interactions to improve the Service.
- Technical data: IP address, browser type, device information, and access timestamps collected automatically via server logs.
- Communications: any messages you send us via our contact form or email.
- Tool usage data: when you use our free tools (e.g. VAT Number Checker, SIC Code Lookup), the queries you submit are processed in real time and are not stored or logged against your identity.
3. Lawful Basis for Processing
We process your personal data under the following lawful bases as defined in Article 6 of the UK GDPR:
- Contract (Art. 6(1)(b)): processing necessary to provide you with the Service, including account management, saved searches, email alerts, and billing.
- Legitimate interests (Art. 6(1)(f)): analytics, service improvement, fraud prevention, and ensuring the security of our platform. We have assessed that these interests do not override your rights and freedoms.
- Consent (Art. 6(1)(a)): marketing communications and non-essential cookies. You may withdraw consent at any time.
- Legal obligation (Art. 6(1)(c)): where required to comply with applicable law, regulation, or legal process.
4. How We Use Your Information
We use your personal data to:
- Provide, operate, and maintain the Service.
- Send email notifications and alerts you have opted into (e.g. saved search digests).
- Process payments and manage your subscription.
- Communicate important updates about your account or changes to our terms.
- Analyse usage patterns to improve functionality and user experience.
- Detect, prevent, and address fraud or technical issues.
5. Third-Party Services and Data Sharing
We share your data only with trusted third parties who assist in providing the Service. We do not sell your personal information to anyone.
- Stripe (payment processing) - processes billing information under their own privacy policy. Based in the US with EU data processing agreements in place.
- Resend (transactional email) - receives your email address to deliver account notifications and alerts.
- HMRC (HM Revenue & Customs) - when you use our VAT Number Checker, the VAT number you enter is sent to the HMRC API for verification. No personal data about you is shared with HMRC in this process.
- Companies House - we source public company registration data from Companies House. No personal data about you is shared with Companies House.
- Google Analytics / Google Tag Manager - used for aggregated, anonymised usage analytics. You can opt out via your browser settings or cookie preferences.
- Hetzner Online GmbH - our hosting provider, based in Germany. All servers and data are located in the European Union.
All third-party processors are bound by data processing agreements and are required to handle your data in compliance with applicable data protection law.
6. International Data Transfers
Your data is primarily stored and processed on servers located in Germany (EU). Where data is transferred outside the UK/EEA (e.g. to US-based processors such as Stripe), we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) or equivalent mechanisms approved by the UK Information Commissioner's Office (ICO).
7. Data Storage and Security
Your data is stored securely on dedicated servers located in Germany within the European Union. We implement appropriate technical and organisational measures to protect your data, including:
- Encryption of data in transit (TLS/HTTPS).
- Hashed and salted passwords (bcrypt).
- Access controls and authentication on all administrative systems.
- Regular security reviews and updates.
8. Company Data
Company registration data displayed on NewcoHunter is public information sourced from Companies House under Crown Copyright and the Open Government Licence. This data relates to corporate entities and is not personal data under GDPR. Where individual director names or registered office addresses appear, this information is already part of the public register.
9. Cookies
We use the following types of cookies:
- Strictly necessary cookies: required for authentication, session management, and security. These cannot be disabled.
- Analytics cookies: used to understand how visitors interact with the site. These are only set with your consent.
We do not use third-party advertising or tracking cookies.
10. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes described in this policy:
- Account data: retained for the lifetime of your account. Upon account deletion, personal data is permanently removed within 30 days.
- Billing records: retained for up to 7 years after the end of your subscription to comply with UK tax and accounting obligations.
- Server logs: retained for up to 90 days for security and debugging purposes.
- Contact form messages: retained for up to 12 months unless ongoing communication requires longer retention.
11. Your Rights
Under the UK GDPR, you have the following rights in relation to your personal data:
- Right of access - request a copy of the personal data we hold about you.
- Right to rectification - request correction of inaccurate or incomplete data.
- Right to erasure - request deletion of your personal data ("right to be forgotten").
- Right to restrict processing - request that we limit how we use your data.
- Right to data portability - request your data in a structured, machine-readable format.
- Right to object - object to processing based on legitimate interests or for direct marketing.
- Right to withdraw consent - where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, email us at [email protected]. We will respond within one month as required by law.
12. Complaints
If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):
- Website: ico.org.uk
- Helpline: 0303 123 1113
13. Children's Privacy
NewcoHunter is a business-to-business service and is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children.
14. Changes to This Policy
We may update this privacy policy from time to time. Material changes will be communicated via email or a prominent notice on the Service. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.
15. Contact
For any privacy-related enquiries or to exercise your data rights, contact us at:
KK London (Designs & Fashion) Limited
Company number: 12968488
VAT number: GB371399079
Registered address: 1 Davies Meadow, East Hanney, Wantage, OX12 0GG