Privacy Policy
Last updated: 18 August 2026
This notice explains how Techne Kaizen uses personal information when you visit the website, make an enquiry, complete the Website Pilot suitability or checkout flow, make a payment, provide onboarding information, approve work, use hosting or contact us.
1. Controller identity and contact
The controller is Joshua Nimako, sole trader, operating under the trading name Techne Kaizen.
34 Summerton WayLondon
SE28 8QX
United Kingdom
Email: info@technekaizen.com
2. Information used by the Website Pilot
Depending on how you use the service, we process:
- Suitability information: answers about the current website, required site type, excluded complexity and willingness to participate in the pilot process, together with a short-lived proof of the result.
- Checkout and order information: name, business name, business email, phone number, business type, optional existing website URL, purchaser classification, legal-document versions, acknowledgement timestamps, early-performance choice, order and checkout-attempt identifiers, amounts and payment status.
- Payment correlation: Stripe Checkout, payment and event identifiers and payment or refund status. Card details entered on Stripe’s hosted page are processed by Stripe and are not stored in the Website Pilot database.
- Onboarding and delivery information: project requirements, services, audiences, copy, images, files, brand material, domains, hosting information, requested integrations, communications, saved onboarding progress, completion timestamps, approvals and approval history.
- Measurement information, when allowed: campaign session, landing route without protected query credentials, permitted campaign parameters, Google Analytics browser/session identifiers, and Meta advertising identifiers and events.
- Technical and security information: IP address, user agent, server/access logs, request and correlation identifiers, security events and error information. The Website Pilot stores IP address and user agent with checkout evidence only where the advertising-consent architecture permits that collection; ordinary infrastructure may separately create essential security/access logs.
- Communications: enquiries, support requests, complaints, cancellation requests and other correspondence.
Please do not send special-category information, full payment-card details or passwords unless it is genuinely necessary and we have asked you to use an appropriate secure method.
3. Purposes and lawful bases
| Purpose | Information | Lawful basis |
|---|---|---|
| Respond to enquiries and assess project suitability | Contact, business, project and suitability information | Steps requested before entering a contract; legitimate interests in operating a relevant and efficient enquiry process |
| Create and administer the Website Pilot contract | Checkout, classification, legal acknowledgement, order and contact information | Contract; steps requested before contract; legal obligations where applicable |
| Process and reconcile payments, refunds and disputes | Order, amount, status and payment-provider identifiers | Contract; legal obligation; legitimate interests in accurate payment administration and establishing or defending claims |
| Onboard, design, build, revise, approve, launch and support the website | Onboarding, content, communications, approvals and delivery records | Contract; legitimate interests in maintaining reliable project records |
| Provide hosting, security, backups and maintenance | Website content, accounts, logs, security and support information | Contract; legitimate interests in secure and reliable service operation; legal obligation where applicable |
| Maintain accounting, contract and compliance evidence | Orders, invoices, payments, legal versions, acknowledgements and communications | Legal obligation; legitimate interests in accountability and establishing or defending legal rights |
| Protect the website and prevent abuse, fraud and duplicate submissions | Technical, security, request and limited transaction information | Legitimate interests in protecting users, systems and the business; legal obligation where applicable |
| Measure website and campaign performance | Analytics identifiers, usage and campaign events | Consent for non-essential storage/access and related personal-data processing |
| Measure and optimise advertising | Meta identifiers, advertising attribution and permitted events | Consent for non-essential storage/access and related personal-data processing |
Our legitimate interests include responding to relevant enquiries, operating and improving the service, keeping proportionate business evidence, maintaining security, preventing misuse and handling disputes. We consider the necessity and impact of this processing and do not use legitimate interests to bypass a consent requirement for optional tracking.
4. Required and optional information
Contact, order and project information marked as required is needed to assess the request, enter into or perform the contract, administer payment and deliver the service. If it is not provided, we may be unable to offer checkout or carry out the Website Pilot.
Analytics and advertising choices are optional. Rejecting them does not prevent suitability, checkout, payment, onboarding, approval, balance payment or hosting.
