Privacy Policy

1. About this Privacy Policy

This Privacy Policy explains how K-Ston collects, uses, stores and otherwise processes personal data in connection with:

• the website at k-ston.com;
• enquiries about K-Ston’s services;
• applications to join the K-Ston sales team;
• meetings, calls and other communications with K-Ston;
• K-Ston’s own business development activities;
• sales and commercial activities carried out for K-Ston’s clients; and
• related contractual and business relationships.

This Privacy Policy applies to website visitors, prospective clients, client representatives, candidates, contractors, sales prospects, suppliers and other individuals who interact with K-Ston.

2. Data Controller

The data controller is:

[FULL REGISTERED COMPANY NAME], trading as K-Ston
Company registration number: [COMPANY CODE]
Registered address: [REGISTERED ADDRESS]
Email: info@k-ston.com
General enquiries: info@k-ston.com

In this Privacy Policy, “K-Ston”, “we”, “us” and “our” refer to the entity identified above.

Where K-Ston processes personal data solely on the documented instructions of one of its clients, the relevant client may be the data controller and K-Ston may act as its data processor. More information about this distinction is provided in Section 8.

3. Personal Data We Collect

3.1 Website and technical information

When you visit our website, we or our hosting and security providers may process:

• IP address;
• browser type and version;
• device type and operating system;
• referring website;
• pages visited;
• date and time of access;
• approximate location derived from the IP address;
• server logs;
• security and diagnostic information; and
• cookie or consent-preference information.

We do not use this information to identify you directly unless this is necessary for security, troubleshooting, legal compliance or the investigation of suspected misuse.

3.2 Partnership and service enquiries

When you contact K-Ston about a potential partnership, we may collect:

• first and last name;
• work email address;
• telephone number;
• job title;
• company name;
• company website;
• product or service description;
• target markets;
• typical contract value;
• information about the existing sales team;
• preferred start date;
• commercial challenges;
• notes and message content; and
• information provided during subsequent calls or correspondence.

3.3 Recruitment and candidate information

When you apply to join K-Ston or discuss a possible professional relationship with us, we may collect:

• first and last name;
• email address and telephone number;
• LinkedIn profile or other professional profiles;
• current and previous roles;
• CV, employment history and qualifications;
• years and type of sales experience;
• preferred role;
• availability and preferred working arrangement;
• languages;
• industries and markets in which you have worked;
• interview notes;
• assessment or practical-task results;
• references, where appropriate and lawfully obtained;
• compensation expectations; and
• any other information you voluntarily provide.

Please do not include health information, political opinions, religious beliefs, information about trade-union membership, sexual orientation, biometric data, criminal-record information or other sensitive information unless we specifically request it for a lawful and necessary purpose.

3.4 Meetings, calls and correspondence

We may process:

• emails and messages;
• calendar and scheduling information;
• meeting notes;
• call or meeting recordings;
• transcripts;
• summaries;
• action items;
• sales and qualification information;
• objections and commercial interests; and
• information about your interactions with K-Ston.

We will inform participants before recording a call or meeting where recording is used. Recording will only take place where an appropriate legal basis exists and where permitted by applicable law.

3.5 Business contact and sales-prospect information

For K-Ston’s own business development or sales work carried out for clients, we may process professional information such as:

• name;
• employer and job title;
• professional email address;
• professional telephone number;
• LinkedIn profile;
• company and industry information;
• professional location;
• public statements and professional interests;
• prior business interactions;
• relevant buying signals;
• communication history;
• campaign responses;
• CRM records; and
• information about whether you have objected to further contact.

This information may be received directly from you or obtained from clients, professional networking platforms, company websites, public registers, event lists, referrals, data providers and other lawful professional sources.

4. Why We Process Personal Data

We process personal data for the following purposes and legal bases.

Responding to enquiries

We use enquiry information to respond to requests, evaluate potential cooperation, prepare proposals and take steps requested before entering into a contract.

Legal basis: steps taken at your request before entering into a contract and our legitimate interest in responding to business enquiries.

Providing and administering services

We process client and contact information to provide services, manage projects, communicate with clients, maintain CRM records, issue invoices and administer commercial relationships.

Legal basis: performance of a contract, steps before entering into a contract, compliance with legal obligations and our legitimate interest in operating and managing our business.

Recruitment and contractor selection

We use candidate information to review applications, assess suitability, conduct interviews or practical assessments, communicate decisions and prepare possible contractual arrangements.

Legal basis: steps taken before entering into a contract, compliance with applicable employment obligations and our legitimate interest in selecting suitable team members.

Separate consent will be requested before retaining an unsuccessful candidate’s information for unrelated future opportunities where such consent is required.

Business development and professional outreach

We may use professional contact information to identify relevant organisations and individuals, communicate about K-Ston’s services, arrange meetings and manage business-development activities.

Legal basis: our legitimate interest in developing our business, provided that this interest is not overridden by the individual’s rights and interests.

Electronic marketing and direct outreach will only be conducted where permitted by applicable electronic-communications and direct-marketing laws. You may object to this processing at any time.

Client sales campaigns

We may research accounts, identify professional contacts, conduct outreach, qualify opportunities, manage sales conversations and maintain CRM information for our clients.

The applicable legal basis and controller responsibilities depend on the specific campaign and contractual arrangement. See Section 8.

Meetings, training and quality improvement

Meeting notes, recordings and transcripts may be used to:

• document discussions;
• prepare follow-up communications;
• maintain accurate CRM records;
• assess sales quality;
• provide training and coaching;
• identify objections and conversion patterns;
• improve scripts and processes; and
• resolve disputes or misunderstandings.

Legal basis: consent where required, performance of a contract, and our legitimate interests in documenting communications, improving service quality and training our team.

Website security and performance

We process technical information to deliver the website, prevent fraud or abuse, detect technical problems, maintain security and understand basic website performance.

Legal basis: our legitimate interest in operating a functional and secure website and, where applicable, compliance with legal obligations.

Legal and regulatory purposes

We may process information to comply with accounting, tax, employment, data-protection and other legal obligations or to establish, exercise or defend legal claims.

Legal basis: compliance with legal obligations and our legitimate interest in protecting our legal rights.

Cookies and optional analytics

Strictly necessary website technologies are used on the basis of our legitimate interest in operating the website.

Google Analytics and any other non-essential analytics or marketing technologies are loaded only after obtaining the applicable consent. Further details are provided in our Cookie Policy.

5. Where We Obtain Personal Data

We may obtain personal data:

• directly from you;
• from your employer or another organisation you represent;
• from K-Ston clients;
• through referrals and introductions;
• from publicly available company websites and professional profiles;
• from events, conferences and professional communities;
• from business-information and lead-data providers;
• from communication, CRM, scheduling and sales platforms; and
• from publicly accessible registers and databases.

Where we obtain your information indirectly, we will provide the information required by applicable data-protection law within the legally required period, unless an exemption applies.

6. Whether You Must Provide Information

Providing personal data is generally voluntary. However, we may be unable to:

• respond properly to an enquiry;
• evaluate a proposed partnership;
• assess an application;
• schedule or conduct a meeting;
• prepare a contract; or
• provide requested services

without certain basic contact and business information.

Fields identified as optional do not need to be completed.

7. Who Receives Personal Data

We may disclose personal data to:

• K-Ston founders, personnel and authorised contractors;
• the relevant K-Ston client where the information relates to a client campaign;
• website-hosting and infrastructure providers;
• email, cloud-storage and collaboration providers;
• CRM, sales-enablement and lead-management providers;
• calendar and video-conferencing providers;
• calling, recording and transcription providers;
• document-signing and contract-management providers;
• accountants, auditors, insurers and professional advisers;
• recruitment and assessment providers;
• public authorities where disclosure is legally required;
• prospective purchasers or investors in connection with a legitimate corporate transaction; and
• other parties where you have authorised the disclosure.

Service providers may only use personal data to provide contracted services and must protect it in accordance with applicable law and contractual requirements.

The current list of material service providers is available by contacting info@k-ston.com.

8. Processing for K-Ston Clients

K-Ston may provide account research, outreach, qualification, sales-conversation, CRM and commercial-support services for its clients.

Depending on the arrangement:

• the client may act as the data controller and K-Ston as its data processor;
• K-Ston and the client may act as separate controllers; or
• K-Ston and the client may jointly determine certain processing activities.

The applicable roles depend on who determines the purposes and essential means of processing. These responsibilities are defined in the relevant client agreement.

Where K-Ston acts solely as a processor, requests concerning your personal data may need to be handled by the relevant client. K-Ston will assist the client as required by the applicable agreement and data-protection law.

Commercial communications sent for a client should identify the relevant organisation and provide an appropriate method for objecting to further contact.

9. Recordings, Transcription and AI-Assisted Tools

K-Ston may use software to record, transcribe, summarise or analyse sales calls and meetings.

These tools may help us:

• prepare meeting summaries;
• draft CRM entries;
• identify agreed actions;
• prepare follow-up messages;
• review sales quality;
• track objections and recurring themes; and
• support training and coaching.

We do not use solely automated decision-making that produces legal or similarly significant effects for website visitors, candidates or business contacts.

Human reviewers remain responsible for recruitment, contracting, sales qualification and other material decisions.

Confidential or sensitive information should not be entered into AI-assisted systems unless this is necessary, authorised and appropriately protected.

10. International Data Transfers

Some service providers may process personal data outside Lithuania or outside the European Economic Area.

Where personal data are transferred to a country that has not been recognised as providing an adequate level of protection, we will use an appropriate transfer mechanism where required, such as:

• European Commission standard contractual clauses;
• supplementary technical and organisational safeguards;
• an applicable adequacy decision; or
• another lawful transfer mechanism.

You may request further information about applicable transfer safeguards by contacting info@k-ston.com.

11. How Long We Retain Personal Data

We retain personal data only for as long as reasonably necessary for the relevant purpose.

Unless a longer period is required by law or necessary for legal claims, our general retention periods are:

• General enquiries: up to 24 months after the last meaningful communication.
• Unsuccessful partnership enquiries: up to 24 months after the last meaningful communication.
• Client and contractual records: for the duration of the relationship and afterwards for the periods required by accounting, tax and limitation laws.
• Candidate data: until the relevant selection process has ended and generally no longer than three months afterwards, unless continued retention is necessary for legal claims.
• Talent-pool information: up to 12 months where the candidate has clearly agreed to consideration for future opportunities.
• Call and meeting recordings: normally up to six months, unless a shorter or longer period is justified by the project, a dispute, training requirements or contractual obligations.
• Meeting transcripts and business notes: for as long as the related business relationship, opportunity or project remains active, followed by the applicable business-record retention period.
• Prospect and business-development records: up to 24 months after the last meaningful interaction, unless an active commercial opportunity remains or the information must be retained to respect an objection.
• Objection and suppression records: as long as reasonably necessary to ensure that the person is not contacted again.
• Technical and security logs: normally up to 30 days, unless needed to investigate a security incident.
• Cookie-consent records: for the period stated in the Cookie Policy or until the preference is replaced or withdrawn.

We may retain limited information for longer where required to comply with law, enforce agreements, prevent fraud or establish, exercise or defend legal claims.

12. Direct Marketing and the Right to Object

Where permitted by law, K-Ston may contact professional business representatives about services that appear relevant to their role or organisation.

Every applicable marketing communication will provide a reasonable way to object or unsubscribe.

You may object at any time by:

• using the unsubscribe or opt-out mechanism in the communication;
• replying to the sender;
• contacting info@k-ston.com; or
• asking the person contacting you not to contact you again.

After an objection, we may retain minimal information on a suppression list to ensure that the objection is respected.

13. Your Data-Protection Rights

Depending on the circumstances and applicable law, you may have the right to:

• receive information about how your personal data are processed;
• request access to your personal data;
• request correction of inaccurate or incomplete data;
• request deletion of personal data;
• request restriction of processing;
• object to processing based on legitimate interests;
• object to direct marketing at any time;
• receive certain information in a structured, commonly used and machine-readable format;
• request transmission of eligible information to another controller;
• withdraw consent at any time, without affecting processing performed before withdrawal;
• request information about international-transfer safeguards; and
• lodge a complaint with a supervisory authority.

These rights are not absolute. A request may be limited where an exemption applies or where retaining information is necessary to comply with law or protect another person’s rights.

To exercise a right, contact info@k-ston.com. We may request reasonable information to verify your identity.

14. Complaints

Please contact us first at info@k-ston.com so that we can investigate and respond to your concern.

You also have the right to lodge a complaint with the Lithuanian supervisory authority:

State Data Protection Inspectorate
L. Sapiegos str. 17
LT-10312 Vilnius
Lithuania
Website: vdai.lrv.lt

You may also contact the supervisory authority in the EU or EEA country where you live, work or believe an infringement occurred.

15. Information Security

We use reasonable technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

These measures may include:

• access controls;
• authentication protections;
• restricted permissions;
• encrypted communication and storage where appropriate;
• secure backups;
• confidentiality obligations;
• service-provider assessments;
• staff guidance; and
• incident-response procedures.

No internet transmission or storage system can be guaranteed to be completely secure.

16. Children

K-Ston’s website and services are intended for business users and professional candidates. They are not directed at children.

We do not knowingly collect personal data from children through the website. If you believe a child has provided personal data to us, contact info@k-ston.com.

17. Third-Party Websites

The website may contain links to LinkedIn, client websites or other third-party services.

Those organisations process personal data under their own privacy notices. K-Ston is not responsible for the privacy practices or content of independent third-party websites.

18. Changes to this Privacy Policy

We may update this Privacy Policy when our services, technology, providers or legal obligations change.

The current version will be published on this page with an updated revision date. Material changes may also be communicated through the website or directly to affected individuals where appropriate.

19. Contact

For questions, requests or complaints concerning personal data, contact:

[FULL REGISTERED COMPANY NAME] / K-Ston
Email: info@k-ston.com
Address: [REGISTERED ADDRESS]