10% of CDKi to go - The cull has started
1733 replies (most recent on top)
That's all alright then. Started for a moment to feel like someone fu@ked up a perfectly good profitable business.
It's true, like all investments someone can go wrong, being FP a fund with a basket of many companies some negative cases do not affect the final profit result of the fund. History teaches that FP in these cases, after 5 years from its entry, leaves gives the company full of debts and says goodbye... it's happening this time too
2027 will be the last year of FP in keyloop and also the last year of keyloop
I’m sorry to say it, but things will never get better at Keyloop – quite the opposite, in fact. FP and their KLT muppets have, unfortunately, managed to make Keyloop unsellable; this has already been proven by numerous failed attempts to sell the company.
Breaches of the law – both in terms of employment and data protection – will become the norm rather than the exception. Pay rises and bonuses? FORGET IT; what happened this year will be the standard going forward.
Increased debt in the individual legal entities and a large annual capital dividend to FP instead will be the norm.
And the customers – more will leave Keyloop, but fortunately for Keyloop, IT ecosystems have become so complex that, particularly for large retailers, switching involves far too much work and uncertainty – so they’ll stay.
And in 5–10 years’ time, once the FP leeches have su-ked all the life out of Keyloop, the whole thing will collapse and come crashing down in a massive bankruptcy that will send shockwaves through the mobility industry. As for FP, they couldn’t care less about customers, staff or partners. Try searching for the companies: “Native Instruments”, “Rugs USA” and “Muse Group”, read about their fate and see if it rings any bells?
@a38e A blanket legal statement does not exonerate Keyloop from violating contractual agreements regarding how sensitive data is being processed.
Disclosure to the dealerships is an obligation that Keyloop has - so the dealerships can make informed consent to their own customers on how / where their sensitive information is being processed.
When Keyloop realized that our breaks in data processing weren't being covered, they deiced to use people from the "concierge" chat team to cover our breaks instead of actually hiring another person and it spiraled from there. (The chat team is forced to used Western names and never disclose they are chatting from India. I wonder why?)
Who's job is it at Keyloop to have notified the dealerships of this change to who will be processing, looking at and having access to this data?
Concerns were brought up about this and brushed off. Now, it will be the job of the Information Commissioner to look in this.
Play stupid games with sensitive data, win stupid prizes.
Sadly everyone is a slave to terrible short sighted cost saving decisions by a bunch of flaming fools.
Before I left all I did was spend my days fielding calls from dissatisfied customers who are getting a poor service because the KLT are playing at whittling the stick that is Keyloop to a burnt out match.
@a38s
As awful as that was they were told to have everyone in for the visit not knowing that bombshell was being delivered.
Maybe it was discovered for how long FP will be the owner... look how long the contract of the head legal they are looking for lasts
@a38f my manager invited me to office 1 week in advance stating there will be "potential leadership visit". On day x, 15 minutes meeting with hr. So no, i would prefer impersonal email by robot, without spectacle framed into "leadersh..t visit".
So no this is intentional lie for me
@a38k predecided by whom 😉
@a38f We run through a HR script when we dismiss employees. The decisions are always pre decided. The dismissals are made to look like redundancies but we know that nine times out of ten, there is no genuine reason to dismiss someone, apart from financial targets, to satisfy bonuses. There is a settlement agreement in place where employees leave, meaning they have signed away their rights for legal action down the line.
Managers previous to the Keyloop invasion of 2021 were genuine and emotionally tied to their employees. Nowadays there is no personal interactions apart from a teams meeting, where the person at the other end of the screen might as well be an AI bot. Which to be fair, would be better than most of the current KLT. The bot WOULD actually be more genuine!
We'll let the ICO be the judge of that after a few complaints have gone in.
It's OK to say it is covered because details are on a web page on a cr-ppy website but it sounds like someone doesn't want to do some (extra) work or Keyloop to get any exposure to the authorities. What would an investigation actually reveal? Just the tip of the iceberg maybe?
Cover up after cover up. It's like the secret cult of Keyloop, people not too dis -similar to the British Broadcasting Company and we all know what goes on there. Now then, Now then.
@a30b
Blindsided by your manager and HR?
Let me tell you from bitter experience: your line manager was likely blindsided too.
Line managers are intentionally left out of these decisions for one very simple reason—they are too close to the team to be objective. They would fight tooth and nail to keep their people.Most managers genuinely care about their teams.
What you don't see is how fiercely they defend and protect their people behind closed doors. Do you really think they want to lose the best talent on their teams? Don’t let your own pain blind you to that reality.
