Privacy notice

Who we are

Kestrel Commercial Services Limited (company number 17457736), registered office 94 Dulais Road, Blaendulais, Neath, SA10 9ES. We are the controller of the personal information described here. Contact: enquiries@kestrelriskreview.co.uk.

What we collect

When you make an enquiry we collect your name, email address, company name and the service you want. We also collect your phone number, if you give it, and any detail you choose to add. We record how you reached the form (a referral code, source and page address) so we can attribute enquiries. Once we work together, we hold the contract and information you share for the review.

Why we use it, and our lawful basis

To respond to your enquiry and take steps at your request before a contract (pre-contract steps). To perform the services we agree (contract). To meet legal and accounting obligations (legal obligation). To run and secure our business and keep records of enquiries (legitimate interests). We do not use your details for unrelated marketing.

Who processes it for us

These providers process information on our behalf to run the site and our business. Cloudflare provides website hosting and cookieless analytics. Jotform provides the enquiry form and electronic signing. Google Workspace and Microsoft provide email, file storage and document tools. Todoist provides task management. Some of these providers may process information outside the UK under appropriate safeguards. We also disclose information where the law requires it.

How long we keep it

Enquiries that do not lead to an engagement are kept for 12 months. Information relating to an engagement is kept for 6 years after it ends, for legal and accounting purposes.

Referral partners

This applies only where a referral partner introduced you. In that case we may tell the partner that you made contact and whether an engagement went ahead, so they can be credited. We do not share the contents of your contracts or our findings with them.

Cookies and analytics

This site uses Cloudflare Web Analytics, which does not use cookies or track you across sites. The enquiry form is loaded from Jotform and is subject to Jotform's own privacy notice.

Your rights

You may ask for access to your information, or for it to be corrected or deleted. You may also restrict or object to its use, and ask for portability where it applies. Contact us at the address above. You may also complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113).

Data protection fee

We have registered with the Information Commissioner's Office. Registration number: ZC269651.