Privacy Policy

1. Who we are

The data controller is KPMC Limited, a company registered in England and Wales. Our registered office is:

If you have questions about this policy or how we handle your data, please contact us at enquiries@kpmc.com.

2. What personal data we collect

We collect personal data only when you voluntarily submit it through the contact forms on this website. The information collected includes:

• Name — to address you in correspondence
• Company or organisation — to understand the context of your enquiry
• Email address — to reply to your enquiry
• Message — the content of your enquiry

We do not collect sensitive personal data and we do not use cookies for tracking purposes beyond what is strictly necessary for the website to function.

3. Why we collect it and our legal basis

We collect and process your personal data for the sole purpose of responding to your enquiry. We do not use it for marketing without your explicit consent, and we do not sell it to third parties.

Our legal basis under the UK General Data Protection Regulation (UK GDPR) is legitimate interests (Article 6(1)(f)) — specifically, our legitimate interest in responding to professional enquiries submitted to us. This processing is necessary, proportionate, and unlikely to override your interests or fundamental rights.

4. How long we keep your data

We retain enquiry data for up to 12 months from the date of receipt, or until the matter is fully resolved, whichever is longer. After this period the data is securely deleted. If an enquiry leads to a formal engagement, data relating to that engagement is retained in accordance with our professional record-keeping obligations.

5. Third-party processors

Contact form submissions are processed by Formspree Inc., a third-party form submission service. Formspree acts as a data processor on our behalf and is contractually required to handle your data securely and only as instructed by us.

You can review Formspree's privacy practices at formspree.io/legal/privacy-policy.

6. Your rights

Under UK GDPR, you have the following rights in relation to your personal data:

• Right of access — you can request a copy of the personal data we hold about you.
• Right to rectification — you can ask us to correct inaccurate data.
• Right to erasure — you can ask us to delete your data, subject to any overriding legal obligations.
• Right to restriction — you can ask us to pause processing of your data in certain circumstances.
• Right to data portability — you can ask for your data in a commonly used machine-readable format.
• Right to object — you can object to processing based on legitimate interests.

To exercise any of these rights, please contact us at enquiries@kpmc.com. We will respond within one calendar month.

7. Right to complain

If you are dissatisfied with how we handle your personal data, you have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner's Office (ICO): ico.org.uk — telephone 0303 123 1113.

8. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or legal requirements. The date at the top of this page indicates when it was last revised. We encourage you to review this page periodically.