Last Updated: 05/02/2026
1. Introduction
GKJ Consulting Ltd (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you use our website at gkjconsulting.co.uk.
Our Details:
- Business Name: GKJ Consulting Ltd
- Contact: nick@gkjconsulting.co.uk
- Location: United Kingdom
2. Information We Collect
2.1 Information You Provide Directly
When you contact us through our website forms, we collect:
- Your name
- Your email address
- Any information you include in your message
2.2 Information Collected Automatically
When you visit our website, we automatically collect:
- Your IP address (anonymized)
- Browser type and version
- Pages you visit on our site
- Time and date of your visit
- Referring website
- Device type
This information is collected through Google Analytics 4 with IP anonymization enabled.
2.3 Cookies
We use cookies to improve your experience and analyze website traffic. You can control cookie preferences through our cookie consent banner powered by CookieYes. For detailed information about cookies we use, please see our Cookie Policy (accessible via the cookie banner).
3. How We Use Your Information
We use your personal information for the following purposes:
3.1 Contact Form Submissions
- To respond to your enquiries
- To provide information about our services
- To establish and maintain client relationships
3.2 Website Analytics
- To understand how visitors use our website
- To improve our website content and functionality
- To identify technical issues
3.3 Internal CRM
We store contact form submissions in our internal WordPress database and may process them through automated workflows (n8n) to manage client communications. This data remains within our systems and is not shared with external CRM platforms.
4. Legal Basis for Processing (GDPR)
Under GDPR, we process your data based on:
- Consent: When you submit a contact form, you explicitly consent to us storing and using your information to respond to your enquiry
- Legitimate Interests: We have a legitimate interest in analyzing website usage to improve our services
You have the right to withdraw consent at any time by contacting us.
5. Data Retention
- Contact Form Submissions: We retain your contact information for 24 months from your last interaction with us, unless you become a client or request deletion sooner
- Analytics Data: Google Analytics data is retained for 14 months
- Client Records: If you become a client, we retain your data for 7 years in accordance with UK financial record-keeping requirements
6. Who We Share Your Data With
We do not sell, rent, or trade your personal information. We only share data with the following service providers:
6.1 Essential Service Providers
- Google Analytics: For website analytics (Google Ireland Limited, GDPR-compliant)
- Web Hosting Provider: [Insert your hosting provider] stores website data
6.2 Legal Obligations
We may disclose your information if required by law or to protect our legal rights.
7. International Transfers
We are based in the United Kingdom. Some of our service providers (such as Google Analytics) may process data outside the UK/EEA in countries with adequate data protection safeguards in place.
If you are located outside the UK and contact us, your information will be transferred to and processed in the UK.
8. Your Rights Under GDPR
You have the following rights:
- Right to Access: Request a copy of the personal data we hold about you
- Right to Rectification: Request correction of inaccurate data
- Right to Erasure: Request deletion of your data (“right to be forgotten”)
- Right to Restrict Processing: Request we limit how we use your data
- Right to Data Portability: Request your data in a machine-readable format
- Right to Object: Object to processing based on legitimate interests
- Right to Withdraw Consent: Withdraw consent for data processing at any time
To exercise any of these rights, contact us at [your email address].
9. Data Security
We implement appropriate technical and organizational measures to protect your personal information, including:
- SSL encryption for data transmission
- Regular security updates for WordPress and plugins
- Access controls limiting who can view contact form submissions
- Regular backups
However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
10. Children’s Privacy
Our services are not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.
11. Third-Party Websites
Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. Please review their privacy policies before providing any personal information.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last Updated” date. Continued use of our website after changes constitutes acceptance of the updated policy.
13. Contact Us
If you have questions about this Privacy Policy or how we handle your data, please contact us:
Email: nick@gkjconsulting.co.uk
14. Complaints
If you believe we have not handled your data properly, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO):
Website: ico.org.uk
Telephone: 0303 123 1113