(Unless, of course, you were genuinely pants at your job or a total pain in the butt!)
Your line manager is a human being with real feelings.
They actually know you, which means they don’t just see you as a nameless cell on a corporate spreadsheet. I have seen countless managers break down and cry after these tough meetings.
Save your anger for where it actually belongs: far higher up the chain, where those bad decisions are made.
This Post is a Statement of Fact not Opinion as I dont agree with it but legally there is a lot of noise being made that is wrong and based on incorrect assumptions.
From the Keyloop Website:
Totally covered. As long as Keyloop implements formal contractual safeguards (like SCCs or IDTAs) and conducts a mandatory Transfer Risk Assessment (TRA), they are covered.Some customers and countries already have an agreement in place.
7 CROSS-BORDER TRANSFERS
7.1 Subject to compliance with clause 7.2, Keyloop (and its Sub-Processors) may Transfer Customer Personal Data to recipients based inside or outside of the Territory, including inside or outside of the European Economic Area (EEA), United Kingdom (UK), Switzerland or any territory deemed to be adequate by the European Commission, the UK or Swiss Governments (as the case may be).
7.2 Keyloop shall carry out the Transfer in accordance with Data Protection Legislation. Such safeguards may include reliance on an adequacy decision made by a Data Protection Authority or under a contract that includes model clauses obliging the Sub-Processor in the relevant territory to implement the provisions, measures, controls and requirements set out in the relevant Data Protection Legislation and/or the completion of a data transfer assessment as required by Data Protection Legislation.
Also, the data is not stored in India but on servers local to the customer (the UK or EU) and a customer can request in-country hosting.Yes, someone from India can still view and potentially amend data even if data residency geofencing is in place, unless additional access controls are explicitly configured. Data residency only controls where data is stored at rest, not who can look at it over the internet. Here is how companies handle and restrict this crossover:
Remote Access / Storage Geofencing ensures the database servers physically remain in your chosen region (e.g., the UK or EU).
The Pipeline: However, when a support technician in India opens a ticket, their computer acts as a window looking into that regional server. They can view, edit, or troubleshoot the data in real time over a secure network (like a VPN), but the data itself never downloads or migrates to India permanently.
With reference to UK HR data in the UK the same processes apply
It is entirely legal for your HR data to be processed or accessed in India, provided your employer strictly adheres to the legal frameworks set out by the UK GDPR and the Data Use and Access Act. The fact that you live in the UK means your personal data is fully protected by UK law, no matter where your employer chooses to outsource its HR, payroll, or IT systems. Because India does not hold an automatic "adequacy decision" (meaning the UK has not pre-approved its standalone data laws as matching the UK's), your employer must put specific legal safeguards in place to make the transfer legal.For your company to legally route your HR data to India, they must meet the following strict conditions:
- Mandatory Legal Safeguards: Your company cannot simply email or open up a database to an entity in India without a legal instrument.
They must use one of two mechanisms:
International Data Transfer Agreement (IDTA): If outsourcing to a separate Indian company (like an external payroll provider or tech support vendor), they must sign a legally binding contract approved by the UK's Information Commissioner's Office (ICO). This forces the Indian entity to treat your data with the exact same level of security required in the UK.Binding Corporate Rules (BCRs): If your employer is a multinational company with offices in both the UK and India, they must have globally binding, regulatory-approved internal corporate rules governing how employee data flows between offices. - A Transfer Risk Assessment (TRA): Before sending any HR details, your employer must complete a formal risk assessment. They must ensure that local surveillance laws or data management practices in India will not undermine your rights or expose sensitive details (like your health history, financial records, or performance reviews) to undue risks.
@a36g It has been brought to your attention that sensitive financial information is being entirely processed in India instead of the UK/Canada where it was before. This is putting the data at unnecessary risk and should be investigated. Disclosure on what is happening to sensitive consumer data at dealerships across the UK for one thing, dealerships should know how Keyloop is processing that data and who has eyes on it.
It is happening in Customer Enablement. The positions processing this sensitive data now are Data Verification Specialists and Data Process Analysts. The area directly responsible is Lead Encoding, Lead Verification (this is where the financial applications are processed and the thousands that have been processed are being reviewed to ensure automation is working correctly).
@a36d what did you include as part of your complaint? Some help with wording perhaps. Apologies but this is new to me
And keep in mind, this is occurring across the Nordic countries too; Italy, Germany, and don't forget about Ireland, who are extremely sensitive about what happens to their data.
