Personal Data Protection

This statement is issued in accordance with the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR), and the Data Protection Act 2018, where applicable.

Keymplace.com (“Keymplace”, “we”, or “our”) is committed to handling the personal data of its users (“Users”) with the utmost care and in full compliance with applicable data protection laws.

As the data controller, Keymplace is responsible for determining how and why personal data is processed.

Age Restriction

Keymplace’s services are intended for individuals aged 18 or over. We do not knowingly collect or process personal data relating to minors.

Purposes of Processing

We collect and process personal data solely for legitimate and clearly defined purposes, which include:

  • Fulfilling our contractual obligations to Users;
  • Responding to user inquiries, support requests, and complaints;
  • Managing and improving our platform, services, and customer experience;
  • Providing marketing communications about Keymplace products and promotions, where permitted.

Legal Basis for Processing

Our legal basis for processing personal data includes Article 6(1)(b) UK GDPR (processing necessary for the performance of a contract) and Article 6(1)(f) UK GDPR (processing necessary for our legitimate interests, such as business improvement and customer engagement).

Depending on the specific processing activity, we may also rely on Article 6(1)(a) UK GDPR (consent) and Article 6(1)(c) UK GDPR (compliance with legal obligations).

Data Sharing

Personal data may be shared with trusted third parties such as payment service providers, IT service providers, and regulatory authorities where required by law.

International Data Transfers

Where personal data is transferred outside the United Kingdom or the European Economic Area, appropriate safeguards are applied, including Standard Contractual Clauses and adequacy decisions.

Data Retention

We retain personal data for up to six (6) years following the User’s most recent interaction with Keymplace or their last update of account information, unless a longer retention period is required by law or justified by a legitimate business interest.

Retention periods are determined based on the purpose of processing, legal requirements, and risk considerations, including fraud prevention and regulatory compliance.

Behavioral Data & Personalization

We may collect and process non-sensitive usage data — including purchase history, browsing behavior, and product preferences — to better understand user interests and offer personalized product recommendations.

Behavioral and usage data is processed based on our legitimate interests and, where required, user consent.

We do not engage in automated decision-making that produces legal effects or significantly affects Users in any similar way, as defined under UK GDPR Article 22.

Your Rights

Users have the right to:

  • Request access to their personal data;
  • Request correction or deletion of inaccurate or outdated information;
  • Restrict or object to the processing of their personal data in certain situations;
  • Receive a copy of their personal data in a portable format;
  • Lodge a complaint with the UK Information Commissioner’s Office (ICO).

Where processing is based on consent, Users have the right to withdraw their consent at any time without affecting the lawfulness of prior processing.

EU Users also have the right to lodge a complaint with their local data protection supervisory authority.

Data Protection Contact

CREALAB LTD has appointed a responsible contact for data protection matters.

Privacy-related inquiries may be directed to [email protected].

Governing Principle

In the event of any inconsistency, mandatory data protection laws shall prevail over this statement, the Privacy Policy, or the Terms & Conditions.

Contact

For any concerns or questions about how we process personal data, please contact:

Email: [email protected]