Rackometry Business

Business privacy

Effective 6 October 2026

KMB IT Solutions Limited is the controller for the personal information described here. We are registered in England and Wales under company number 10463447, with registered office at 82A James Carter Road, Mildenhall, Suffolk, IP28 7DE, United Kingdom.

Local-first rack information

Rack plans, equipment details, serial numbers, asset tags, notes, audit findings, PDU and cable records, imported CSV files and exports are stored locally on the organisation’s computer. They are not uploaded to KMB’s licensing service. The organisation controls backups, sharing, retention and deletion of these records.

Evaluation and licence information

To provide a 14-day evaluation or paid organisation licence, KMB processes the organisation name, work email supplied by the organisation or purchaser, licence status, plan capacity, activation identifiers, assigned user or computer labels supplied by the administrator, entitlement dates and limited service request metadata. A device-bound identifier is used to control activations; it is not used to retrieve the computer’s rack records. When online licence delivery is enabled, a short-lived verification code is emailed to the evaluation applicant or purchaser. The licensing database stores a protected hash of the email and code rather than the plain-text values.

Payment information

Paddle acts as merchant of record and processes purchaser details, payment, tax, invoice, subscription and refund information. KMB receives transaction, customer, subscription, product, price and status identifiers needed to grant and maintain the licence. KMB does not receive full payment-card details.

Purpose and legal basis

We process licensing information to provide an evaluation requested by the organisation, perform and administer the software contract, prevent misuse, secure the service, troubleshoot problems and meet legal and accounting obligations. These purposes rely on contract, legitimate interests and legal obligations as applicable.

Providers and international transfers

Cloudflare hosts the licensing service and database. When self-service evaluation is available, Cloudflare Turnstile checks the registration form for automated misuse; it processes security-challenge information, not rack records or the form’s organisation and email fields. Paddle handles website purchases as merchant of record. Resend delivers evaluation and purchaser-verification emails when online licence delivery is enabled; it receives the destination email address and message, but no rack, asset or audit records. These providers may process information outside the United Kingdom under their own privacy terms. Where KMB is responsible for an international transfer, we use an applicable adequacy decision or approved safeguards where required.

Retention

Evaluation and activation records are retained while needed to provide the service, prevent repeated trial abuse and resolve support or security issues. Active customer and entitlement records are retained for the subscription and a reasonable period afterwards. Transaction and accounting records may be retained for the period required by tax and company law. Short-term technical logs are normally retained for no more than 30 days unless a security incident or legal requirement justifies longer retention.

Your rights

Depending on the circumstances, data-protection law may provide rights to access, correct, erase, restrict or object to processing and to receive certain information in a portable format. We do not sell personal information or use it for third-party advertising. You may complain to the Information Commissioner’s Office.

Security and contact

We use proportionate technical and organisational measures, but no service can be guaranteed completely secure. For a privacy request, email contact@kmbitsolutionsltd.co.uk. Include only the details needed to identify the licence or transaction and do not send rack records or payment-card information.