@a35t For the UK, report it to the Information Commissioner's Office (ICO)
Link: https://ico.org.uk/make-a-complaint/protection-for-whistleblowers-guidance/
E-mail: wb@ico.org.uk
Financial Conduct Authority, even relating to car financing and improper disclosure:
https://www.fca.org.uk/consumers/car-finance-complaints
https://www.fca.org.uk/firms/whistleblowing
For Canada, contact the Office of the Privacy Commissioner:
https://www.priv.gc.ca/en/
Me too. More than happy to log a complaint. I 100% hate Keyloop with a passion and look forward to their demise.
@a35h can you explain how this is done, im sure there are many who will be happy to take part in the process especially if it brings the corupt klt down
@a34x Complaints have been filed. Feel free to do the same. Anyone in the company can verify that leads, lead encoding, lead processing, data verification are being handled entirely by India. There are contracts Keyloop has with Canadian dealerships that states sensitive info is NOT to leave Canada. Current and previous employer addresses, years at current residence, co-signer information, SIN numbers, dates of birth - all of it is being sent directly overseas.
Nothing will be done until the proper authorities are notified.
But here is a surreal case, because they want to transfer everything to India but in the meantime they have been filled with debts, while the other companies have made money even with dissatisfied customers
We all know its a sc--w up, the continued incompetance is plain to see, major incidents happening on a weekly basis, perhaps its the ghosts in the machine....well done Fp you picked a good one and cocked it up. Hope you take note and dont let the fools at the top of keyloop ant where else in your business
I don’t work at Keyloop, but I have close contacts there and, honestly, what’s happening is shocking.
Offshoring is not the answer. Trust me, I speak from experience: it’s quick, it’s dirty, and it ultimately leads to disaster.
Happy Customers = Recurring Revenue
Unhappy and Frustrated Customers = Churn
I’m just going to leave this here. These are only a few examples, you can Google many more.
1
Powergen closed its Indian call centres and returned its customer-service operations to Britain after acknowledging that offshoring had negatively affected customer satisfaction. Its managing director said the company would not make savings “at the risk or expense of customer satisfaction.” It subsequently planned to recruit and train 980 UK employees.
2
Santander returned all its Indian call-centre operations to the UK, creating 500 jobs after customers reported that offshore support caused frustration and dissatisfaction.
3
Dell moved technical support for some business customers from Bangalore back to the United States following customer complaints. A Dell executive admitted that the company had sometimes moved “too far, too fast.”
4
BT and EE brought customer-service calls back to the UK and Ireland. BT’s 2020 annual report confirmed that it completed the onshoring programme a year ahead of schedule as part of its effort to deliver a better customer experience.
5
In December 2025, VodafoneThree announced that it was bringing 400 customer-contact roles previously based in India back to Belfast and Sheffield, stating that it believed in having customer-care teams based where its customers are.
6
Sainsbury’s ended a major outsourced IT arrangement early and brought the capability back in-house because it wanted to rebuild its internal expertise. Despite the substantial transition costs, it expected the change to pay for itself within two years.
I was told my employment contract had been lost when I asked for a copy.
Makes you wonder what other data has and is being mishandled.
Employees, including ex employees, names and addresses are still on documents held on company servers. Which is accessible by anyone on the company network.
I even found a payroll document with everyone's salary details on.
You are normally blindsided by your manager and HR. Invited to a surprise meeting with your manager via email 15 minutes before the meeting is due. Then when you join the meeting, HR is also on the meeting.
No time to think or prepare for any "catch up" meeting with your manager. Why would you not jump on a meeting entitled "catch up"? We trust them don't we? (Bo11ox do we).
During the meeting you are told you have been selected for redundancy/ dismissal and told to go away and read the documentation and "go offline" until the next meeting or termination date.
You are told there is no need to log into any systems or appear available for any Teams conversations. You become invisible at that point, unable to talk to anyone.
The clock is ticking, you only have a few days to get solicitor advice and sign the "settlement" document, or that is what you are told. You actually have longer under employment law.
It all happens so quick, that unless you have all the information to hand it's too late to get original contracts, etc.
@a302 why did they not do it before meeting with hr???
Request a Subject Access Request (SAR) if you are concerned about how your data is being (mis)handled. If there is nothing to hide, Keyloop will oblige and provide your requested information. If they don't, you know there is an issue and they are trying to hide something:
A Subject Access Request (SAR) in the UK is a legal right under the UK GDPR allowing you to ask any organisation for copies of the personal data they hold about you, and they must normally respond within one month.
What a SAR Allows You to Request:
Copies of your personal data.
