Last updated:
Kimshi Ltd is the data controller for this website. We are a company registered in Scotland, no. SC857261, registered office 5 South Charlotte Street, Edinburgh EH2 4AN, and registered with the Information Commissioner’s Office, no. ZC021387. Contact: kimshi@kimshisimple.com.
This notice covers kimshiltd.com and the enquiries and purchase requests you send us through it. It does not cover the Kimshi Schools application. That application runs on a school’s own equipment and Kimshi-operated services do not collect, receive or store any pupil or staff records.
When you send an enquiry: your name, email address, school or organisation, and your message if supplied. Council or authority purchase enquiries collect your contact name, work email address, council or authority name, and an optional message. To help stop misuse, we also use a one-way hash of your IP address for the enquiry and purchase-request rate limits for a short time.
When you send a school purchase request: your name, work email address, role or job title if supplied, purchasing organisation or local authority, names of the schools to be licensed, preferred licence start date if supplied, preferred payment route, purchase order number if supplied, and any other information you choose to include in your message. The purchase forms do not receive information from the installed Kimshi Schools product.
When you visit the site: our hosting provider uses your IP address and browser details to deliver the pages. We do not keep logs of visits.
We use enquiry details to answer you and to follow up about Kimshi Schools. We rely on legitimate interests: running our business and responding to people who send general enquiries. We use purchase-request information to respond to the request; prepare or administer quotes, purchase orders, invoices and payments; confirm the organisation and schools to be licensed; and administer the customer relationship if the purchase proceeds. We use the hashed IP address only to help prevent misuse of the enquiry and purchase-request forms. We do not add you to a mailing list or send marketing without asking you first, and we never sell personal data.
Kimshi Ltd has one employee, its founder, who handles every enquiry and purchase request. Our website is hosted by Amazon Web Services. Enquiries and purchase requests are processed by Amazon Web Services in Ireland and sent through its email service to our mailbox, which is provided by Google. Where a provider processes data outside the UK, the transfer is covered by the UK’s adequacy regulations or the International Data Transfer Addendum.
Enquiries and purchase requests that do not become customers are deleted twelve months after our last contact with you. If a purchase proceeds, relevant commercial records may be retained for the customer relationship and as required by applicable accounting or legal requirements. We do not keep server logs of visits. The hashed IP address is deleted automatically within a few days.
You can ask to see the personal data we hold about you, have it corrected or deleted, restrict or object to our use of it, or receive a copy in a portable form. Email kimshi@kimshisimple.com and we will respond within one month. You can also complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
This site is for school staff and organisations. Please do not send pupil names or details through the enquiry or purchase request forms.
We will update this notice when our practices change and show the date at the top.
