Project Kahn Ltd – Privacy Policy

Effective Date: February 2026

Project Kahn Limited (“we”, “us”, or “our”) is committed to protecting and respecting your privacy and personal data. This Privacy Policy explains how we collect, use, and store your personal information, and how you can exercise your rights under the UK General Data Protection Regulation (UK GDPR) and related data protection legislation.

 

1. Data Controller and Contact Information

The data controller is Project Kahn Limited. For any questions or requests regarding your personal data, please contact:

Data Protection Officer
Project Kahn Limited
240 Canal Road, East Yorkshire, England, BD1 4SX
Tel: 01274 749 999
Email: kahn@kahndesign.com

 

2. Purposes and Lawful Basis for Processing Personal Data

We collect and process personal data in the course of supplying vehicles, goods, and services, and to manage our relationship with you.

Contractual necessity

To respond to enquiries and process purchases of vehicles, goods, or services.

To process finance applications and provide relevant quotes and agreements.

To process job applications and contact applicants.

Legal obligation

To comply with HMRC accounting and record-keeping requirements.

To meet employment law obligations regarding employees.

Consent

To send marketing communications according to your preferences.

 

3. Sharing Your Personal Data

We only share personal data:

With your consent.

Where necessary to provide services you have requested (e.g., finance, insurance, warranty).

Where legally required to comply with obligations.

Third-party processors include accounting, marketing, software, and website providers. All processors are contractually bound to handle personal data in compliance with GDPR.

 

4. Vehicle Documents

Documents accompanying a vehicle may be shown to potential buyers and handed to new owners to verify the provenance of the vehicle.

 

5. Retention Periods

Personal data is generally retained for 7 years to comply with HMRC requirements.

Data processed on the basis of consent will be retained only as long as you consent to its use. Consent will be refreshed periodically.

 

6. Your Rights as a Data Subject

Under UK GDPR, you have the following rights regarding your personal data:

Right of access – You can request a copy of the personal data we hold about you.

Right to rectification – You may request correction of inaccurate or incomplete personal data.

Right to erasure (right to be forgotten) – You can request deletion of your personal data where legally permissible.

Right to withdraw consent – You can withdraw consent for processing at any time without affecting the lawfulness of prior processing.

Right to restrict processing – You may request limitation of how your data is used in certain circumstances.

Right to data portability – You can request your data in a structured, commonly used, machine-readable format.

Right to object – You can object to our processing of your personal data where we rely on legitimate interests.

Right to lodge a complaint – You have the right to complain to a supervisory authority, the Information Commissioner’s Office (ICO), if you believe your data has been mishandled.

To exercise any of these rights, please contact us using the details in Section 1.

 

7. Provision of Personal Data

Provision of personal data is usually necessary to enter into a contract with us. Refusal to provide data may affect our ability to provide services.

 

8. Changes to this Policy

We regularly review this Privacy Policy and update it as needed. The latest version is always published on our website.