← Back to KnL Mall

KnL Technologies

Privacy & Policy

Last updated: September 2026 · This policy applies to KnL Mall (the marketplace), seller storefronts, the KnL Engine, and related services operated by KnL Technologies ("KnL", "we", "us", "our").

1. Who we are

KnL Technologies operates two connected services: the KnL Mall marketplace, where buyers discover and purchase products and book services from independent seller storefronts, and the KnL Engine, an automation platform that sellers use to manage leads, orders, routing and content. KnL is the data controller for information collected on this platform. You can reach us at any time at enoch@knltechnologies.com.

2. Information we collect

Information you give us

  • Account details: name, email address, and password or sign-in provider when you register.
  • Seller details: store name, handle, description, contact details, social links, and optional delivery destinations (such as a Google Sheet or webhook URL) you connect.
  • Listing content: product and service names, descriptions, prices, images and availability.
  • Order and booking requests: buyer name, contact details, delivery or appointment details, notes and payment preference you submit on a listing.
  • Support and enquiry messages sent through capture pages or contact forms.

Information collected automatically

  • Usage data: pages viewed, searches, filters, and interactions with listings and storefronts.
  • Device and log data: IP address, browser type, operating system, timestamps and error logs.
  • Cookies and local storage used for sign-in sessions, theme preferences and essential site operation.

Information from third parties

  • Social account tokens when a seller connects channels (Facebook, Instagram, LinkedIn, X, TikTok) for publishing — stored securely and used only to publish on your instruction.
  • Authentication providers (such as Google) that confirm your identity when you sign in.

3. How we use your information

  • To run the marketplace: display storefronts and listings, process purchase and booking requests, and route them to the correct seller.
  • To operate seller tools: lead scoring, tiering, routing rules, automations and content publishing that each seller configures.
  • To deliver requests to the destination each seller has connected (for example their Google Sheet or webhook) so they can fulfil orders and respond to enquiries.
  • To send transactional emails: account verification, order confirmations, seller notifications and administrative alerts.
  • To secure the platform: fraud prevention, abuse detection, auditing and troubleshooting.
  • To improve the service: aggregate, de-identified analytics about how the marketplace is used.

We do not sell your personal information, and we do not use your data to advertise third-party products to you.

4. How orders are routed to sellers

When you submit an order or booking request on a storefront, your details are delivered to that specific store only — the destination (sheet or webhook) that the store's owner has connected. Requests are never routed to another seller's destination. Sellers are independent businesses and act as separate controllers of the buyer information they receive through their storefront; their use of that information is governed by their own policies and obligations.

5. Legal bases (UK/EU GDPR)

  • Contract: processing necessary to provide your account, listings and order handling.
  • Legitimate interests: platform security, fraud prevention, service improvement and administration.
  • Consent: optional integrations (for example connecting a social channel) and optional communications. You may withdraw consent at any time.
  • Legal obligation: records we must keep to comply with law.

6. Sharing and disclosure

  • With sellers: buyer request details go to the seller whose listing you used.
  • With service providers: hosting, database, email delivery and automation infrastructure that process data on our behalf under contract.
  • With platforms you connect: when a seller publishes content, the content is sent to the social platform they selected.
  • Legal: where required by law, regulation, court order, or to protect the rights, safety and security of users and the platform.
  • Business transfers: in connection with a merger, acquisition or sale of assets, subject to this policy.

7. Data retention

We keep personal information only as long as needed for the purposes above. Account data is retained while your account is active; order and request records are retained for operational and legal accounting periods; logs and security records are kept for a limited period and then deleted or anonymised. You may request deletion at any time (see Your rights below).

8. Data security

We use encryption in transit, row-level access controls that isolate each account's data, server-side credential storage for connected integrations, and least-privilege access for administrators. No method of transmission or storage is 100% secure, but we work to protect your information and will notify affected users and authorities of any breach where the law requires it.

9. Your rights

Depending on your location, you have the right to:

  • Access the personal information we hold about you.
  • Correct inaccurate or incomplete information.
  • Request deletion of your information.
  • Object to or restrict certain processing.
  • Data portability — receive a copy of your data in a usable format.
  • Withdraw consent where processing is based on consent.
  • Lodge a complaint with your local data protection authority (in the UK, the ICO).

To exercise any of these rights, email enoch@knltechnologies.com. We respond within 30 days.

10. Cookies

We use only essential cookies and local storage: to keep you signed in, remember interface preferences (such as light or dark theme), and keep the site secure. We do not use third-party advertising or cross-site tracking cookies.

11. Children's privacy

The platform is not directed at children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

12. International transfers

Some of our infrastructure providers process data outside the UK. Where that happens, we rely on appropriate safeguards such as adequacy decisions or standard contractual clauses.

13. Changes to this policy

We may update this policy from time to time. The "last updated" date above shows the current version, and material changes will be announced on the platform or by email. Continued use after a change means you accept the updated policy.

14. Contact

KnL Technologies · enoch@knltechnologies.com
For privacy questions, data requests, or complaints, email us and we will respond within 30 days.