Privacy
Policy.

This website is operated by Kristan Group, an independent private investment holding with operations in London and Cape Town. For the purposes of applicable data-protection law, Kristan Group is responsible for the personal information described in this policy.

Privacy enquiries may be sent to info@kristangroup.com.

We may collect information that you choose to provide when you contact us, including your name, contact details, organisation, role and the content of your correspondence.

When you visit this website, our hosting and security providers may also process limited technical information such as your IP address, browser and device information, requested pages, timestamps and security logs. We do not currently operate a contact form, advertising technology or site-owned analytics on this website.

We use personal information to respond to enquiries, assess and progress potential business or investment discussions, maintain professional relationships, operate and protect the website, keep appropriate business records, and meet legal or regulatory obligations.

Depending on the context, we process information because it is necessary for our legitimate business interests, to take steps at your request before entering into a contract, to perform a contract, to comply with a legal obligation, or because you have given consent. Where we rely on legitimate interests, we consider the impact on your rights and interests.

This website is not designed to use non-essential advertising or analytics cookies. Our hosting and security providers may use essential cookies or similar technical storage where necessary to deliver, secure and authenticate access to the website.

If we introduce non-essential analytics or marketing technologies in future, we will update this policy and, where required, ask for consent before they are used.

We may share personal information only where reasonably necessary with companies within the Kristan Group, trusted providers supporting our technology and professional operations, legal or professional advisers, counterparties involved in a proposed transaction, and public authorities where required by law.

Service providers are expected to protect personal information and use it only for the services they provide to us. We do not sell personal information.

Kristan Group operates between the United Kingdom and South Africa, and some providers may process information in other countries. Where applicable law requires it, we use recognised safeguards or another lawful transfer mechanism intended to protect personal information transferred internationally.

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including to maintain business records, resolve disputes and meet legal, accounting or reporting requirements.

We use appropriate organisational and technical measures intended to protect personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on where you are and the law that applies, you may have rights to request access to your personal information, correction of inaccurate information, deletion, restriction of processing, portability, or to object to certain processing. Where processing is based on consent, you may withdraw that consent without affecting earlier lawful processing.

Your right to object: you may object to processing based on legitimate interests and to the use of your information for direct marketing. These rights are not absolute and may be subject to legal exceptions.

To exercise a right, email info@kristangroup.com. We may need to verify your identity before responding.

We would appreciate the opportunity to address a concern first. You may also have the right to complain to the data-protection authority in your country. In the United Kingdom, this is the Information Commissioner's Office. In South Africa, this is the Information Regulator.

This website links to third-party websites that operate under their own privacy practices. We are not responsible for those practices and encourage you to read their privacy notices.

We may update this policy when our activities, technology or legal obligations change. The date at the top of this page shows when it was last revised.