Privacy Notice

Part 1: Introduction

KP Exit Partners Ltd is committed to protecting and respecting your privacy.

This Privacy Notice explains how we collect, use, retain and protect personal data when providing our advisory and consulting services, when engaging with prospective clients and business contacts, and when operating our business.

We encourage you to read this notice carefully and contact us if you have any questions about how we process personal data.

Who we are

KP Exit Partners Ltd is a company registered in England and Wales with company registration number 17148592.

For the purposes of UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, KP Exit Partners Ltd is the data controller in relation to personal data processed in connection with its business activities unless otherwise stated.

Contact Details

KP Exit Partners Ltd

Company Registration Number: 17148592

Email: info@kpexitpartners.co.uk

Registered Address: 3 Thompson Avenue, Belton, Loughborough, LE12 9XB

If you have any questions regarding this Privacy Notice or how we process personal data, please contact us using the details above.

Part 2: Personal Data

What Personal Data We Collect

Depending on the nature of our relationship with you, we may collect and process the following categories of personal data.

Identity and Contact Information:

• Name
• Job title
• Employer
• Business address
• Email address
• Telephone number
• LinkedIn profile information
• Other business contact information

Professional Information:

• Employment history
• Professional qualifications
• Professional memberships
• Organisational responsibilities
• Management responsibilities
• Shareholding interests
• Directorship information

Client Engagement Information:

Where necessary to provide our services, we may process information relating to

• Organisational structures
• Reporting lines
• Workforce information
• Management teams
• Governance arrangements
• Customer and supplier relationships
• Shareholder information
• Transaction readiness and due diligence activities

Financial Information:

Where relevant to an engagement, this may include

• Remuneration information
• Bonus arrangements
• Incentive structures
• Share option participation
• Billing and payment information

Marketing and Business Development Information:

• Enquiry details
• Event registrations
• Networking interactions
• Website enquiries
• Communication preferences

Special Category Data

KP Exit Partners Ltd does not intentionally collect or process special category personal data unless it is necessary for a specific engagement, legal obligation, or other lawful purpose.

Where special category data is processed, additional safeguards will be applied in accordance with applicable data protection legislation.

How We Collect Personal Data

We may collect personal data:

• Directly from you
• From your employer or organisation
• During client engagements
• Through meetings, events, and networking activities
• Through our website and contact forms
• From publicly available sources, including Companies House and professional networking platforms
• From professional advisers and referral partners

How We Use Personal Data

We may use personal data for the following purposes:

Providing Advisory Services

Including but not limited to

• Exit Readiness assessments
• Workforce and organisational reviews
• Governance reviews
• Succession planning
• Customer and supplier analysis
• Value creation initiatives
• Transaction readiness and due diligence preparation
• Stakeholder management

Managing Client Relationships

Including but not limited to

• Engagement administration
• Project delivery
• Communication and correspondence
• Billing and payment administration

Business Development and Marketing

Including but not limited to

• Responding to enquiries
• Developing business relationships
• Sending information regarding our services
• Inviting individuals to events and networking opportunities

Business Administration

Including but not limited to

• Managing suppliers and contractors
• Professional compliance obligations
• Insurance administration
• Legal and regulatory compliance

Lawful Bases for Processing

We process personal data using one or more of the following lawful bases:

Contract

Where processing is necessary to enter into or perform a contract.

Legitimate Interests

Where processing is necessary for our legitimate business interests and those interests are not overridden by the rights and freedoms of individuals.

Examples include:

• Providing advisory services.
• Managing client relationships.
• Developing business relationships.
• Improving our services.
• Defending legal claims.
• Protecting the security of our business.

Where we rely on legitimate interests, we undertake appropriate assessments to ensure that individual rights are respected.

Legal Obligation

Where processing is necessary to comply with legal or regulatory requirements.

Consent

Where consent is required, including certain marketing activities, we will obtain consent and individuals may withdraw it at any time.

Who We Share Personal Data With

We may share personal data where necessary with:

• Clients and their authorised representatives.
• Professional advisers, including accountants, lawyers and insurers.
• Corporate finance advisers and transaction stakeholders.
• IT service providers and cloud software providers.
• Payment processors.
• Regulatory authorities.
• Law enforcement agencies where required by law.

We do not sell personal data to third parties.

International Transfers

We primarily store personal data within the United Kingdom.

Where personal data is transferred outside the UK, we will ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

How We Protect Personal Data

We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, disclosure, loss, alteration or destruction.

These measures include:

• Access controls.
• Secure cloud-based systems.
• Encryption where appropriate.
• Confidentiality obligations.
• Data minimisation principles.
• Secure deletion procedures.
• Information security policies and procedures.

How Long We Keep Personal Data

KP Exit Partners Ltd retains personal data only for as long as necessary to fulfil the purposes for which it was collected.

Retention periods are determined by the nature of the information, the purpose of processing, legal requirements and professional obligations.

Further information regarding retention periods can be found in our Data Retention and Deletion Policy.

Part 3: Your Rights

Under UK data protection law, you have rights including:

• The right of access.
• The right to rectification.
• The right to erasure.
• The right to restrict processing.
• The right to object to processing.
• The right to data portability.
• Rights relating to automated decision-making and profiling.

Requests can be submitted using the contact details provided above.

We will normally respond within one month.

Part 4: Complaints

If you have concerns regarding how we process personal data, please contact us in the first instance using the details above.

You also have the right to complain to the Information Commissioner's Office (ICO).

Information Commissioner's Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

Telephone: 0303 123 1113

Website: www.ico.org.uk

Part 5: Changes To This Privacy Notice

We may update this Privacy Notice from time to time.

The latest version will always be available at our registered office, and the date of the most recent update will be shown at the top of this notice.