5. Recipients and service providers
Information is disclosed only where needed for the stated purposes. Current recipient categories include:
- Stripe, which provides the hosted Website Pilot payment flow, payment processing, fraud-prevention features and payment records;
- WordPress and the hosting/infrastructure provider, which store and serve website, database, log and backup information;
- Google Workspace/Gmail, used for business email and project communications;
- Google Analytics, only after Analytics consent, for website and campaign measurement;
- Meta, only after Advertising consent, for Pixel/Conversions API advertising measurement;
- WooCommerce or WooPayments where a separate site purchase uses those active services; and
- professional advisers, banks, insurers, regulators, courts or public authorities where reasonably necessary or legally required.
Installed but inactive software is not treated as a recipient merely because its files exist.
6. International transfers
Stripe, Google and Meta operate internationally and may process information outside the United Kingdom, including in the United States. Depending on the relevant service and destination, their published safeguards include UK adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework where applicable), the UK International Data Transfer Addendum to approved standard contractual clauses, or the UK International Data Transfer Agreement.
Information about or a copy of an applicable safeguard can be requested from info@technekaizen.com. Provider-specific details are also available in the providers’ current privacy and data-transfer documentation.
7. Retention
- Suitability results and abandoned pre-contract records: normally reviewed for deletion or anonymisation within 90 days after they are no longer active, unless needed to prevent abuse, investigate an issue or support a legal claim.
- Active enquiries and project operations: kept while the enquiry or project is active and normally reviewed within 90 days after the operational purpose ends.
- Orders, contracts, legal acknowledgements, payments, refunds, invoices and key project evidence: kept for the period required by applicable accounting, tax and contract-record duties and, where longer, while reasonably needed to establish, exercise or defend legal claims. The applicable duty and limitation period are the retention criteria; operational material that is not needed for those purposes is removed sooner.
- Security and access logs: normally no longer than 90 days, unless a log is needed for an active security, fraud, technical or legal investigation.
- Consent preference: stored in the browser for up to six months, unless you change it sooner or a material purpose change requires a fresh choice.
- Google Analytics and Meta data: retained under the configured account settings and the provider’s applicable retention controls. These settings must be reviewed as part of production preflight and whenever the measurement configuration changes.
- Backups: remain until overwritten or deleted under the verified backup rotation. A restored backup remains subject to the same deletion and access controls.
We may retain a restricted record for longer where required by law, to resolve a dispute, enforce an agreement or protect the service. We do not keep all project material indefinitely merely because a limited business record must be retained.
8. Automated suitability logic
The Website Pilot uses rule-based answers about project type, complexity and participation to return one of three results: eligible, manual review or outside the fixed scope. The purpose is to avoid taking a deposit for an obviously unsuitable fixed package.
The suitability result does not use special-category information, analytics consent or advertising consent. A manual-review or outside-scope result does not prevent you from contacting Techne Kaizen for a human assessment or a different quotation. We do not currently use solely automated processing that produces legal or similarly significant effects beyond controlling immediate access to this particular fixed-scope checkout.
9. Your rights
Depending on the lawful basis and circumstances, you may have rights to request access, correction, erasure, restriction, portability, or to object to processing. Where processing is based on consent, you may withdraw consent at any time without affecting earlier lawful processing.
The right to object applies in particular where we rely on legitimate interests. You may also object to direct marketing at any time.
To exercise a right, email info@technekaizen.com. We may need proportionate information to confirm identity and locate the relevant records.
10. Analytics and advertising choices
Optional Analytics and Advertising technologies are off by default. You can accept all, reject non-essential technologies, or manage the two purposes independently. You can reopen Cookie Settings and withdraw either choice as easily as it was given. Withdrawal stops subsequent optional dispatch and the site makes a reasonable attempt to remove the related first-party identifiers from the browser.
See the Cookie and Storage Access Notice for the technology inventory and controls.
11. Security
We use technical and organisational measures intended to protect information, including access controls, scoped bearer credentials, restricted logs, input validation, payment-provider separation, backups and security monitoring. No internet-connected service can be guaranteed completely secure.
12. Complaints
Please contact info@technekaizen.com first so we can investigate.
You also have the right to complain to the Information Commissioner’s Office. Current contact and complaint information is available at ico.org.uk/make-a-complaint, or by telephone on 0303 123 1113.
13. Changes to this notice
We update this notice when processing, providers, purposes or legal requirements materially change. The revision date and the consent-notice version are updated where relevant, and fresh optional consent is requested where required.