Information about how your data is used, stored, shared, and processed. Your chance to correct any errors with your data held by the business. E.G. old company pension information, expression of wish information, employment contracts, etc.
How to Make a SAR
You can submit a SAR verbally or in writing, including via email or social media. It is best practice to create a paper trail and request your SAR via email.
Recommended Information to Include in your request according to ICO guidance:
A clear header stating your request: “Subject Access Request”.
Your full name and any previous names.
Contact details (email, address, phone number).
Identifiers (payroll number, employee number, email address).
Specific details of the information you want:
Dates or context to help locate the data.
Preferred format for receiving the data. Paper report or digital copy.
Response Time
Organisations must respond within one month of your request. They need to acknowledge your request initially (this is important). They may extend the deadline by up to two additional months if the request is complex or numerous, but they must let you know if an extension is required.
How to Submit a SAR using an Online generator:
The ICO provides a SAR email generator that prepares a request for you:
https://ico.org.uk/for-the-public/make-a-subject-access-request
You provide the organisation’s name and email.
You upload ID documents.
The tool generates an email you can send.
In Summary:
A UK Subject Access Request is a key GDPR right that allows individuals to obtain their personal data from organisations, usually free of charge and within one month. Employees may not have access to their original documents, e.g. contract of employment and this is a very good way of getting this information prior to any redundancy consultation or dismissal. Which let's be fair, it is going to happen to us all before long.
Many ex employees have said that they wish they knew about this and did this before they had their HR meetings and were dismissed.
Didn't the data officer recently leave Keyloop?
They may not have been pushed, they may have left for an easier role (human mine detector)
@a2v0 100%. In addition to all that you mentioned, the wages being paid in offshore hubs are far less than United Kingdom and North American counterparts. This puts the data at an even greater risk of being stolen and sold to compensate for said low wages.
The penalties for stealing and selling data on the black market also differs per region. It's far easier to get away with it in countries with questionable regulatory bodies.
It goes much deeper than simply "If I get the car I want, I don't care where my data goes!" That data ties into GLOBAL trade policies, etc. You don't think other entities in that country would love to get that data? Maybe even the government? Use your brain.
@a2s7 You may not care, and it very much seems that Keyloop don't care either. But, there are many, many, people out there who do! As a duty of care, and a responsibility as a company, to the customers who data is being shared to other countries it should be taken seriously! India, Spain, France, anywhere other than the UK NEEDS to be communicated to the end customer and robust processes put in place! I really hope that this is looked into further as this is SO SO bad!
@a2s7 F*cking he-l. Someone missed their GDPR online training course deadline. Are you a member of the SLT by any chance?
Nothing in particular to do with India. It's to do with the way data about customers (and employees) is and has been handled by Keyloop. GDPR and compliance (non) if not followed correctly, can lead to large fines handed out by regulating bodies. Not forgetting everyone's personal data falling into corrupt hands (Keyloop's for example).
If you trade in multiple countries across many demographics, there is a requirement to follow the differ rating laws in those territories.
Like a naughty child, it (Keyloop) will keep doing wrong, until it is reprimanded (or slapped).
@a2s7 Will your opinion still be the same if your data is released to 3rd parties or worse you get scammed ?
Why is everyone so terrified of India, when I am buying a car I literally could not care less what country my data is processed in as long as I get the car I want- just me?
@a2m1 Any decent company would have these channels in place.
Keyloop are corrupt and do not care about anything other than protecting the business.
There is no point reporting internally, go direct to the regulators who protect consumers and personal data.
We are all on a one our way ticket out of Keyloop anyway. Might as well cause some disruption on the way out.
@a2fh each large company should have internal whistblowing channel
@a2fh Nobody in Keyloop would be interested. It would mean extra work for them. You would instantly be on a one way ticket out of there.
If you have first hand knowledge or evidence of this data transfer happening without the proper disclosures, you can report this to national data protection authorities and government bodies.
You can report a concern or submit a whistleblowing report via the ICO Online Complaint Portal. They investigate whether UK GDPR rules on transferring sensitive data (like financial history) outside the UK/EEA have been breached.
There is also the Financial Conduct Authority (FCA). Since the data involves credit applications, this falls under financial services regulations. The FCA has a dedicated Whistleblowing Team where you can report firms failing to protect consumer financial data or hide risks.
Ignoring misconduct allows businesses to continue their bad practices. Be part of the solution, not the problem.
@a2ff K😘
@a2fg Who to contact though that would listen and take it seriously?
I would be whistleblowing and reporting Keyloop to the Information Commissioner's Office if I had this information. Hopefully our customers who read this board will take note and log a complaint.