Privacy Policy

KCGG LTD. (trading as OHCRM, “we”, “us”, or “our”) is the data controller responsible for personal data processed through the OHCRM platform. This Privacy Policy explains what we collect, why, on what legal basis, who we share it with, and how long we keep it.

1. Information We Collect

We collect the following categories of personal data:

• Account data: name, email, login credentials, brokerage details.
• Service data: open house events, visitor sign-ins, follow-up activity.
• Support data: messages you send to our support team.
• Technical data: IP address, device identifiers, browser type, usage telemetry.

2. How We Use Your Information & Legal Basis

• Account creation and providing the service — legal basis: performance of a contract.
• Customer support — legal basis: performance of a contract.
• Billing, subscription management, and tax compliance — legal basis: performance of a contract and legal obligation.
• Security, fraud prevention, and service improvement — legal basis: legitimate interests.
• Marketing communications — legal basis: consent (you may withdraw at any time).

3. Visitor Data

When you use OHCRM to collect visitor information at open houses, you are responsible for obtaining appropriate consent from those individuals. We process and store this data on your behalf as your service provider.

4. Data Sharing

We share personal data with the following categories of recipients:

• Paddle.com Market Limited (“Paddle”) — our Merchant of Record. Paddle processes payments, manages subscriptions, handles invoicing, and ensures tax compliance for all purchases. See Paddle’s Privacy Notice.
• Service providers / subprocessors — cloud hosting, email delivery, analytics, and support tooling, bound by confidentiality obligations.
• Professional advisers — legal, accounting, and similar advisers where necessary.
• Authorities — where required by law or to protect our legal rights.

We do not sell your personal information to third parties.

5. Data Retention

We retain personal data only for as long as necessary to provide the service and to meet our legal, accounting, and reporting obligations. Account and service data is retained for the duration of your subscription and for up to 24 months after account closure, after which it is deleted or anonymised. Billing records handled by Paddle are retained in accordance with applicable tax laws (typically 6–7 years).

6. Data Security

We implement appropriate technical and organisational measures — including encryption in transit, access controls, and audit logging — to protect your data against unauthorised access, alteration, disclosure, or destruction.

7. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, restrict, or port your personal data, to object to processing, and to withdraw consent at any time. You may also have the right to complain to your local data protection authority. Contact us to exercise these rights.

8. Cookies

We use essential cookies to operate the service and may use analytics cookies to improve it. You can control cookies through your browser settings.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on our site.