Data protection
Privacy policy
Last updated: 2026-08-30. This policy explains how KCs Hardware SL processes your personal data under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
1. Data controller
Controller: KCs Hardware SL
Tax ID (NIF/CIF): B88695887
Address: Local 14, Al Kasar Commercial Centre, Condado de Alhama Golf Resort, 30849 Alhama de Murcia, Murcia, Spain
Email: kcshardware@outlook.com
2. What data we process and where it comes from
We process data you give us: website forms (name, email, phone and the content of your message or booking request), service contracting (contact details, the property address for key holding, checks, holiday-let changeovers or maintenance work, and the data needed for equipment hire, including checking an identity document at collection), and communications by email, phone or WhatsApp.
We do not ask for special-category data or data of children under 14. No payments are taken through this website.
3. Purposes and legal basis
Answering your enquiries and quote or booking requests: pre-contractual steps taken at your request (art. 6.1.b GDPR).
Providing the services you contract (hire, key holding, property checks, changeovers, installations, maintenance, parcel collection): performance of a contract (art. 6.1.b GDPR).
Meeting legal obligations (invoicing, tax, consumer law): art. 6.1.c GDPR.
Handling communications and the business relationship: legitimate interest (art. 6.1.f GDPR).
Sending you news and offers by email: your consent (art. 6.1.a GDPR and art. 21 LSSI) or, if you are already a customer, our legitimate interest in telling you about similar services (art. 21.2 LSSI). See section 4.
Apart from those emails, we do not use your data for advertising, we do not profile you, and we make no automated decisions with legal effects.
4. Marketing emails (news and offers)
We only email you news and offers if you asked for them by ticking the optional box on our forms (or told us in the shop), or if you are already our customer (hire, key holding or other work you booked) and the emails are about similar services; in that case you can refuse when you give us your details and in every email. Leaving the box unticked makes no difference to your booking or enquiry.
You can unsubscribe at any time, free of charge: with the link in any email, on the unsubscribe page or by writing to kcshardware@outlook.com. We keep a record of your opt-out (your email and the date) so we never email you again. You will still get emails about things you book or ask us for.
5. Recipients and transfers
We do not sell or share your data. It is only accessed by the providers needed to deliver the service, acting as processors: our web hosting and email provider, and the local trades who carry out contracted work (only the minimum data needed, such as address and contact details).
If you sign up to hear when the parcel pickup point launches, we keep your name and email or phone only to send you that message; this data is handled by KCs Hardware SL alone and is not shared with HolaParcel. If you message us on WhatsApp, the service is provided by Meta Platforms Ireland and international transfers may occur under its clauses and safeguards. The embedded Google map and Google Analytics (anonymous visit statistics with the IP address anonymised, provided by Google Ireland Ltd.) only load if you accept cookies; Google may process this data outside the EEA under appropriate safeguards (see the cookie policy).
6. Retention periods
Enquiries that do not lead to a service are kept for a maximum of 12 months. Data for contracted services is kept for the duration of the relationship and afterwards blocked for the statutory limitation periods (generally 5 years for contractual obligations and 4 years for tax obligations).
Held keys are identified by code only; the code-to-owner mapping is stored separately and securely, and is deleted when the service ends and the keys are returned.
7. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw consent, at any time by writing to kcshardware@outlook.com with the subject "Data protection", including enough information to identify you.
If you believe we have not handled your data properly, you can complain to the Spanish supervisory authority, the Agencia Española de Protección de Datos (www.aepd.es, C/ Jorge Juan 6, 28001 Madrid).
8. Security
We apply technical and organisational measures appropriate to the risk: restricted access to data, secure key custody with separate coding, encrypted communications (HTTPS) and backups. If a security breach puts your rights at risk, we will notify it as required by arts. 33 and 34 GDPR.
9. Updates to this policy
We may update this policy to reflect legal or service changes. The current version is always published on this page with its revision date.
