Privacy policy

This policy explains how Kingsmere Agency Ltd (“Kingsmere”, “we”, “us”) collects and uses personal data when you visit kingsmereagency.co.uk, contact us or use our services. We take your privacy seriously and follow the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who we are

Kingsmere Agency Ltd is the data controller for the personal data described in this policy. We are registered in England & Wales, company number [company number], registered office [registered address]. ICO registration number: [ICO registration number].

Questions about this policy or your data: email hello@kingsmereagency.com.

What we collect

• Enquiry and audit forms: your name, email, phone number (optional), business name, website, town or city, type of business, your message, how you heard about us, and whether you’d like marketing emails.
• Booking a call: the details you give our booking provider (name, email, chosen time and any notes).
• Emails and calls: anything you choose to tell us when you get in touch.
• Technical data: your IP address and basic device information, used by our hosting and security provider (Cloudflare) to keep the site secure and stop spam. Our website analytics are cookieless and only show aggregated statistics — they don’t identify you.

How we use it, and our lawful basis

Purpose	Lawful basis
Replying to your enquiry, preparing your free audit and arranging calls	Legitimate interests (responding to people who contact us) and taking steps before a contract
Delivering services to clients	Performance of a contract
Sending marketing emails	Consent — only if you tick the box. You can unsubscribe at any time
Keeping our website and forms secure, and preventing spam	Legitimate interests
Accounting, tax and legal requirements	Legal obligation

Data we process for our clients

When we run AI agents, automations or messaging for a client business, we process their customers’ data on the client’s behalf, as a data processor, under a written data processing agreement. That client is the controller of their customers’ data. We only message people who have contacted the client or are their customers.

Who we share it with

We never sell your data. We share it only with trusted providers who help us run our business, under contract:

• Cloudflare — website hosting, security and spam protection (Turnstile)
• Resend — email delivery
• [Booking provider, e.g. Cal.com or Calendly] — call booking
• [CRM / automation platform, if used] — managing enquiries

Some providers may process data outside the UK. Where they do, we rely on approved safeguards such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or the UK–US data bridge.

How long we keep it

• Enquiries that don’t become clients: up to 24 months, then deleted.
• Client records: for the length of our contract plus 6 years (for tax and legal reasons).
• Marketing consent: until you unsubscribe.

Your rights

You have the right to access, correct or delete your personal data, to restrict or object to how we use it, to data portability, and to withdraw consent at any time. To use any of these rights, email hello@kingsmereagency.com. We’ll respond within one month.

If you’re unhappy with how we’ve handled your data, you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113. We’d appreciate the chance to put things right first.

Security

We use reputable providers, encrypted connections (HTTPS), and access controls to protect your data. No system is perfectly secure, but we take reasonable steps to keep your information safe.

Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.