Welcome to Kaye + Co. Please read this policy carefully. It applies between you, the user of this Website and us, Kaye + Co., the owners and providers of this Website.

This policy applies to our use of any and all Data collected by us when you use our Website and sets out how we will treat your personal information. By using our Website, you accept this policy in full. If you disagree with any part of this policy, you must not use our Website.

In this policy the following terms shall have the following meanings:
“Cookie” means a small text file placed on your computer by this Website when you visit certain parts of the Website and/or when you use certain features of the Website. Details of the cookies used by this

Website are set out in clause 4;
“Data” means collectively all information that you submit to us via the Website. This shall, where applicable, incorporate the definitions provided in the General Data Protection Regulation 2016 (“GDPR”); “UK and EU Cookie Law” means the Privacy and Electronic Communications (EC Directive) Regulations
2003 as amended by the Privacy and Electronic Communications (EC Directive) (Amendment) Regulations
2011, 2015 and 2016;

“User/You/Your” means any party that accesses the Website that is not employed by us and acting in the course of their employment; and “We/Us/Our” means the Kaye + Co., of 5 Don Terrace, Thurlstone, Sheffield, South Yorkshire S36 9QE; “Website” means the website that you are currently using (www.kayeandco.com) and any sub-domains of this site unless expressly excluded by their own terms.

1. Scope of this Policy
This policy applies to our actions and the actions of any Users with respect to this Website. It does not extend to any websites that can be accessed from this Website including, but not limited to, any links we may provide to social media or third party websites.

2. Your Rights
As a data subject, you have the following rights under the GDPR, which this Policy and our use of personal data have been designed to uphold:
a) The right to be informed about our collection and use of personal data;
b) The right of access to the personal data we hold about you (see clause 9);
c) The right to rectification if any personal data we hold about you is inaccurate or incomplete (please contact us using the details in clause 14);
d) The right to be forgotten – i.e. the right to ask us to delete any personal data we hold about you (we only hold your personal data for a limited time, as explained in clause 6 but if you would like us to delete it sooner, please contact us using the details in clause 14);
e) The right to restrict (i.e. prevent) the processing of your personal data;
f) The right to data portability (obtaining a copy of your personal data to re-use with another service or
organisation);
g) The right to object to us using your personal data for particular purposes; and
h) Rights with respect to automated decision making and profiling.

If you have any cause for complaint about our use of your personal data, please contact us using the details provided in clause 14 and we will do our best to solve the problem for you. If we are unable to help, you also have the right to lodge a complaint with the UK’s supervisory authority, the Information Commissioner’s Office.

For further information about your rights, please contact the Information Commissioner’s Office or your local Citizens’ Advice Bureau.

3. What information do we collect?
We may collect, store and use the following kinds of personal information:
a) information about your computer and about your visits to and use of this Website (including your IP address, geographical location, browser type & version, operating system, length of visit, page views and navigation);
b) information relating to any transactions carried out between you and us on or in relation to this Website, including information relating to any events you may book;
c) any other information that you choose to send to us; and
d) any other information that we may receive.

4. Cookies
A cookie consists of information sent by a web server to a web browser, and stored by the browser. The information is then sent back to the server each time the browser requests a page from the server. This enables the web server to identify and track the web browser. All Cookies used by this Website are used in accordance with current UK and EU Cookie Law.

We use Cookies to enable us to provide the best possible experience and service to you. You can choose to enable or disable Cookies in your internet browser. Most internet browsers also enable you to choose whether you wish to disable all cookies or only third party cookies. By default, most internet browsers accept Cookies but this can be changed. For further details, please consult the help menu in your internet browser. You can choose to delete Cookies at any time, however, you may lose any information that enables you to access the Website more quickly and efficiently, such as personalisation settings.

