Privacy policy

Last updated 12 October 2026. This policy explains what personal information Kirosconsult (kirosconsult.co.uk) collects, why, who sees it and what your rights are. It is written to meet the UK GDPR and the Data Protection Act 2018.

Who we are

Kirosconsult builds websites and apps and runs digital marketing for businesses. We are based in Durban, South Africa, serving UK businesses remotely. You can reach us about your data at info@kirosconsult.co.uk.

What we collect

• Enquiries. When you use the contact form we receive your name, business name, email address, optional phone number, the plan you picked and your message.
• Projects and billing. If you become a client we keep what we need to do the work and invoice you: contact details, business details, the content you give us and payment records.
• Payments. Card and bank details are entered on our payment provider's own page (Stripe or your bank). We do not see or store them.
• Server logs. Our hosting provider keeps standard logs (IP address, browser type, pages requested, time) for security and fault-finding.
• What we do not collect. This website has no analytics, advertising or tracking scripts and sets no cookies (see the cookies page).

Why we use it

• To answer your enquiry and give you a quote.
• To do the work and bill for it (a contract with you).
• To keep the site and your account secure, and to stop spam (our legitimate interests).
• To meet legal duties such as tax and accounting records.
• We only send marketing email if you have asked us to. We do not sell or rent your details.

Who we share it with

Only the people who help us run the service, under their own privacy terms: our hosting and email providers, our payment provider, and accountants or professional advisers where needed. We may disclose information if the law requires it.

Where it is processed

Our team and systems are in South Africa, and our hosting providers may store data in South Africa, the United Kingdom or the European Union. When information about people in the UK or EU is sent to South Africa we use appropriate safeguards for the transfer.

How long we keep it

Enquiries that do not become projects are kept for up to 24 months and then deleted. Client and billing records are kept for as long as the law requires for tax and accounting purposes (usually five to seven years). Server logs are kept for a short period set by our host.

Security

We use HTTPS, protected logins, up-to-date software and limited access. No system is perfectly secure, and if a breach affects your information we will tell you and the regulator where the law requires.

Your rights

• Ask for a copy of your data, and have it corrected or deleted.
• Object to or restrict how we use it, and ask for it in a portable format.
• Complain to the ICO if you are unhappy with how we handled your data.

To use any of these rights, email info@kirosconsult.co.uk. If you are not satisfied you can complain to the Information Commissioner's Office (ICO), at ico.org.uk.

Children

Our services are for businesses. We do not knowingly collect information from children.

Changes

If we change this policy we will update the date at the top. Material changes will be flagged on the site.