Privacy Policy

‍ ‍

Effective date: July 2026

1. Introduction

This Privacy Notice explains how Kit Worrall trading as Consultancy Kit ("Consultancy Kit", "we", "us" or "our") collects, uses, stores and protects your personal data when you visit our website, contact us or use our services.

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Kit Worrall trading as Consultancy Kit is the data controller responsible for your personal data.

Contact Details

Data Controller: Kit Worrall trading as Consultancy Kit

Email: hello@kitconsultancy.com

Our website is intended for individuals aged 13 or over.

It is important that the personal information we hold about you is accurate and up to date. Please let us know if your personal information changes by contacting us using the details above.

2. The Personal Data We Collect

Personal data means any information that identifies or could identify an individual. It does not include anonymous information.

We only collect personal data that you choose to provide or that is collected automatically through your use of our website.

Depending on how you interact with us, we may collect:

A- Contact and Communication Data

This includes your name, email address, telephone number, company details and any information you provide when contacting us.

Purpose: To respond to enquiries, communicate with you, provide support and maintain business records.

Lawful basis: Legitimate interests.

B- Customer Data

If you become a client, we may collect information required to provide our services, including billing information, invoices, payment records and correspondence.

Purpose: To provide contracted services and administer our business relationship.

Lawful basis: Performance of a contract or taking steps before entering into a contract

C- Technical and Website Usage Data

When you visit our website, Squarespace automatically collects limited technical information such as:

IP address
browser type ‍
device type ‍
operating system ‍
pages visited
referring website
website usage statistics

We use Squarespace's built-in website analytics to understand how visitors use our website, improve performance and maintain website security.

Lawful basis: Legitimate interests.

D- Marketing Preferences

If you choose to receive marketing communications from us in the future, we will record your communication preferences.

We will only send marketing communications where permitted under applicable data protection and electronic marketing laws.

Lawful basis: Consent where required, or legitimate interests where permitted by law.

E- Special Category Data

We do not intentionally collect or process special category personal data (such as information relating to health, ethnicity, religious beliefs, political opinions, trade union membership or sexual orientation) or information relating to criminal convictions.

If you voluntarily provide this information, we will only process it where permitted by law.

We do not use your personal data for automated decision-making or profiling.

3. How We Collect Your Personal Data

We collect personal data in the following ways.

Information you provide directly

You may provide personal information when you:

complete our website contact form
contact us by email, telephone or post
request information about our services
purchase our services
provide feedback
otherwise communicate with us

Information collected automatically

When you visit our website, Squarespace automatically collects limited technical and usage information to help operate, secure and improve the website.

Information from third parties

Where appropriate, we may receive information from:

payment providers such as PayPal
publicly available sources, including Companies House
professional advisers acting on your behalf

4. How We Use Your Personal Data

We will only process your personal data where we have a lawful basis under UK data protection law.

These lawful bases include:

performing a contract with you
taking steps before entering into a contract
complying with a legal obligation
pursuing our legitimate business interests, provided these do not override your rights and freedoms
your consent, where required

We use personal data to:

respond to enquiries
provide consultancy services
manage our client relationships
issue quotations and invoices
receive and administer payments
communicate with clients
maintain accurate business records
administer and improve our website
monitor website security
comply with legal, regulatory and tax obligations
establish, exercise or defend legal claims where necessary

Where we rely on your consent, you may withdraw that consent at any time.

5. Marketing Communications

We do not currently operate a marketing newsletter.

If this changes in the future, we will only send electronic marketing communications where permitted under the Privacy and Electronic Communications Regulations (PECR).

You may opt out of receiving marketing communications at any time by contacting us or using the unsubscribe link included in marketing emails.

6. Sharing Your Personal Data

We only share personal data where necessary to operate our business or where required by law.

This may include sharing information with:

Squarespace (website hosting)
Google Workspace (email services)
Microsoft 365 and OneDrive (document storage and business administration)
PayPal (where you choose to pay using PayPal)
our accountant or professional advisers
HM Revenue & Customs and other regulators where legally required
trusted service providers acting on our behalf

Where third-party providers process personal data for us, we require them to protect it appropriately and only process it in accordance with our instructions and applicable law.

7. International Transfers

Some of the service providers we use may store or process personal data outside the United Kingdom.

Where personal data is transferred internationally, we will ensure that appropriate safeguards are in place in accordance with UK GDPR, such as the UK International Data Transfer Agreement, adequacy regulations or other legally recognised safeguards.

8. Data Security

We take appropriate technical and organisational measures to protect your personal data from accidental loss, unauthorised access, alteration, disclosure or destruction.

These measures include secure password protection, controlled access to information, secure cloud storage and appropriate security practices for our devices and systems.

9. How Long We Keep Your Data

We retain personal data only for as long as necessary for the purposes for which it was collected.

