Privacy Policy
1. Introduction
This Privacy Policy (the "Policy") is issued by Kingdoms of Care Limited ("KoCL", "the Company", "we", "us" or "our"). It sets out the basis on which the Company collects, uses, stores, and otherwise processes personal data obtained through the website at www.kingdomsofcare.com (the "Website") and through other direct communications with the Company.
KoCL operates at the intersection of institutional-grade investment management and social care sector development. Given the nature of our activities and the seniority of the individuals with whom we engage, the Company is committed to the highest standards of data stewardship. The protection of personal data is not merely a legal obligation; it is a matter of professional integrity.
This Policy applies to all personal data processed by KoCL in connection with enquiries, investment engagement, career applications, and general correspondence. It should be read in conjunction with the Company's Cookie Policy. This Policy does not apply to third-party websites that may be accessible via links on the Website; those entities are solely responsible for their own privacy practices.
This Policy was last reviewed in April 2026.
2. Data Controller
Kingdoms of Care Limited is the Data Controller in respect of the personal data described in this Policy, within the meaning of the UK General Data Protection Regulation (as retained in UK law by the European Union (Withdrawal) Act 2018 and as amended by the Data Protection, Privacy and Electronic Communications (Amendments etc.) (EU Exit) Regulations 2019) (the "UK GDPR") and the Data Protection Act 2018 (the "DPA 2018").
Company details:
• Full legal name: Kingdoms of Care Limited
• Company Number: 16123340 (registered in England and Wales)
• Registered address: 42–44 Bishopsgate, London, EC2N 4AH
• Privacy enquiries: privacy@kingdomsofcare.com
3. What Personal Data We Collect
The Company collects and processes the following categories of personal data:
3.1 Contact and Identity Data
This includes an individual's name, email address, telephone number, professional title, and the name of their employing or affiliated organisation. Such data is ordinarily provided when a person uses the Website's contact forms, submits an enquiry, or corresponds directly with KoCL by email.
3.2 Investment and Financial Enquiry Data
Where an individual submits an investor enquiry or otherwise engages with KoCL in a professional or financial capacity, the Company may collect information relating to the nature of the enquiry, the enquirer's stated investment interests or objectives, and any other information provided in the course of that engagement.
3.3 Career Application Data
Where an individual applies for a position with KoCL, the Company collects the information contained in or accompanying the application. This includes the applicant's curriculum vitae, employment history, academic qualifications, professional certifications, and any documentation provided in connection with the right to work in the United Kingdom.
3.4 Usage and Technical Data
When you visit the Website, the Company automatically collects certain technical information. This includes your IP address, browser type and version, operating system, the pages you visit, the duration of your visit, and session data. This information is collected through cookies and similar technologies, as further described in the Cookie Policy.
3.5 Communications Data
The Company retains records of correspondence conducted by email or through the Website's contact form. This includes the content of messages, the date and time of communication, and any information voluntarily included in such correspondence.
4. How We Collect Your Data
The Company collects personal data through the following means:
Directly from you. The primary source of personal data is the individual themselves. Data is collected when you complete a contact or enquiry form on the Website, submit a career application, or correspond with KoCL by email or other means of direct communication.
Automatically via the Website. Certain technical and usage data is collected automatically when you visit the Website, through the use of cookies and analytics technologies. The extent of such collection depends on your cookie preferences as indicated through the Website's consent mechanism.
From third parties. On occasion, the Company may receive personal data through professional introductions, referrals from advisors, or other third-party channels in the ordinary course of business. Where this occurs, the Company ensures that the party making the referral has a lawful basis for sharing such information.
5. Lawful Basis for Processing
The Company processes personal data only where a lawful basis exists under Article 6 of the UK GDPR. The applicable basis for each category of data is set out below.
Contact and identity data is processed on the basis of the Company's legitimate interests in responding to and managing enquiries from individuals who have proactively contacted KoCL, and, where applicable, with the individual's consent.
Investment and financial enquiry data is processed on the basis of the Company's legitimate interests in conducting appropriate due diligence and in facilitating engagement with potential investors and counterparties. KoCL has carried out a balancing assessment and is satisfied that these legitimate interests are not overridden by the interests or fundamental rights of the individuals concerned, given the professional and institutional context in which such data is provided.
Career application data is processed as necessary to take steps at the request of the data subject prior to entering into a contract of employment, pursuant to Article 6(1)(b) of the UK GDPR.
Technical and usage data is processed on the basis of consent, where given through the Website's cookie preference mechanism, and on the basis of the Company's legitimate interests in maintaining the security, performance, and continuous improvement of the Website.
Communications data is processed on the basis of the Company's legitimate interests in maintaining accurate and complete records of business correspondence, and in being able to refer to such records in connection with any matter that may subsequently arise.
6. How We Use Your Data
The Company uses personal data for the following purposes:
1. To respond to enquiries and requests for information submitted via the Website or by direct correspondence.
2. To process and assess investment enquiries, and to facilitate introductions, due diligence, and related engagement with prospective investors and counterparties.
3. To receive, evaluate, and progress career applications, including contacting applicants regarding the outcome of their applications.
4. To maintain, secure, and improve the technical performance and functionality of the Website.
5. To comply with applicable legal, regulatory, and statutory obligations, including obligations arising under financial services and employment law.
6. To maintain accurate records of correspondence and interactions for legitimate business and administrative purposes.
The Company will not use personal data for purposes that are incompatible with those stated in this Policy without first providing notice and, where required, obtaining consent.
7. Disclosure of Your Data
KoCL does not sell personal data to third parties, and does not engage in the trading or commercial licensing of personal information under any circumstances.
The Company may share personal data with the following categories of recipient, strictly as required and subject to appropriate confidentiality obligations or contractual safeguards:
Professional advisors. Legal, financial, compliance, and other professional advisors engaged by KoCL in the ordinary course of business, all of whom are bound by professional duties of confidentiality and, where applicable, by contractual data processing arrangements.
IT and service providers. Technology providers, hosting companies, and website service operators engaged by KoCL as data processors. Such processors are engaged only under written agreements that impose obligations consistent with Article 28 of the UK GDPR.
Regulatory and law enforcement authorities. Where KoCL is required by law, regulation, court order, or lawful authority to disclose personal data, the Company will comply with such requirements and, where permissible, will notify the data subject accordingly.
Investment counterparties. Information relating to investor enquirers or prospective counterparties will not be shared with any third party in that capacity without the explicit and informed consent of the individual concerned.
8. International Transfers
The Company's primary operations are conducted within the United Kingdom and the European Economic Area, and personal data is held and processed within those jurisdictions as a matter of preference and policy.
Where it is necessary to transfer personal data to recipients located outside the United Kingdom, the Company ensures that such transfers are effected in accordance with Chapter V of the UK GDPR. The mechanisms used to ensure an adequate level of protection include, as appropriate, the UK's International Data Transfer Agreement (IDTA) or the UK Addendum to the European Commission's Standard Contractual Clauses. A transfer impact assessment will be carried out where required by applicable guidance from the Information Commissioner's Office ("ICO").
9. Data Retention
The Company retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law or regulation. The Company's principal retention periods are as follows:
Contact and general enquiry data is retained for up to three years from the date of last meaningful contact, unless an ongoing relationship between the individual and the Company has developed, in which case data will be retained for the duration of that relationship and for a reasonable period thereafter.
Investment enquiry data is retained for the duration of any active investment relationship and for a period of seven years following the conclusion of that relationship, in accordance with standard financial records retention practice and applicable regulatory requirements.
Career application data in respect of unsuccessful candidates is retained for a period of six months from the date on which the applicant is notified of the outcome. In respect of successful applicants who are subsequently employed, data is retained for the duration of employment and for a period of seven years thereafter.
Technical and cookie data is retained in accordance with the periods set out in the Cookie Policy.
Legal and formal correspondence is retained for a period of up to seven years, consistent with the standard limitation period applicable to contractual and tortious claims under English law.
Upon expiry of the relevant retention period, personal data is securely deleted or anonymised in accordance with the Company's internal data management procedures.
10. Your Rights Under the UK GDPR
Under the UK GDPR and the DPA 2018, individuals whose personal data is processed by KoCL are entitled to exercise the following rights:
1. The right to be informed — to receive clear and transparent information about how your personal data is collected and used, as provided by this Policy.
