Privacy Policy

1Who We Are

For purposes of applicable data protection laws (including the UK GDPR), Kundun Capital is the data controller of personal information collected via the Website.

2Information We Collect

A) Information You Provide to Us

When you submit a form on the Website, we collect:

• Name
• Email address
• Any message or information you include in the message field

B) Information Collected Automatically (Analytics & Trackers)

When you browse the Website, we collect limited information automatically using Vercel Web Analytics and similar technologies to understand how the Website is used and to improve it. This may include:

• Pages/URLs visited and event timestamps
• Referrer (the site you came from)
• Filtered query parameters (where applicable)
• General location information (e.g., country/region/city)
• Device and browser information (e.g., device type, OS, browser and versions)
• Web analytics script/version information

Vercel Web Analytics is designed to use aggregated, anonymous analytics and to avoid collecting personal identifiers that would allow cross-site tracking or reconstruction of an individual’s browsing session.

3How We Use Your Information

We use personal information for the following purposes:

Operate and Improve the Website

• Measure usage trends and performance
• Diagnose technical issues
• Improve content, navigation, and user experience

Respond and Follow Up

• Contact you about your inquiry
• Send information you request

Business Development and Prospects

• Maintain a list of contacts and prospective business relationships
• Communicate about relevant services, updates, or opportunities (where permitted by law)

Security and Fraud Prevention

• Protect the Website and our systems
• Prevent abuse, spam, and unauthorised access

Legal and Compliance

• Comply with legal obligations
• Enforce our terms and protect our rights

4Legal Bases for Processing

Where UK/EU GDPR applies, we rely on one or more of these legal bases:

• Consent (e.g., where required for non-essential trackers/cookies)
• Legitimate interests (e.g., improving the Website, ensuring security, maintaining business relationships), balanced against your rights
• Contract / steps prior to contract (e.g., responding to requests that may lead to a business relationship)
• Legal obligation (e.g., compliance, recordkeeping)

5Vercel Web Analytics, Cookies, and Similar Technologies

A) Vercel Web Analytics

We use Vercel Web Analytics to measure and understand Website usage so we can improve the Website.

Vercel Web Analytics is designed to provide anonymous, aggregated insights.

It is designed to function without third-party cookies, identifying visitor sessions via a hash created from the incoming request, and session identification is discarded after 24 hours.

The data points it may store include items like URL, referrer, filtered query parameters, geolocation (e.g., country/region/city), device/browser details, and timestamps.

B) Your Choices

Where required, we use a cookie/consent banner that allows you to accept or reject non-essential tracking.

You can also control cookies via your browser settings (block/delete cookies).

Blocking certain technologies may affect Website functionality.

6Information We Collect from Public and Professional Sources

We may collect information about potential partner organisations and relevant professional contacts from publicly available sources and professional/business sources (together, “Prospect Data”). This helps us understand whether a partnership may be a good fit and to contact the appropriate person for partnership discussions.

Categories of Prospect Data May Include

• Organisation name, website, locations, and publicly available descriptions of focus/mandate
• Professional contact details such as name, role/title, work email address and/or work phone number (where publicly listed)
• Public professional profile information (e.g., LinkedIn profile URL and publicly visible details)
• Public professional biography information
• Limited contextual background information about principals/beneficial owners only where clearly published by the organisation or reputable sources and only where relevant to partnership context

We do not intend to collect: special category data, criminal offence data, data about minors, or private/personal contact details unrelated to an individual’s professional role.

Sources may include: organisational websites (including “team” pages), press releases, reputable business news sources, public professional networking pages (e.g., LinkedIn), and public registers/official filings (where relevant).

We use such data to identify and evaluate potential partners, select appropriate contacts for outreach, and keep a record of communications and relationship context.

Lawful basis (UK GDPR): our legitimate interests in developing and maintaining business relationships and conducting proportionate due diligence on prospective partners.

Your choices and rights: where applicable, you have the right to object to our processing (including at any time to direct marketing). You can request access, correction, or deletion by contacting us at info@kunduncapital.com.

Retention: we retain Prospect Data only as long as needed. For example, where a prospect is not engaged, we typically delete or anonymise within 12–24 months of our last update/outreach (unless there is a clear business reason to retain longer). Where there are active discussions, we may retain information for the duration of the relationship and for up to 6 years after the last meaningful interaction, subject to periodic review.

