top of page

Privacy Policy

1. About this Privacy Policy

 

This Privacy Policy explains how KC Advisory Partners Limited (“KC Advisory Partners”, “we”, “us” or “our”) collects, uses, stores and protects personal data when you interact with our business.

​

This includes when you:

​

  • visit our website;

  • contact us by email or through our website;

  • enquire about our services;

  • work with us as a client, supplier or professional contact;

  • interact with us through LinkedIn or other professional networking platforms;

  • subscribe to our newsletters or marketing communications; or

  • otherwise communicate or interact with KC Advisory Partners in connection with our business.

 

We are committed to protecting your personal data and processing it fairly, transparently and securely in accordance with applicable data protection legislation, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR).

​

2. Who We Are

 

For the purposes of applicable data protection legislation, KC Advisory Partners Ltd is the data controller responsible for the personal data described in this Privacy Policy.

​

KC Advisory Partners Limited
Company number: 17156645
Registered in: England and Wales
ICO registration number: ZC226392
Email: advisory@kayla-christal.com
Website: www.kc-advisory.co.uk

​

If you have any questions about this Privacy Policy or how we process your personal data, please contact us using the email address above.

​

3. Personal Data We Collect

 

The information we collect depends on how you interact with KC Advisory Partners.

 

Contact & Professional Information

​

This may include:

​

  • your name;

  • job title and role;

  • company or organisation;

  • email address;

  • telephone number;

  • business contact details;

  • LinkedIn or other professional profile information; and

  • other information you choose to provide to us.

 

Client & Project Information

​

If you engage us for our services, we may process information relating to:

​

  • your organisation and role;

  • project requirements and objectives;

  • business priorities and challenges;

  • project briefs;

  • correspondence and communications;

  • information contained in documents, presentations or other materials provided to us;

  • meeting notes and actions;

  • proposals and quotations; and

  • contractual information.

 

Where a client provides us with personal data relating to other individuals as part of a project, the client is responsible for ensuring that it has an appropriate lawful basis for providing that information to us and, where required, that appropriate privacy information has been provided.

 

Financial Information

​

Where relevant, we may process:

​

  • billing and invoicing information;

  • payment records;

  • bank details where required to make or receive payments; and

  • accounting and tax information.

 

Communications

​

We may retain records of communications between you and KC Advisory Partners, including emails, messages, meeting notes and other business correspondence.

​

Website & Technical Information

​

When you visit our website, certain information may be collected automatically. This may include:

​

  • IP address;

  • browser and device information;

  • operating system;

  • pages visited;

  • referring website;

  • approximate location;

  • date and time of visits; and

  • information collected through cookies and similar technologies.

 

Our website is hosted and operated using Wix.

​

Information from Professional & Publicly Available Sources

​

As part of our professional networking and business development activities, we may obtain professional information from sources including:

​

  • LinkedIn;

  • company websites;

  • professional directories;

  • industry publications;

  • conferences and events;

  • referrals and introductions; and

  • other publicly available professional sources.

 

This may include your name, job title, organisation, professional interests and publicly available business contact information.

Publicly available information does not automatically constitute consent to receive marketing communications. Where we use personal data for direct marketing, we will comply with applicable data protection and electronic marketing requirements.

​

4. How We Use Your Personal Data

 

We may use personal data to:

​

  • respond to enquiries;

  • provide and manage our services;

  • understand client requirements;

  • prepare proposals and quotations;

  • communicate with clients, prospective clients and professional contacts;

  • manage projects and deliverables;

  • maintain professional relationships;

  • identify potential clients and business opportunities;

  • conduct professional networking and business development;

  • send newsletters, business updates and promotional communications where permitted;

  • manage invoices and payments;

  • maintain accounting, tax and business records;

  • improve our website, services and business operations;

  • maintain website and information security;

  • prevent fraud or misuse; and

  • establish, exercise or defend legal claims.

​

5. Lawful Bases for Processing

 

We will only process personal data where we have a lawful basis under applicable data protection legislation.

 

Depending on the circumstances, this may include:

 

Contract

Where processing is necessary to enter into or perform a contract with you, or to take steps at your request before entering into a contract.

 

Legal Obligation

Where processing is necessary for us to comply with a legal or regulatory obligation, including accounting and tax requirements.

 

Legitimate Interests

Where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms.

These interests may include operating and developing KC Advisory Partners, managing professional relationships, business development, networking, improving our services, maintaining business records and protecting our business. Where we rely on legitimate interests, we will consider whether the processing is necessary and appropriately balanced against your interests and rights.

 

Consent

Where appropriate or required, we may rely on your consent to process personal data. Where we rely on consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

​

6. Marketing Communications

 

KC Advisory Partners may send newsletters, business updates, insights, information about our services and other promotional communications by email.

​

Where required by law, we will obtain appropriate consent before sending direct marketing communications to individuals.

​

Where applicable, different rules may apply to marketing communications sent to corporate subscribers. We will comply with the requirements applicable to the type of recipient and communication.

​

Our marketing emails will provide a clear way to unsubscribe or otherwise object to future marketing communications.

​

You can opt out of marketing communications at any time by using the unsubscribe link provided in the relevant communication or by contacting us directly.

​

If you provide your details through our website to subscribe to our communications, we may retain your marketing preferences and consent records so that we can manage your subscription and demonstrate compliance with our obligations.

​

7. LinkedIn & Business Development 

 

We may use LinkedIn and other professional networking platforms as part of our business development activities.

​

This may involve identifying and researching relevant professional contacts, organisations and potential business opportunities using information that individuals have made publicly available.

​

Where we obtain professional information from LinkedIn or another publicly available source, we will use it in accordance with applicable data protection law.

​

We will not assume that publicly available contact information constitutes consent to receive marketing emails.

​

Where we use information obtained through professional networking for direct marketing, we will assess the applicable requirements before contacting individuals.

​

8. Who We Share Personal Data With

 

We may share personal data where necessary to operate our business, provide our services or comply with legal obligations.

​

Depending on the circumstances, this may include:

​

  • clients and authorised client representatives;

  • professional advisers, including accountants, lawyers and insurers;

  • banks and payment providers;

  • accounting and invoicing providers;

  • website hosting providers;

  • cloud storage providers;

  • email and communication providers;

  • video conferencing providers;

  • design and presentation software providers;

  • IT and cybersecurity providers;

  • analytics and website service providers;

  • subcontractors or professional collaborators supporting the delivery of our services; and

  • government, regulatory or law enforcement bodies where required by law.

 

We do not sell personal data

​​

9. Service Providers & Technology Platforms

 

KC Advisory Partners uses a range of third-party technology and service providers to operate the business, communicate with clients and prospective clients, deliver services, manage information and support business administration.

​

These may include:

​

  • Wix – website hosting, website functionality and marketing/email functionality;

  • Google Workspace – business email, document storage and productivity services;

  • Dropbox – cloud storage and document management;

  • Canva – design and presentation services;

  • OpenAI / ChatGPT – AI-assisted business and productivity services;

  • Zoom – video conferencing and online meetings; 

  • Microsoft Teams – video conferencing, meetings, messaging, collaboration and file sharing;

  • Miro – digital whiteboarding, workshops, collaboration and visual project development; and

  • other service providers that may be introduced as the business develops.

 

Depending on the service and how it is configured, these providers may process personal data on our behalf or process information in accordance with their own privacy terms.

​

Where a provider processes personal data on our behalf, we take reasonable steps to ensure that appropriate contractual, technical and organisational safeguards are in place.

​

10. International Transfers

 

Some of our service providers may process personal data outside the United Kingdom.

​

Where personal data is transferred outside the UK, we will ensure that the transfer is made in accordance with applicable data protection law and that an appropriate transfer mechanism or safeguard is in place where required.

​

This may include a UK adequacy regulation, appropriate contractual safeguards or another lawful transfer mechanism.

​

11. How We Protect Personal Data

 

We take reasonable and appropriate technical and organisational measures to protect personal data against:

​

  • unauthorised access;

  • accidental loss;

  • destruction;

  • misuse;

  • alteration; and

  • unauthorised disclosure.

 

These measures may include appropriate password protection, access controls, secure cloud services, device security, software updates, secure communication practices and appropriate backup procedures.

​

However, no electronic transmission or storage system can be guaranteed to be completely secure.

​

12. How Long We Retain Personal Data

 

We only retain personal data for as long as reasonably necessary for the purposes for which it was collected, including where necessary to meet legal, accounting, tax, contractual or reporting requirements.

​

Retention periods will depend on the nature of the information and the reason for which it is being retained.

​

Generally:

​

  • Client and project information is retained for as long as reasonably necessary to manage the client relationship and for an appropriate period afterwards where required for legitimate business, legal or contractual purposes.

  • Financial and accounting information is retained for the period required by applicable tax and accounting requirements.

  • Business correspondence is retained for as long as reasonably necessary to manage the relevant relationship or business matter.

  • Marketing information is retained while there is a valid basis for marketing communications and, where applicable, until you unsubscribe or object.

  • Marketing consent and opt-out records may be retained for as long as necessary to demonstrate compliance and ensure that we do not contact individuals who have opted out.

  • Website and analytics information is retained in accordance with relevant service-provider settings and applicable requirements.

 

When personal data is no longer required, we will securely delete it, anonymise it or otherwise dispose of it appropriately.

​

13. Your Data Protection Rights

 

Depending on the circumstances and applicable law, you may have the right to:

​

  • access the personal data we hold about you;

  • correct inaccurate or incomplete personal data;

  • request deletion of your personal data in certain circumstances;

  • restrict how we process your personal data in certain circumstances;

  • object to certain processing, including processing based on legitimate interests;

  • object to direct marketing at any time;

  • request data portability in certain circumstances; and

  • withdraw consent where we rely on consent as our lawful basis.

 

Not every right applies in every circumstance. The availability of a particular right depends on the lawful basis and circumstances of the processing.

​

14. How to Exercise Your Rights

 

If you wish to exercise any of your data protection rights, please contact us:

​

Email: advisory@kayla-christal.com

​

We may need to request additional information to verify your identity before responding to your request.

We will respond to valid requests within the timeframe required by applicable data protection law.

​

You will generally not have to pay a fee to exercise your rights, although applicable law permits a reasonable fee to be charged, or a request to be refused, in certain limited circumstances.

​​

15. Cookies

 

Our website uses cookies and similar technologies.

​

Some cookies are necessary for the website to function. Other cookies may be used for purposes such as:

​

  • remembering preferences;

  • understanding website usage;

  • measuring website performance;

  • improving website content and functionality; and

  • analysing website traffic.

 

The specific cookies used by our website may change as our website and services develop.

Where consent is required for non-essential cookies, we will provide an appropriate mechanism for obtaining and managing consent.

​

Further information about the cookies used on our website may be available through our cookie settings or a separate Cookie Policy.

​

16. Children’s Data

 

Our services are intended for businesses and professionals and are not directed towards children.

We do not knowingly collect personal data from children through our website or business activities.

If we become aware that we have inadvertently collected personal data from a child without an appropriate legal basis, we will take reasonable steps to delete it.

​

17. Complaints

​

If you have concerns about how KC Advisory Partners has handled your personal data, please contact us first so that we can try to resolve your concern.

​

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's independent data protection regulator.

​

Information Commissioner's Office
Website: https://ico.org.uk/
Telephone: 0303 123 1113

​

18. Changes to this Privacy Policy

 

We may update this Privacy Policy from time to time to reflect:

​

  • changes to our business;

  • changes to the services and technology providers we use;

  • changes to how we process personal data;

  • changes to applicable legislation; or

  • regulatory guidance and requirements.

 

The latest version will be published on our website and will include the date on which it was last updated.

​

19. Contact Us

 

If you have any questions about this Privacy Policy or how KC Advisory Partners Ltd processes personal data, please contact us:

 

KC Advisory Partners Ltd

Company Number: 17156645

Registered in: England and Wales

ICO Registration Number: ZC226392

Email: advisory@kayla-christal.com

 

 

Last updated: 26 August 2026

bottom of page