It is recommended that you ensure that your internet browser is up-to-date and that you consult the help and guidance provided by the developer of your internet browser if you are unsure about adjusting your privacy settings. We use Google Analytics to analyse the use of this Website. Google Analytics generates statistical and other information about Website use by means of cookies, which are stored on users' computers. The information generated relating to our Website is used to create reports about the use of the Website. Google will store this information. Google's privacy policy is available at: http://www.google.com/privacypolicy.html.

Functional and Required Cookies

_acloggedin
Supports login by Scheduling client if the client has an account.
Cookie
January 1, 2025

_client_acloggedin
Supports login by Scheduling client if the client has an account.
Cookie
January 1, 2025 

algoliasearch-client-js
Adds auto-populated suggestions to address fields in Scheduling to help clients complete forms faster.
localstorage
Persistent

AWSALB, AWSALBCORS
Improves performance in Scheduling by using one server for the duration of the session.
Cookie
1 week

CART
Shows when a visitor adds a product to their cart
Cookie
2 weeks

CHECKOUT_WEBSITE
Identifies the correct site for checkout when Checkout on Your Domain is disabled.
Cookie
Session

Commerce-checkout-state
Stores state of checkout while the visitor is completing their order in PayPalsessionstorage
Session

Crumb
Prevents cross-site request forgery (CSRF).
Cookie
Session

hasCart
Tells Squarespace that the visitor has a cart
Cookie
2 weeks 

Locked
Prevents the password-protected screen from displaying if a visitor enters the correct site-wide password. 
Cookie
Session

PHPSESSID
Securely authenticates a visitor during their checkout in Scheduling.
Cookie
1 month

RecentRedirect
Prevents redirect loops if a site has custom URL redirects. Redirect loops are bad for SEO.
Cookie
30 minutes

remember_client
Remembers Scheduling client’s login details if they have an account.
Cookie
365 days 

siteUserCrumb
Prevents cross-site request forgery (CSRF) for logged in site users.
Cookie
3 years

SiteUserInfo
Identifies a visitor who logs into a customer account
Cookie
3 years

SiteUserSecureAuthToken
Authenticates a visitor who logs into a customer account
Cookie
3 years

squarespace-announcement-bar
Prevents the announcement bar from displaying if a visitor dismisses it
localstorage
Persistent

squarespace-likes
Shows when you've already "liked" a blog post.
localstorage
Persistent

squarespace-popup-overlay
Prevents the promotional pop-up from displaying if a visitor dismisses it
localstorage
Persistent

ss_sd
Ensures that visitors on the Squarespace 5 platform remain authenticated during their sessions.CookieSession

Test
Investigates if the browser supports cookies and prevents errors.
Cookie
Session

TZ
Allows a Scheduling client’s appointments to display correctly based on their time zone preferences.localstorage
Persistent

Cross-site request forgery (CSRF)
CSRF is an attack vector that tricks a browser into taking unwanted action in an application when someone’s logged in.

Analytics and Performance Cookies

ss_cid
2 years
Identifies unique visitors and tracks a visitor’s sessions on a site

ss_cookieAllowed
30 days
Remembers if a visitor agreed to placing Analytics cookies on their browser if a site is restricting the placement of cookies

ss_cpvisit
2 years
Identifies unique visitors and tracks a visitor’s sessions on a site

ss_cvisit
30 minutes
Identifies unique visitors and tracks a visitor’s sessions on a site

ss_cvr
2 years
Identifies unique visitors and tracks a visitor’s sessions on a site

ss_cvt
30 minutes
Identifies unique visitors and tracks a visitor’s sessions on a site

5. Using your personal information
All personal Data is used, processed and stored securely in accordance with the principles of the GDPR. We may use your personal information to:
i) administer the Website;
j) improve your browsing experience by personalising the Website;
k) send statements and invoices to you;
l) send you general communications;
m) send you email notifications which you have specifically requested;
n) send to you our newsletter and marketing communications relating to our business which we think may be of interest to you by post or email, if you have agreed to receive these (you can unsubscribe at any time by clicking on the link at the bottom of the email, or by contacting us to let us know);
o) provide third parties with statistical information about our users, but this information will not be used to identify any individual user; and
p) deal with enquiries and complaints made by or about you relating to the Website.

