Privacy & Data Protection

JOHNKEANS UK LTD is committed to complying with applicable data protection and privacy laws, including the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR), the Data Protection Act 2018, and applicable consumer privacy laws in jurisdictions where we operate.

JOHNKEANS UK LTD ("JOHNKEANS", "Company", "we", "our", or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, store, and protect your personal information when you visit our website, create an account, purchase products, contact us, subscribe to marketing communications, participate in promotions, register products, submit warranty claims, or otherwise interact with our services. By accessing or using our website and services, you acknowledge that you have read and understood this Privacy Policy.

Company Name: JOHNKEANS UK LTD Company Registration Number: 17500105 Registered Office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ Website: www.johnkeans.co.uk Email: privacy@johnkeans.co.uk Phone: +44 7444 906 225 JOHNKEANS UK LTD manufactures, sources, distributes, markets, and sells industrial tools, equipment, machinery, hardware products, construction materials, accessories, and related products worldwide through its website and business network.

We may collect personal information directly from you, automatically through your use of our website, or from third-party partners. • Information You Provide Directly: Full name, company name, job title, email address, telephone number, billing address, shipping address, country/region, account login credentials, product registration information, warranty information, customer service inquiries, feedback/reviews, and other communications sent to us. • Order & Transaction Information: Products purchased, order history, delivery information, billing information, payment transaction details, refund/return information, and warranty claim details. For security reasons, payment card information is processed directly by secure third-party payment providers. • Automatically Collected Information: IP address, browser type/version, device identifiers, operating system, time zone settings, website usage data, referral sources, clickstream data, page interactions, and approximate geographic location. • Marketing & Preference Information: Marketing preferences, product interests, survey responses, newsletter subscriptions, and communication preferences.

We use personal information for legitimate business purposes including: • Order Processing: To process orders, confirm purchases, arrange shipping/delivery, process returns/refunds, manage warranties, and register products. • Customer Support: To respond to inquiries, provide technical assistance, resolve disputes, process warranty claims, and improve customer experience. • Account Management: To create/manage user accounts, authenticate users, maintain account security, and update account information. • Business Operations: To operate our website, improve products/services, conduct internal reporting/analytics, manage inventory/logistics, and develop new products/services. • Marketing Communications: Subject to laws, to send newsletters, provide promotional offers, notify about new products, deliver product recommendations, or conduct market research. You may unsubscribe at any time. • Legal & Security Purposes: To prevent fraud, detect unauthorised activity, protect our business and customers, comply with legal obligations, and enforce our terms and conditions.

Our website uses cookies and similar technologies to improve functionality and user experience. Non-essential analytics and advertising cookies are not activated before you give valid consent, subject to any applicable UK exemptions. Categories of cookies we use: • Strictly necessary cookies — enable core functions such as security, network management and accessibility (cannot be switched off). • Functional cookies — remember your preferences and settings (e.g. currency, language, saved cart). • Analytics/performance cookies — help us understand how the website is used so we can improve it. • Advertising/targeting cookies — measure campaign effectiveness and personalise content. For each cookie we aim to disclose its name/provider, purpose and duration. Session cookies expire when you close your browser; persistent cookies typically last from a few days up to 24 months depending on their purpose. You can withdraw or change your consent at any time using the permanent “Cookie Preferences” link, or by disabling cookies through your browser settings. Certain website features may not function properly if cookies are disabled. See our Cookie Policy for full details.

Where required by applicable data protection laws, including the UK GDPR, we match each processing purpose to a specific lawful basis: • Processing orders and payments — performance of a contract. • Accounting and legal record-keeping — compliance with a legal obligation. • Fraud prevention and website security — legitimate interests and/or legal obligation. • Marketing emails — consent, where required. • Customer service — performance of a contract or legitimate interests. Automated decision-making: we do not currently make decisions producing legal or similarly significant effects solely through automated processing.

We do not sell personal information to third parties. We may share personal information with: • Service Providers: Including payment processors, shipping/courier companies, warehousing providers, website hosting providers, cloud service providers, customer support providers, marketing platforms, and analytics providers. • Business Partners: Including manufacturers, distributors, dealers, authorized service centers, and warranty providers where necessary to fulfill orders or provide support. • Legal Authorities: We may disclose information where required by applicable law, court orders, government requests, or regulatory requirements. • Corporate Transactions: If JOHNKEANS UK LTD undergoes a merger, acquisition, restructuring, financing, or sale of assets, personal information may be transferred as part of the transaction.

As a global business serving customers worldwide, personal information may be transferred to and processed in countries outside the United Kingdom. Where such transfers occur, we implement appropriate safeguards to ensure that personal information receives an adequate level of protection in accordance with applicable data protection laws.

We retain personal information only for as long as reasonably necessary. Indicative retention periods: • Transaction and tax records: normally 6 years. • Customer enquiries: up to 2 years. • Account data: while the account is active and for a defined period afterwards. • Marketing data: until you withdraw consent or after a defined period of inactivity. • Warranty records: the warranty period plus the required claims period. When personal information is no longer required, it is securely deleted, anonymised, or archived in accordance with applicable laws.

We implement reasonable administrative, technical, organisational, and physical safeguards designed to protect personal information against unauthorised access, accidental loss, misuse, alteration, disclosure, or destruction. While we take appropriate security measures, no method of electronic transmission or storage can be guaranteed to be completely secure.

Depending on your jurisdiction, you may have the right to: • Right of Access: Request access to personal information we hold about you. • Right to Rectification: Request correction of inaccurate or incomplete information. • Right to Erasure: Request deletion of personal information where legally applicable. • Right to Restrict Processing: Request limitation of certain processing activities. • Right to Data Portability: Request a copy of your personal information in a structured format. • Right to Object: Object to certain types of processing, including direct marketing. • Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time. You also have the right to raise a complaint with us about how we use your personal information. You may additionally complain to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection — visit www.ico.org.uk. To exercise any of these rights, please contact us using the details in Section 15.

If you subscribe to our marketing communications, we may send information regarding product launches, promotions, company news, industry updates, and special offers. You may opt out at any time by clicking the unsubscribe link in marketing emails, contacting us directly, or updating your account preferences. Please note that transactional communications relating to purchases, shipping, warranties, recalls, or account management cannot be opted out of.

Our website and products are intended for adults and business customers. We do not knowingly collect personal information from children under 18. If we become aware that personal information has been collected from a child without appropriate consent, we will take reasonable steps to delete such information.

Our website may contain links to third-party websites, applications, or services. We are not responsible for the privacy practices, content, or security of third-party websites. We encourage users to review the privacy policies of any third-party websites they visit.

If you have any questions regarding this Privacy Policy or wish to exercise your privacy rights, please contact us: JOHNKEANS UK LTD Registered Office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ Company Registration Number: 17500105 Email: privacy@johnkeans.co.uk Phone: +44 7444 906 225 Website: www.johnkeans.co.uk

We may update this Privacy Policy periodically. Any changes will be posted on this page together with the revised "Last updated" date. Material changes will be communicated where required by law.