Skip to content

General Data Protection Regulation (GDPR)

Last updated June 2026

This GDPR disclosure supplements the information contained in Kipplo's Privacy Policy and provides additional details regarding how Kipplo complies with the General Data Protection Regulation (GDPR) when processing personal data of individuals within the European Economic Area (EEA), the United Kingdom, and Switzerland.

Worldwide privacy compliance

Kipplo is committed to upholding worldwide privacy standards. We adhere to GDPR principles including lawfulness, fairness and transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity and confidentiality, and accountability. These principles guide all our data processing activities regardless of where our users are located.

Lawful basis for processing

Kipplo processes business contact information on the basis of legitimate interest, as permitted under Article 6(1)(f) of the GDPR. We rely on this basis because the personal data we process is limited to business contact details (such as work email, job title, and business phone number) used strictly for legitimate B2B sales, marketing, and research purposes. Before relying on legitimate interest, we assess the purpose of processing, its necessity, and the balance between our interests and the rights of the individual concerned. Individuals have the right to object to this processing at any time, as described below.

Transfer of data to a third country

We may transfer personal data outside the EEA in accordance with GDPR. When such transfers occur, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission as our legal mechanism to ensure that your personal data receives an adequate level of protection. We also conduct transfer impact assessments where required to evaluate the privacy protections in the receiving country.

Security & Infrastructure

Kipplo maintains technical and organizational measures designed to protect personal data against unauthorized access, alteration, disclosure, or destruction. Our infrastructure is hosted on Amazon Web Services (AWS), and includes:

  • Encryption of data in transit and at rest
  • Role-based access controls and multi-factor authentication for internal systems
  • Network isolation and least-privilege access to production environments
  • Continuous monitoring and logging of system access
  • Regular review of security practices as our infrastructure evolves

We work to align our practices with recognized industry security standards and periodically reassess our controls as we scale.

Personal Information we collect:

  • Name
  • Internet Protocol address
  • Work email address
  • Designation & Department
  • Social Networking URLs
  • Business phone number
  • Business related postal address

Category of the sources for where the personal information is collected

  • First-hand research
  • Publically available information
  • Third-party data vendors
  • Direct and indirect activity on Kipplo's Website
  • Directly and indirectly through the consumers and their representatives

Data Partner Sourcing Note: In addition to Kipplo's own data collection processes, certain records in our database are sourced through licensed third-party data partners. We conduct due diligence on our data partners' sourcing methodologies and compliance practices to help ensure data is collected and shared in accordance with applicable data protection laws.

The purpose behind the collection of the personal information

  • To meet the purpose for which the information is provided for
  • To make the content on the website more consumer-centric
  • For testing, analysis, research, and product development
  • To modify, develop, and improve Kipplo's website

Categories of third parties with whom this information is shared

  • Kipplo's affiliates
  • Service providers
  • Kipplo's consumers

Data Subject Rights (DSAR)

If you are located in the EEA, UK, or Switzerland, you have the right to:

  • Request access to the personal data we hold about you
  • Request correction of inaccurate or incomplete data
  • Request deletion of your personal data
  • Object to or restrict our processing of your data
  • Request a copy of your data in a portable format
  • Withdraw consent where processing is based on consent

To exercise any of these rights, please contact us at support@kipplo.com. We will respond to verified requests within 30 days, in accordance with GDPR requirements.

Data Retention

Kipplo retains personal data only for as long as necessary to fulfill the purposes described in this policy, including ongoing verification and refresh of business contact records to maintain accuracy. Data is periodically reviewed, updated, or removed in accordance with our internal retention schedules. Individuals may request earlier deletion of their data at any time by contacting us as described above.