Wherever you are required to submit Data, you will be given
options to restrict our use of that Data. We will not provide
your personal information to any third parties (except the
service provider), without your express consent.

All financial transactions are handled via a third party online
payment gateway provider, such as PayPal. No credit or
debit card information is provided to us and completion of
the transaction will be subject to you agreeing to this
payment gateway’s terms and conditions. A separate
contractual relationship will then be created between you
and the payment gateway provider.

6. How and Where Do We Store Your Data?
We only keep your personal data for as long as we need to in order to use it as described above in clause 5, and/or for as long as we have your permission to keep it. Your data will only be stored in the EU. Data security is very important to us, and to protect your data we have taken suitable measures to safeguard and secure data collected through our Website.

7. Do We Share Your Data?
We may sometimes contract with other third parties to supply services to you on our behalf. These may include search engine facilities, advertising, and marketing companies. In some cases, these third parties may require access to some or all of your data. Where any of your data is required for such a purpose, we will take all reasonable steps to ensure that your data will be handled safely, securely, and in accordance with your rights, our obligations, and the obligations of the third party under the law.

We may compile statistics about the use of our Website including data on traffic, usage patterns, user numbers, sales, and other information. All such data will be anonymised and will not include any personally identifying data, or any anonymised data that can be combined with other data and used to identify you. We may from time to time share such data with third parties such as prospective investors, affiliates, partners, and advertisers. Data will only be shared and used within the bounds of the law.

We may sometimes use third party data processors that are located outside of the European Economic Area (“the EEA”) (The EEA consists of all EU member states, plus Norway, Iceland, and Liechtenstein). Where we transfer any personal data outside the EEA, we will take all reasonable steps to ensure that your data is treated as safely and securely as it would be within the UK and under the GDPR.

In certain circumstances, we may be legally required to share certain data held by us, which may include your personal data, for example, where we are involved in legal proceedings, where we are complying with legal requirements, a court order, or a governmental authority.

8. Security of your personal information
We will take reasonable technical and organisational precautions to prevent the loss, misuse or alteration of your personal information. We will store all personal information you provide on our secure (password and firewall protected) and encrypted servers. Of course, data transmission over the internet is inherently
insecure, and we cannot guarantee the security of data sent over the internet.

9. Accessing your own Data
You have the right to ask for a copy of any of your personal data held by us (where such data is held). Please contact us for more details at chris@kayeandco.com, or using the contact details below in clause 14.

10. Third party websites
This Website will contain links to other websites. We have no control over such websites and are not responsible for the content, policies or practices of third party websites. Users are advised to read the privacy policy or statement of other websites prior to using them.

11. Changes of Business Ownership and Control
If we decide to expand or reduce our business, this may involve the sale and/or the transfer of control of all or part of the business. Data provided by Users will be transferred and the new owner or newly controlling party will, under the terms of this policy, be permitted to use the Data for the purposes for which it was originally supplied to us. If any Data is to be transferred in such a manner, you will be contacted and informed of the changes.

12. Variation
We may revise this policy from time-to-time. The revised version will apply from the date the revised policy is published on our Website. Please check this page regularly to ensure you are familiar with the current version.

13. Entire agreement
This policy, together with our Terms and Conditions and Website Terms of Use, constitutes the entire agreement between you and us in relation to your use of our Website, and supersedes all previous agreements in respect of your use of this Website.

14. Contacting Us
If you have any questions about our Website or this Privacy Policy, please contact us by email chris@kayeandco.com or by post at 5 Don Terrace, Thurlstone, Sheffield, South Yorkshire S36 9QE. Please ensure that your query is clear, particularly if it is a request for information about the data we hold about you (as under clause 9, above).

15. Law and jurisdiction
This policy will be governed by and construed in accordance with the laws of England and Wales, and any disputes relating to this policy will be subject to the exclusive jurisdiction of the courts of England and Wales.