Transparency when data is collected indirectly: we may provide this notice when we first contact you. Where individual notification would involve disproportionate effort, we rely on this publicly available notice and provide a link to it in our outreach communications.

7How We Share Your Information

We do not sell your personal information.

We may share personal information with:

Service Providers (Processors)

That help us run the Website and business operations, such as:

• Website hosting and infrastructure
• Analytics provider: Vercel (Vercel Web Analytics)
• Form processing / CRM / email tools
• Security and monitoring tools

Professional Advisers

Lawyers, accountants, auditors, insurers (as needed)

Authorities / Legal Requirements

• If required to comply with law, regulation, or legal process
• To protect rights, safety, and security

Business Transfers

In connection with a merger, acquisition, financing, reorganisation, or sale of assets

8International Transfers

Your personal information may be processed in countries outside your country of residence (including outside the UK/EEA), where data protection laws may differ.

Where required, we use appropriate safeguards such as:

• UK International Data Transfer Agreement (IDTA) or UK Addendum
• EU Standard Contractual Clauses (SCCs)
• Other lawful transfer mechanisms

9Data Retention

We keep personal information only as long as necessary for the purposes described in this Privacy Policy, including:

• Form submissions (name/email): retained while we maintain a relationship with you or for a reasonable period for business prospecting, unless you request deletion earlier (subject to legal requirements).
• Analytics data: retained according to the settings in our analytics systems and only as needed for analysis and improvement.

10Security

We implement reasonable administrative, technical, and organisational measures designed to protect personal information. However, no method of transmission or storage is 100% secure, so we cannot guarantee absolute security.

11Your Rights

If you are in the UK/EEA (or where similar rights apply), you may have the right to:

• Access your personal information
• Correct inaccurate or incomplete information
• Delete your information (in certain circumstances)
• Object to processing (including direct marketing)
• Restrict processing (in certain circumstances)
• Data portability (in certain circumstances)
• Withdraw consent at any time (where processing is based on consent)

How to Exercise Your Rights

Email us at info@kunduncapital.com. We may need to verify your identity before fulfilling your request.

Complaints

You may lodge a complaint with your local data protection authority. In the UK, this is the Information Commissioner’s Office (ICO).

12Marketing Communications

If we send you marketing or business development communications, you can opt out at any time by:

• Using an unsubscribe link (if included), or
• Contacting us at info@kunduncapital.com

Even if you opt out of marketing, we may still send non-marketing messages (e.g., responding to inquiries or important service/security notices).

13Children’s Privacy / Young Founders

The Website is not directed to children, and we do not knowingly collect personal information from children through the Website.

Young founders (exceptional cases): We may engage with and process limited personal information about a founder who is under 18 where (a) the individual has proactively contacted us, or (b) we identify a legitimate business reason to explore a potential relationship, and doing so is appropriate in the circumstances.

Safeguards We Apply in These Cases

• Data minimisation: we collect only what we reasonably need to communicate and assess the opportunity (e.g., name, contact details, role, and pitch materials). We avoid collecting date of birth and do not seek special category data.
• Fairness and transparency: we explain why we are contacting the individual and how to object or ask us to delete their information.
• Restricted use: we do not use under-18 founders’ details for broad marketing lists or unrelated profiling.
• Retention: if we do not progress the opportunity, we delete or anonymise the information within a reasonable period (typically 6–12 months from last interaction), unless there is a clear legal or business reason to retain longer.
• Additional checks where appropriate: where we cannot proceed responsibly without extra assurance (for example, if a formal agreement is contemplated), we may request involvement of a parent/guardian or an appropriate adult representative, or we may pause and delete the data if we cannot establish an appropriate basis and safeguards.

If you believe a child has provided personal information to us without appropriate context, please contact us at info@kunduncapital.com so we can review and, where appropriate, delete it.

14Third-Party Links

The Website may include links to third-party sites. We are not responsible for the privacy practices of those third parties. Please review their privacy policies.

15Changes to This Privacy Policy

We may update this Privacy Policy at any time. The “Effective date” above indicates when it was last updated. Material changes will be posted on this page.

16Contact Us

For questions or requests regarding privacy, contact: