Kinset Limited (“Kinset”, “we”, “us” or “our”) is an Irish technology company providing a digital product passport and smart label software platform.

Registered Office: 15 Sandymount Road, Dublin 4, D04 X9K4, Ireland
Company Number: 745880
Contact: info@kinset.com

This Privacy Policy explains how we collect, use, disclose and protect personal data in connection with:

  • Our website (www.kinset.com);
  • Our SaaS platform;
  • Digital product passport (DPP) pages hosted on our platform;
  • Our communications with customers, business contacts and users.

This Policy applies where Kinset acts as a data controller under applicable data protection law.

Where Kinset processes personal data on behalf of business customers using our platform, we act as a data processor, and such processing is governed by our Data Processing Agreement with the relevant customer.

When We Act as Controller and Processor

Kinset as Data Controller

Kinset acts as a data controller when processing personal data for:

  • Account creation and administration;
  • Subscription management and billing;
  • Customer relationship management;
  • Website analytics and improvement;
  • Platform security and fraud prevention;
  • Marketing communications;
  • Compliance with legal and regulatory obligations.

Kinset as Data Processor

Where our business customers upload, manage or publish personal data within the Kinset platform (including via DPP content), those customers act as data controllers and Kinset acts as a data processor on their behalf.

In such cases, we process personal data only in accordance with:

  • The applicable customer agreement; and
  • Our Data Processing Agreement.

If you wish to exercise rights in respect of personal data appearing within a digital product passport, you should contact the relevant brand or organisation responsible for that product.

Categories of Personal Data We Collect

We may collect and process the following categories of personal data:

Business Contact Information

  • Name
  • Job title
  • Employer
  • Business email address
  • Business telephone number

Account and Platform Data

  • Login credentials
  • Account identifiers
  • Subscription and billing information
  • Platform usage data

Technical and Usage Information

  • IP address
  • Device and browser information
  • Log data
  • Website interaction data
  • Analytics data

Communications

  • Correspondence with us
  • Support queries
  • Marketing preferences

User-Submitted Content

Where users submit information via DPP interfaces or forms hosted on our platform, we may process the personal data included in those submissions.

Kinset does not intentionally collect special category personal data.

How We Collect Personal Data

We collect personal data:

  • Directly from you when you create an account or contact us;
  • From your employer or organisation;
  • Through your use of our website or platform;
  • Through cookies and analytics technologies (with consent where required);
  • From publicly available sources to maintain accurate business contact records.

Lawful Bases for Processing

We process personal data on the following lawful bases under the GDPR:

  • Performance of a contract (Article 6(1)(b))
  • Compliance with legal obligations (Article 6(1)(c))
  • Legitimate interests (Article 6(1)(f)), including operating, securing and improving our services
  • Consent (Article 6(1)(a)), where required (for example, certain cookies or marketing communications)

Where we rely on legitimate interests, we ensure that such interests do not override your fundamental rights and freedoms.

How We Use Personal Data

We use personal data to:

  • Provide and maintain our platform;
  • Manage subscriptions and billing;
  • Authenticate users and maintain security;
  • Provide customer support;
  • Improve our services and user experience;
  • Analyse usage trends;
  • Send service-related communications;
  • Send marketing communications where permitted;
  • Comply with regulatory and legal obligations.

Cookies and Analytics

We use cookies and similar technologies to:

  • Enable essential website functionality;
  • Analyse website performance and usage;
  • Measure the effectiveness of communications and marketing.

Non-essential cookies are deployed only with your consent.

We use Google Analytics and other analytics tools to collect aggregated information about website usage. Further details are set out in our Cookie Policy.

Marketing Communications

We may send marketing communications to business contacts where permitted by applicable law.

You may unsubscribe at any time by:

  • Clicking the unsubscribe link in any marketing email; or
  • Contacting info@kinset.com.

Service-related communications (such as security updates or contractual notices) may still be sent where necessary.

Disclosure of Personal Data

We may disclose personal data to:

  • Cloud hosting providers (including AWS);
  • IT and security service providers;
  • Analytics providers;
  • CRM and marketing automation providers;
  • Professional advisers;
  • Regulatory or public authorities where required by law.

We do not sell personal data.

International Transfers

Personal data may be processed outside the European Economic Area (EEA) or United Kingdom.

Where transfers occur to countries without an adequacy decision, we implement appropriate safeguards, including the European Commission’s Standard Contractual Clauses.

Data Security

We implement appropriate technical and organisational measures designed to protect personal data, including:

  • Encryption in transit;
  • Access controls and authentication measures;
  • Logical separation of customer environments;
  • Monitoring and logging;
  • Secure cloud hosting infrastructure.

While we take reasonable steps to safeguard personal data, no system can guarantee absolute security.

Data Retention

We retain personal data only for as long as necessary to:

  • Provide our services;
  • Fulfil contractual obligations;
  • Comply with legal requirements;
  • Resolve disputes and enforce agreements.

Personal data processed on behalf of customers is retained and deleted in accordance with our contractual arrangements.

Your Rights

Subject to applicable law, you may have the right to:

  • Access personal data concerning you;
  • Rectify inaccurate data;
  • Request erasure;
  • Restrict processing;
  • Object to processing;
  • Data portability;
  • Lodge a complaint with a supervisory authority.

In Ireland, the relevant supervisory authority is the Data Protection Commission (www.dataprotection.ie).

Requests may be submitted to info@kinset.com.

Third-Party Websites

Our website or platform may contain links to third-party websites. We are not responsible for their privacy practices.

Changes to This Policy

We may update this Privacy Policy from time to time. The most recent version will always be available on our website with an updated “Last Updated” date.

Last Updated: February 2026