Typically, we retain:

enquiry information for up to 12 months where no business relationship is established
client records, contracts and invoices for 6 years after the end of the relevant tax year to comply with legal and accounting obligations
marketing preferences until you withdraw your consent or object to marketing
website analytics for the retention period applied by Squarespace

Where we no longer require personal data, it will be securely deleted or anonymised.

10. Your Rights

Under UK data protection law, you have the right to:

access your personal data
request correction of inaccurate or incomplete information
request erasure of your personal data in certain circumstances
request restriction of processing
object to processing based on legitimate interests or direct marketing
request transfer of your personal data where applicable
withdraw consent at any time where processing relies on consent
lodge a complaint with the Information Commissioner's Office (ICO)

We aim to respond to requests without undue delay and within one month unless the law allows us additional time.

11. Complaints

If you have any concerns about how we process your personal data, please contact us first so we have the opportunity to resolve the issue.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your personal data has been handled unlawfully.

12. Cookies

Our website uses cookies and similar technologies to operate effectively and help us understand how visitors use our website.

Where required by law, we will request your consent before placing non-essential cookies on your device.

Further information is available in our Cookie Policy.

13. Changes to This Privacy Notice

We may update this Privacy Notice from time to time to reflect changes in our business, services or legal obligations.

The latest version will always be available on our website, and the effective date at the top of this notice will indicate when it was last updated.

14. Accessibility

Consultancy Kit is committed to making its website accessible and easy to use for everyone. If you experience any difficulty accessing information on this website, please get in touch at hello@kitconsultancy.com and I will do my best to provide the information you need in an alternative format.

‍ ‍

Cookie Policy

Last updated: July 2026

1. Who we are

This Cookie Policy explains how Consultancy Kit uses cookies and similar technologies when you visit our website.

Consultancy Kit is the trading name of Kit Worrall, a sole trader based in England.

If you have any questions about this Cookie Policy, please contact:

Consultancy Kit
Kit Worrall trading as Consultancy Kit
Email: hello@kitconsultancy.com

2. What are cookies?

Cookies are small text files placed on your device when you visit a website. They allow websites to function correctly, remember preferences and understand how visitors interact with the site.

Cookies can be used for different purposes, including:

Strictly necessary cookies – required for the website to operate correctly.
Functional cookies – help improve website functionality and remember preferences.
Analytics cookies – help us understand how visitors use our website.
Marketing cookies – used for advertising and tracking purposes.

3. How we use cookies

We use cookies to:

ensure our website functions properly;
maintain website security;
understand how visitors use our website; and
improve the website experience.

Our website is hosted on Squarespace. We currently use Squarespace Analytics to understand general website activity, such as:

how visitors find our website;
which pages are viewed most frequently; and
how visitors interact with our content.

We do not currently use:

Google Analytics;
Google Ads tracking;
Meta Pixel;
advertising or remarketing cookies;
social media tracking cookies; or
email marketing cookies.

4. Cookies used on our website

A. Strictly necessary cookies

These cookies are required for our website to function correctly. They support essential website features, security and basic functionality.

Because these cookies are necessary for the operation of the website, they do not require consent.

B. Analytics cookies

These cookies help us understand how visitors use our website so we can improve the user experience.

Analytics cookies are only used where consent has been provided through our cookie settings.

C. Functional cookies

We do not currently use any additional functional cookies.

D. Marketing cookies

We do not currently use any marketing or advertising cookies.

If we introduce marketing tools or tracking technologies in the future, this policy will be updated and visitors will be asked for consent where required.

5. Third-party cookies and services

Our website is provided through Squarespace.

Squarespace may process technical information and cookie data to provide:

website hosting;
security;
performance monitoring; and
analytics functionality.

You can view Squarespace’s privacy information here:

Squarespace Privacy Policy:
https://www.squarespace.com/privacy

We do not currently share cookie data with any other third parties, including Google or Meta.

6. International data transfers

Some third-party service providers we use may process information outside the UK or European Economic Area (EEA).

Where personal data is transferred internationally, appropriate safeguards are used in accordance with UK GDPR requirements, such as:

adequacy decisions;
approved contractual protections; or
other lawful transfer mechanisms.

7. Managing your cookie preferences

When you first visit our website, you can choose whether to accept non-essential cookies through the cookie banner.

You can change or withdraw your consent at any time by:

revisiting the cookie settings option available on our website; or
deleting cookies through your browser settings.

Most internet browsers allow you to control, block or delete cookies.

Please note that disabling essential cookies may affect how some websites function.

8. Your rights under UK GDPR

Depending on the circumstances, you may have rights relating to your personal data, including:

the right to access your personal data;
the right to correct inaccurate information;
the right to request deletion of your personal data;
the right to restrict processing;
the right to object to certain processing; and
the right to withdraw consent where processing is based on consent.

For more information about how we process personal data, please see our Privacy Policy.

9. Changes to this Cookie Policy

We may update this Cookie Policy from time to time to reflect changes to our website, services or legal requirements.

Any updates will be published on this page with the revised date shown at the top.

10. Contact us