Privacy Policy

Last updated: 12 January 2026

At Kettleworth, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and protect information when you use our website and services.

Information We Collect

Information You Provide Directly

We collect information that you voluntarily provide when you:

Fill out contact forms or enquiry forms on our website
Subscribe to our newsletter or updates
Communicate with us via email or phone
Engage our consulting services

This information typically includes your name, email address, phone number, company name, and any other details you choose to share in your messages or communications.

Information Collected Automatically

When you visit our website, we may automatically collect certain technical information, including:

IP address and general location data
Browser type and version
Operating system
Pages visited and time spent on pages
Referring website addresses
Device identifiers and screen resolution

This information is collected through cookies and similar technologies, as detailed in our Cookie Policy.

How We Use Your Information

We use the information we collect for the following purposes:

Service Provision

Responding to your enquiries and providing information about our services
Delivering consulting services you've engaged us for
Communicating with you about projects and arrangements
Processing payments and maintaining service records

Website Improvement

Analyzing how visitors use our website to improve functionality and content
Understanding which services interest visitors most
Identifying technical issues and optimizing performance

Marketing Communications

Sending newsletters and updates about our services (with your consent)
Sharing relevant business insights and resources
Informing you about changes to our services or policies

You can unsubscribe from marketing communications at any time using the link in our emails or by contacting us directly.

Legal Basis for Processing

Under the UK General Data Protection Regulation (UK GDPR), we process your personal data based on:

Consent: When you've given clear permission for us to process your data for specific purposes
Contractual Necessity: When processing is necessary to fulfill our service agreement with you
Legitimate Interests: When we have a legitimate business interest that doesn't override your privacy rights
Legal Obligation: When we must process your data to comply with legal requirements

How We Share Your Information

We do not sell your personal information to third parties. We may share your information only in these limited circumstances:

Service Providers

We work with trusted third-party service providers who help us operate our website and deliver our services, such as:

Web hosting and email service providers
Analytics platforms (such as Google Analytics)
Payment processors
Professional advisors (lawyers, accountants)

These providers are contractually bound to protect your information and use it only for the purposes we specify.

Legal Requirements

We may disclose your information if required to do so by law or in response to valid legal requests from authorities.

Data Security and Protection

We take reasonable measures to protect your personal information from unauthorized access, loss, misuse, or alteration:

Secure Socket Layer (SSL) encryption for data transmission
Regular security audits and updates
Access controls limiting who can view your information
Secure storage of physical and electronic records
Staff training on data protection requirements

While we implement appropriate security measures, no method of transmission over the Internet is completely secure. We cannot guarantee absolute security but work diligently to protect your information.

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy or as required by law:

Contact enquiries: Retained for up to 2 years after last contact unless you become a client
Client records: Retained for 7 years after service completion to comply with financial regulations
Marketing communications: Retained until you unsubscribe or request deletion
Website analytics: Aggregated data retained indefinitely; individual identifiers deleted after 26 months

After the retention period expires, we securely delete or anonymize your personal information.

Your Rights and Choices

Under UK data protection law, you have several rights regarding your personal information:

Right to Access: Request a copy of the personal information we hold about you
Right to Rectification: Request correction of inaccurate or incomplete information
Right to Erasure: Request deletion of your personal data in certain circumstances
Right to Restriction: Request that we limit how we use your information
Right to Data Portability: Receive your data in a structured, commonly used format
Right to Object: Object to processing based on legitimate interests or for direct marketing
Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us using the details on our contact page. We will respond to your request within one month.

Your Rights and Opt-Out Instructions

You are not required to provide any personal information when using this website. If you prefer not to share your data, you may:

Avoid filling out contact forms, account registrations, or any data-submitting features
Disable cookies through your browser settings (see our Cookie Policy for more details)
Contact us directly to request the deletion of any previously shared personal data

We respect your privacy choices. If you would like us to delete your data, please reach out to us via our contact page. We will process your request promptly.

Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party websites you visit.

Children's Privacy

Our website and services are not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately so we can delete it.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make significant changes, we will update the "Last updated" date at the top of this page and may notify you through our website or by email.

We encourage you to review this policy periodically to stay informed about how we protect your information.

Contact Us About Privacy

If you have questions about this Privacy Policy or how we handle your personal information, please visit our contact page.

If you're not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection matters.