Kai Privacy Policy

This Privacy Policy explains how Komerz Ltd., operating the Kai Market Intelligence Report Product, collects, uses, and protects your personal data. In using our services or products you agree to this Privacy Policy.

• Account and order data: name, email, company, billing address (payment processed via third-party processor; we do not store card numbers).
• Order specifications: category, report types, and custom brief details submitted.
• Communications: support emails, correction requests, feedback.
• Automatic data: IP address, browser/device type, access logs, dashboard activity, cookies (please see paragraph 6 below for more information about cookies).
• Third-party data: payment confirmation from processors; licensed/public market data (not personal data) used in report generation.

We collect data that is submitted or captured via our website while browsing or buying a report. We may also sometimes collect data from licensed, subscribed, or publicly available third-party sources, and this data may inform or be incorporated in our reports. You can email us at info@kaireports.com for more information in this regard.

You are under no statutory or contractual obligation to provide any of your personal data to us. However, if you do not provide the personal data requested, we may not be able to provide you with the services and products that we offer.

• Process orders, generate and deliver reports, manage your account.
• Send order confirmations, delivery notices, and relevant next-report recommendations.
• Improve report methodology using aggregated, anonymized order patterns.
• Detect fraud and secure the platform.
• Send you information about new reports/offers or that may otherwise be of interest to you (you may opt-out at any time).
• Meet legal, tax, and accounting obligations.

Your data will be stored on our secure database (Database) which, as at the Effective Date, is compiled and hosted between Amazon Web Services (AWS), AWS AppSync, AWS Amplify, Amazon DynamoDB, Amazon S3, Amazon SES and Stytch (our Subprocessors).

We do not sell your personal data. We keep your data confidential, but may share it with: our personnel (including directors, employees, consultants, subcontractors and advisors), the Subprocessors (as defined above) and any other relevant subprocessors, payment processors and email delivery providers, and legal and regulatory authorities, in each case insofar as it is reasonably necessary for purposes set out in this Privacy Policy or where it is required by law or regulation. We do not share your specific order content, briefs, or business data with other customers or use it to build reports for your competitors.

We use cookies and similar tracking technologies on our website and orders dashboard to:

• Keep you logged in and remember your order history and preferences (strictly necessary - cannot be disabled without affecting core functionality).
• Understand how visitors use our site and improve performance (analytics cookies).
• Personalize marketing and measure the effectiveness of campaigns (marketing cookies).

Non-essential cookies (analytics and marketing) are only set with your consent, collected via a cookie banner on first visit. You can withdraw or manage consent at any time through our cookie settings tool or your browser settings. Disabling non-essential cookies will not affect your ability to place orders or receive reports.

For further information about cookies, please see: www.allaboutcookies.org, and how to adjust your browser settings here: www.allaboutcookies.org/manage-cookies.

We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or accidental disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, as well as any applicable legal requirements.

If you would like more information about how long we retain specific personal data, please let us know by email to info@kaireports.com.

As a data subject, you have a number of rights. You can:

• access and obtain a copy of your data on request;
• require us to amend incorrect or incomplete data;
• require us to delete or stop processing your data, for example where the data is no longer necessary for the purposes of processing;
• object to the processing of your data where we are relying on legitimate interests as the legal ground for processing;
• ask us to stop processing data for a period if data is inaccurate or there is a dispute about whether or not your interests override our legitimate grounds for processing data; and
• request a machine-readable copy of your personal data which you can use with another service provider.

Please send your requests to info@kaireports.com.

We may request specific information from you to help us confirm your identity to ensure your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it.

If you believe that we have not complied with your data protection rights, we would encourage you, at first instance, to raise your concerns or complain to us by contacting info@kaireports.com so that we may make every effort to address your complaint. Alternatively, you can raise your concerns or complain to the relevant data protection supervisory authority, which in the UK is the Information Commissioner’s Office at https://ico.org.uk/concerns/.

We use encryption in transit and at rest, access controls, and regular security reviews. However, no system is 100% secure.

Countries outside of the UK / European Economic Area (EEA) offer varying standards for the protection of personal data and your privacy rights and in some cases these standards are lower than equivalent UK / EEA standards. When we send your personal data outside the UK / EEA to our Subprocessors, we have in place the UK-approved standard contractual clauses in the form of an appropriate data transfer agreement.

Services are intended for business use by individuals 18+. We do not knowingly collect data from minors. If a parent or guardian becomes aware that his or her child has provided us with information without their consent, he or she should contact us at info@kaireports.com. We will delete such information within a reasonable time.

We reserve the right to update this Privacy Policy at any time. Material changes will be communicated via email or in-app notice. This Privacy Policy does not form part of any contract to provide services.

If you are unsure about how or if this Privacy Policy applies to you, or you have other questions related to the processing of your data, please contact orders@kaireports.com.