This website is operated by Confidenza Limited t/a Kandu Solutions. Confidenza Limited is registered in England and Wales under company number 14372780. Its registered office is 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ.

References to Kandu, Kandu Solutions, we, us, and our mean Confidenza Limited t/a Kandu Solutions. You can contact us about privacy matters through the contact page on this website or by writing to the registered office.

This policy explains how we collect, use, store, and share personal data when you use this website, contact us, discuss Kandu CostGuard, receive product or service communications, or work with us as a customer, supplier, partner, or business contact.

Where Kandu CostGuard is supplied under a customer agreement, additional contractual terms or a data processing agreement may also apply to the processing of customer data.

The personal data we collect depends on how you interact with us.

We use personal data for clear business purposes connected with operating this website, responding to enquiries, and providing Kandu CostGuard.

We only process personal data where we have a lawful basis under UK data protection law. Depending on the context, we may rely on contract or steps before entering into a contract, legitimate interests, consent, or legal obligation.

Our legitimate interests include managing B2B relationships, responding to business enquiries, improving our website and services, developing and supporting Kandu CostGuard, keeping appropriate records, protecting our systems, and promoting relevant Kandu services to business contacts in a proportionate way.

If we send marketing, product, service, or insight update emails, you can opt out at any time using the unsubscribe instructions in the message or by contacting us. We do not sell personal data.

Where consent is required for a particular communication or tracking activity, we will ask for consent and you may withdraw it at any time.

At launch, this website is designed to operate without non-essential analytics or advertising cookies. Essential technologies may still be used where needed to deliver the site securely and remember choices.

If we add analytics, advertising, session recording, or similar technologies later, we will update this policy and provide any cookie controls required by applicable law before using non-essential cookies.

We may share personal data with trusted providers who help us operate the website, manage email, schedule meetings, host systems, maintain customer records, provide professional advice, process payments, deliver support, or secure our services.

We may also share information where required by law, a court, a regulator, a tax authority, or in connection with a business sale, restructuring, or transfer. Providers are expected to protect personal data and use it only for the agreed purpose.

Kandu CostGuard and related services may process supplier, cost, item, transaction, approval, user, file, audit, NetSuite-related, and business process data supplied by or on behalf of a customer. Some of that data may include personal data.

Where we process customer personal data on behalf of a customer, the customer will usually act as controller and Kandu will usually act as processor, unless the relevant contract says otherwise. We process customer data only as needed to provide, support, secure, maintain, and improve the product or services, or as otherwise agreed with the customer.

Some providers may process personal data outside the UK. Where this happens, we use appropriate safeguards where required, such as adequacy regulations, the UK international data transfer agreement, the UK addendum to EU standard contractual clauses, or equivalent approved measures.

We keep personal data only for as long as needed for the purposes described in this policy, including for customer relationship management, product or service delivery, accounting, legal, audit, security, and dispute-resolution purposes.

We use organisational and technical measures designed to protect personal data. No internet transmission or hosted system can be guaranteed to be completely secure, so please avoid sending unnecessary sensitive information through website forms or email.

Depending on the circumstances, you may have rights to request access to your personal data, correction, erasure, restriction, portability, objection to processing, and withdrawal of consent where processing is based on consent.

You also have the right to complain to the Information Commissioner's Office. We would appreciate the chance to respond to your concern first, so please contact us if something does not look right.

This website may link to third-party websites, products, platforms, or resources. Their privacy practices are not controlled by Kandu, so you should review their privacy information before providing personal data to them.

We may update this policy as our website, product, services, providers, or legal obligations change. The latest version will be published on this page with an updated date.