Privacy Policy

KJ Consultancy UK

1. Who we are

KJ Consultancy (“we”, “us”, “our”) provides confidential operational support and consultancy services.

Data controller: KJ Consultancy Contact

email: kjconsultancyuk@gmail.com
Telephone: 07496680485

Location: Somserset, United Kingdom

We are committed to handling personal information with discretion, care, and professionalism.

2. What this policy covers

This policy explains how we collect, use, store, and share personal data when you:

Visit our website
Enquire via our contact form, email, phone, or social media
Book a call or engage our services
Receive our updates (if you opt in)

3. The personal data we may collect

Depending on how you interact with us, we may collect:

Identity and contact details: name, business name, email address, phone number, postal address
Enquiry information: the content of your message, project details you choose to share
Booking and service information: appointment details, scope notes, proposals, invoices, payment status
Website usage data: IP address, device/browser information, pages viewed, referral source (via cookies/analytics where enabled)
Communications: emails, call notes, and messages exchanged with us

We ask that you do not share special category data (e.g., health information) unless it is strictly necessary. If you do share it, we will treat it with heightened care.

4. How we collect your data

We collect data when you:

Submit a form on our website
Email, call, or message us
Book a call via our booking tools
Work with us under a service agreement
Use our website (through cookies or similar technologies)

5. Why we use your data (purposes)

We use personal data to:

Respond to enquiries and requests
Assess whether we are the right fit for your needs
Arrange and deliver calls, sessions, and consultancy services
Prepare proposals, statements of work, and service documentation
Manage administration, invoicing, and payments
Maintain professional records and improve service quality
Protect our business, clients, and the public (including fraud prevention and security)
Comply with legal and regulatory obligations

6. Our lawful bases for processing (UK GDPR)

We process personal data under one or more of the following lawful bases:

Legitimate interests: to respond to enquiries, operate our business, maintain security, and improve services
Contract: to deliver services you request or have agreed to
Legal obligation: to comply with UK law (e.g., tax and accounting requirements)
Consent: where you have opted in to receive marketing communications or where cookies require consent

You can withdraw consent at any time where consent is the lawful basis.

7. Confidentiality and professional discretion

Confidentiality is central to how we work.

We treat enquiries as confidential by default.
We share information only where necessary to deliver services, comply with law, or protect rights and safety.
Where appropriate, we can provide a Non-Disclosure Agreement (NDA).

Please note: confidentiality does not prevent us from complying with legal obligations or responding to lawful requests.

8. Who we share your data with

We may share personal data with trusted third parties only where necessary, including:

Website hosting and technology providers (e.g., website platform, forms, booking tools)
Email and communications providers
Payment processors (if applicable)
Professional advisers (e.g., accountants, legal advisers)
HMRC or other authorities where legally required

We do not sell your personal data.

9. International enquiries and transfers

We work with clients and contacts internationally.

If personal data is transferred outside the UK, we will take appropriate safeguards to protect it, such as:

Using providers with adequate protections
Relying on recognised transfer mechanisms (e.g., UK International Data Transfer Agreement or addendum, where applicable)

10. Data retention

We keep personal data only as long as necessary for the purposes set out in this policy, including:

Managing enquiries and follow-ups
Delivering services and maintaining professional records
Meeting legal, tax, and accounting obligations

Retention periods vary depending on the type of data and our obligations. We review data periodically and securely delete or anonymise it when no longer needed.

11. Security

We take reasonable technical and organisational measures to protect personal data, including:

Access controls and limited access to information
Secure storage and password protection
Careful handling of confidential client information

No system is completely secure. If you believe your data has been compromised, please contact us promptly.

12. Your rights (UK GDPR)

You have rights in relation to your personal data, including:

The right to be informed
The right of access
The right to rectification
The right to erasure (in certain circumstances)
The right to restrict processing
The right to data portability (in certain circumstances)
The right to object
Rights related to automated decision-making and profiling

To exercise your rights, contact us using the details above.

13. Marketing preferences

We will only send marketing communications where you have opted in or where permitted by law.

You can opt out at any time by using the unsubscribe link (where provided) or by emailing us.

14. Cookies

Our website may use cookies and similar technologies to help it function and to understand how it is used.

Where required, we will ask for your consent before placing non-essential cookies.

15. Complaints

If you have concerns about how we handle your personal data, please contact us first and we will do our best to resolve it.

You also have the right to complain to the UK Information Commissioner’s Office (ICO):

Website: https://ico.org.uk

16. Changes to this policy

We may update this policy from time to time. The latest version will be published on our website.

Last updated: 2 August 2026