Keen Research Consultancy (KRC) Ltd — Privacy Policy

Last updated: June 2026

1. Who we are

Keen Research Consultancy (KRC) Ltd is a limited company registered in England and Wales. [Company number to be added]. Our registered office is [accountant's address]. For all data protection enquiries, contact us at krc@keenresearchconsultancy.com. We are the data controller and are responsible for your personal data.

2. What data we collect

We collect the following categories of personal data:

• Identity data: name, business name, job title.

• Contact data: email address, phone number, business address.

• Correspondence data: details you share with us during enquiries or service delivery, including information about your business processes.

• Technical data: IP address, browser type, and website usage data collected through cookies.

3. How we collect your data

We collect data directly from you when you complete the contact form on our website, send us an email, book a consultation call, or use our services and provide information about your business during the discovery process.

4. Why we process your data and our lawful basis

• Contract performance — to respond to your enquiry, deliver the service you purchased, invoice you, and provide the documents agreed.

• Legitimate interest — to follow up on an enquiry you have made, maintain our business records, and improve our services.

• Legal obligation — to keep financial records for HMRC (6 years) and to respond to lawful requests from regulators.

• Consent — only where we ask you to opt in to receive marketing updates (you can withdraw at any time).

5. Who we share your data with

We share your data only where necessary to deliver our services or comply with the law: website hosting (Wix.com Ltd), email provider, payment processor, accounting software, and professional advisers (accountant, insurer) where reasonably necessary. We do not sell your data to anyone and we do not share your data for third-party marketing.

6. International transfers

Some of our service providers may store data outside the UK. Where this happens, we ensure appropriate safeguards are in place, such as UK International Data Transfer Agreements or equivalent mechanisms.

7. How long we keep your data

• Enquiry data (contact form, email): 12 months after the last contact.

• Client data (name, email, invoice records): 6 years after the end of the financial year in which the service was completed (HMRC requirement).

• Marketing consent records: until you withdraw consent, plus 30 days.

8. Your rights

Under UK GDPR you have the right to access, correct, erase, restrict, port, and object to processing of your data, and to withdraw consent at any time where consent is our basis. To exercise any of these rights, email krc@keenresearchconsultancy.com. We will respond within 30 days.

9. How to complain

If you have concerns, contact us first at krc@keenresearchconsultancy.com. If we cannot resolve the issue, you have the right to lodge a complaint with the ICO: ico.org.uk, 0303 123 1113, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

10. Changes to this policy

We may update this policy from time to time. Any changes will be posted on this page.