Policies & Terms

Terms & Conditions

These Terms & Conditions govern your use of the KONTEGENT26 Ltd website and services. By accessing our website or engaging our services, you agree to these terms.

1. About Us

KONTEGENT26 Ltd is a private limited company registered in England and Wales. Company number: 17214911. Registered office: Office 7154, 58 Peregrine Road, Hainault, Ilford, Essex, United Kingdom, IG6 3SZ. VAT registration will be provided upon application.

2. Services

We provide business and domestic software development (SIC 62012), information technology consultancy activities (SIC 62020), data processing, hosting and related activities (SIC 63110), and other information service activities (SIC 63990). Specific scope, deliverables, timelines, and fees will be defined in individual service agreements or statements of work.

3. Use of Website

You agree to use our website only for lawful purposes and in a manner that does not infringe the rights of others or restrict their use. You must not introduce malicious code, attempt unauthorised access, or disrupt the functioning of our website.

4. Intellectual Property

All content on this website — including text, graphics, logos, software, and design — is the property of KONTEGENT26 Ltd or its licensors and is protected by UK and international copyright laws. You may not reproduce, distribute, or create derivative works without our prior written consent.

For bespoke software development projects, intellectual property rights will be defined in the relevant service agreement. Unless otherwise agreed, we retain ownership of our pre-existing tools, frameworks, and methodologies.

5. Client Obligations

You agree to:

• Provide accurate and complete information necessary for service delivery.
• Cooperate reasonably and provide timely feedback and approvals.
• Ensure you have the legal authority to enter into agreements on behalf of your organisation.
• Not use our services for any unlawful or prohibited purpose.

6. Fees & Payment

Fees for services will be outlined in individual proposals, quotes, or service agreements. Invoices are payable within 30 days of the invoice date unless otherwise agreed. Late payments may incur interest at 8% above the Bank of England base rate under the Late Payment of Commercial Debts (Interest) Act 1998.

7. Confidentiality

Both parties agree to maintain the confidentiality of proprietary information disclosed during the course of engagement. This obligation survives termination of the agreement for a period of 3 years.

8. Limitation of Liability

To the maximum extent permitted by law:

• Our total liability arising from or in connection with our services, whether in contract, tort (including negligence), or otherwise, shall not exceed the total fees paid for the specific service giving rise to the claim.
• We shall not be liable for any indirect, consequential, or incidental damages, including loss of profits, data, or business opportunity.
• Nothing in these terms excludes or limits liability for death or personal injury caused by negligence, fraud, or any other liability that cannot be lawfully excluded.

9. Warranties

We warrant that our services will be provided with reasonable skill and care. All other warranties, express or implied, are excluded to the maximum extent permitted by law. Our services are provided on an "as is" and "as available" basis for any free resources or preliminary assessments.

10. Termination

Either party may terminate a service agreement in accordance with its terms. Upon termination, you must pay for all services rendered up to the effective date of termination. Clauses relating to confidentiality, limitation of liability, and intellectual property shall survive termination.

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the content, privacy practices, or terms of those websites.

12. Governing Law & Jurisdiction

These terms are governed by and construed in accordance with the laws of England and Wales. Any disputes shall be subject to the exclusive jurisdiction of the courts of England and Wales.

13. Changes to Terms

We reserve the right to update these terms at any time. Continued use of our website or services after changes constitutes acceptance of the updated terms.

GDPR Compliance Statement

KONTEGENT26 Ltd is fully committed to compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This statement outlines our approach to data protection and the measures we have implemented.

1. Our Commitment

Data protection is integral to our operations as a software development, IT consultancy, and data processing company. We embrace the principles of data protection by design and by default across all our services.

2. Data Protection Principles

We adhere to the seven key principles of UK GDPR:

• Lawfulness, fairness and transparency — we process data lawfully, fairly, and transparently.
• Purpose limitation — we collect data only for specified, explicit, and legitimate purposes.
• Data minimisation — we collect only data adequate, relevant, and limited to what is necessary.
• Accuracy — we keep personal data accurate and up to date.
• Storage limitation — we retain data only as long as necessary.
• Integrity and confidentiality — we process data securely with appropriate technical measures.
• Accountability — we demonstrate compliance through policies, records, and reviews.

3. Lawful Basis for Processing

As a data controller, we rely on the following lawful bases under UK GDPR Article 6:

• Consent (Article 6(1)(a)): for direct marketing communications and non-essential cookies.
• Contract (Article 6(1)(b)): for service delivery, project management, and client communications.
• Legal obligation (Article 6(1)(c)): for regulatory compliance, accounting, and company law requirements.
• Legitimate interests (Article 6(1)(f)): for business operations, network security, analytics, and improving our services — balanced against your rights and interests.

4. Special Category Data

We do not routinely process special category data (racial or ethnic origin, political opinions, religious beliefs, health, sexual orientation, genetic or biometric data). If such data is necessary for a specific service, we will obtain explicit consent and implement additional safeguards.

5. Data Protection Impact Assessments (DPIA)

We conduct DPIAs for any processing that is likely to result in high risk to individuals' rights and freedoms, particularly when using new technologies or processing data on a large scale.

6. Data Subject Rights

We have processes in place to facilitate all data subject rights under UK GDPR:

• Right to be informed
• Right of access (Subject Access Request)
• Right to rectification
• Right to erasure (Right to be forgotten)
• Right to restrict processing
• Right to data portability
• Right to object
• Rights relating to automated decision-making and profiling

Requests are acknowledged within 48 hours and fulfilled within one calendar month.

7. Data Security Measures

We implement robust technical and organisational measures including:

• Encryption at rest and in transit (TLS 1.3, AES-256).
• Role-based access controls and least-privilege principles.
• Regular security audits and vulnerability assessments.
• Staff training on data protection and information security.
• Secure development lifecycle (SDLC) practices.
• Incident response and data breach notification procedures.

8. Data Breach Response

In the event of a data breach, we have a documented incident response plan that includes:

• Immediate containment and assessment.
• Notification to the ICO within 72 hours where required.
• Notification to affected data subjects without undue delay where there is high risk.
• Post-incident review and remediation.

9. Data Processors & Third Parties

We engage Data Processors only under written contracts that comply with UK GDPR Article 28. Our processors are required to:

• Process data only on our documented instructions.
• Implement appropriate technical and organisational measures.
• Ensure personnel are bound by confidentiality.
• Assist us in fulfilling data subject rights.
• Notify us of any data breaches.
• Delete or return data after engagement ends.

10. International Data Transfers

We ensure that any transfer of personal data outside the UK is protected by appropriate safeguards as defined in UK GDPR Articles 45-49, including UK International Data Transfer Agreements, Binding Corporate Rules, or adequacy regulations.

11. Data Retention & Erasure

We maintain a data retention policy that defines specific retention periods for each category of personal data. Automated and manual processes ensure data is securely erased when no longer required.

12. Accountability & Governance

We maintain a Record of Processing Activities (ROPA) as required by UK GDPR Article 30. Our data protection compliance is reviewed annually by senior management. While we are not required to appoint a statutory Data Protection Officer, data protection responsibilities are assigned to a designated senior team member who can be reached at info@kontegent26.com.

13. Complaints

If you believe we have not complied with data protection law, you have the right to lodge a complaint with the ICO:

Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
ico.org.uk
Tel: 0303 123 1113