Privacy Policy (Scorecards, Diagnostics and Health Checks
Effective Date: 1 Mar 2025
Organisation: KTCS Ltd
Website: www.ktcsltd.com
​
1. Purpose of This Policy
This privacy notice explains how KTCS Ltd collects, uses and protects any personal data you provide when completing our Health Checks, Scorecards or Diagnostic Tools (including the Facility Resilience Scorecard).​
2. What Data We Collect
When you complete our Health Checks, Scorecards or Diagnostic Tools, we may collect:
-
Your name and contact details (e.g. email address, job role, company name)
-
Responses to assessment questions
-
Your overall and category-level scores
3. How We Use Your Data
We use your data for the following purposes:
-
To provide you with a personalised report based on your scorecard responses
-
To contact you with follow-up recommendations or related services
-
To send occasional marketing communications about relevant KTCS services (you can opt-out at any time)
-
To conduct internal analysis and research into trends in facilities resilience - all research is anonymised and no individuals or organisations will be identified. This research may be published but will be anonymous.
4. Legal Basis for Processing
We process your data under the following lawful bases:
-
Consent: for marketing communications (you will be given an explicit opt-in)
-
Legitimate interests: to provide your scorecard results and insights, and to analyse anonymised trends for service improvement and research
5. Data Retention
We will retain your personal data for up to 24 months unless you request it be deleted sooner. Research data will be retained in anonymised form only.
6. Your Rights
Under UK GDPR, you have the right to:
-
Access the personal data we hold about you
-
Request correction or deletion of your data
-
Withdraw consent for marketing at any time
-
Lodge a complaint with the ICO (Information Commissioner’s Office)
To exercise any of these rights, please contact:
📧 info@ktcsltd.com
7. Who We Share Data With
We do not sell or share your data with third parties for marketing. Data may be stored securely on trusted platforms used to deliver the scorecard and associated services.