2. The right of access (Subject Access Request) — to obtain confirmation of whether the Company holds personal data about you, and to receive a copy of that data together with supplementary information about its processing.
3. The right to rectification — to require the Company to correct inaccurate personal data or to complete incomplete data without undue delay.
4. The right to erasure ("the right to be forgotten") — to request the deletion of personal data where it is no longer necessary for the purpose for which it was collected, where consent has been withdrawn, or where there is no overriding legitimate basis for continued processing.
5. The right to restrict processing — to request that the Company limits the processing of your personal data in certain prescribed circumstances, including where the accuracy of the data is contested or where an objection to processing has been raised pending verification.
6. The right to data portability — to receive personal data that you have provided to the Company, in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where processing is based on consent or on a contract.
7. The right to object — to object at any time to the processing of your personal data on the basis of legitimate interests, including objection to processing for direct marketing purposes.
8. Rights in relation to automated decision-making and profiling — not to be subject to a decision based solely on automated processing, including profiling, which produces legal or similarly significant effects, except in limited circumstances prescribed by the UK GDPR.
To exercise any of the above rights, please submit a written request to privacy@kingdomsofcare.com. The Company will acknowledge and respond to all such requests within one calendar month of receipt. In cases of complexity or volume, this period may be extended by a further two months, in which case the Company will notify you of the extension and the reasons for it within the initial one-month period.
The Company will not charge a fee for responding to a valid request unless the request is manifestly unfounded, repetitive, or excessive, in which case a reasonable administrative fee may be applied or the request declined, with written reasons provided.
11. Cookies
The Website uses cookies and similar tracking technologies to support its operation and to help KoCL understand how visitors engage with its content. The Company uses strictly necessary cookies, which are essential to the functioning of the Website and which are placed without requiring your consent, and analytics cookies, which are placed only where you have indicated your consent through the Website's cookie preference mechanism.
Full details of the cookies used, their purposes, their providers, and their respective retention periods are set out in the Cookie Policy. You may amend or withdraw your cookie preferences at any time by accessing the cookie settings available on the Website.
12. Third-Party Links
The Website may contain hyperlinks to websites operated by third parties. The inclusion of such links does not constitute an endorsement by KoCL of those websites, their operators, or their content. The Company exercises no control over, and assumes no responsibility for, the privacy practices, content, or data processing activities of any third-party website.
Individuals who follow links to third-party websites are encouraged to review the privacy policies of those websites independently before providing any personal data to them.
13. Changes to This Policy
KoCL reserves the right to amend or update this Policy from time to time, including to reflect changes in law, regulatory guidance, the Company's operations, or best practice. The date of the most recent revision is stated at the top of this page.
Where changes to this Policy are material in nature, the Company will draw attention to those changes through a prominent notice on the Website. Continued use of the Website following publication of an amended Policy constitutes acceptance of that Policy as revised, subject always to applicable statutory rights that cannot be waived by agreement.
14. Contact and Complaints
Privacy Enquiries
All requests, queries, or concerns relating to this Policy or to the processing of personal data by KoCL should be directed to:
Email: privacy@kingdomsofcare.com
Post: Data Privacy, Kingdoms of Care Limited, 42–44 Bishopsgate, London, EC2N 4AH
General Enquiries
For general correspondence unrelated to data protection matters:
Email: info@kingdomsofcare.com
Right to Lodge a Complaint with the ICO
If you are not satisfied with the Company's response to any privacy concern, or if you believe that the Company has processed your personal data in a manner that is inconsistent with its obligations under applicable data protection law, you have the right to lodge a complaint with the Information Commissioner's Office ("ICO"), the supervisory authority for data protection matters in the United Kingdom:
• Website: www.ico.org.uk
• Telephone: 0303 123 1113
• Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
The Company would, however, welcome the opportunity to address any concern directly before a complaint is made to the ICO, and encourages individuals to contact KoCL in the first instance.
Kingdoms of Care Limited — Company Number 16123340 — Registered in England and Wales
Registered Office: 42–44 Bishopsgate, London, EC2N 4AH