We take privacy seriously. This policy explains what data we collect, how we use it, and your rights under UK GDPR.
Kquotely is operated by [Company name and registration TBC]. Our registered address is [Address TBC]. We are the data controller for the personal data described in this policy. If you have any privacy questions, contact us at [email protected].
Account holders (site owners): When you create a Kquotely account we collect your name, email address, and (if you subscribe) billing information processed by Stripe. We do not store your card details — Stripe handles all payment data.
Quote requesters (your customers): When a visitor submits a quote request through a Kquotely widget on a Squarespace site, we collect the information they submit — typically name, email, and any custom fields the site owner has configured (for example: company name, delivery postcode, project details).
Technical data: We collect standard server logs including IP addresses, browser type, and pages accessed. We use this for security and service reliability only.
We do not sell your data. We do not use your data for advertising. We do not share it with third parties except as described in Section 5.
All personal data stored in our database is encrypted at rest using AES-256. Connections to Kquotely are encrypted in transit via TLS. All accounts require two-factor authentication (2FA). We take these obligations seriously — your customers' data is protected as carefully as you would protect it yourself.
We share data only with the following processors, and only to the extent necessary to deliver the service:
We do not use analytics services that track individuals (no Google Analytics, no Meta Pixel).
Account holder data is retained for the duration of your account plus 90 days after deletion, to allow for accidental deletion recovery. Quote data (customer submissions) is retained for 3 years by default, after which it is permanently deleted. You can request early deletion at any time.
You have the right to:
To exercise any of these rights, email [email protected]. We will respond within 30 days. Site owners can also export or delete their quote data directly from the Kquotely dashboard.
We use a single session cookie (kq_sid) to maintain your login session. This cookie is essential for the service to function — it is not a tracking or analytics cookie and does not require consent under PECR. We do not use any third-party cookies or tracking pixels.
If you are a Kquotely customer using our widget on your Squarespace site, you are a data controller in your own right for the data your customers submit. Kquotely acts as your data processor. You are responsible for informing your customers about how their data is used (for example, in your own privacy policy) and ensuring you have a lawful basis for processing their data.
The Kquotely widget displays a notice on the contact form informing customers that their data will be shared with the site owner. We recommend linking this to your own privacy policy.
We may update this policy from time to time. We will notify account holders of material changes by email. The date at the top of this page indicates when it was last updated.
For privacy queries: [email protected].
If you are unhappy with how we have handled your data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.