Privacy Notice (GDPR)
Kestrel TSCM Limited Privacy Policy
Last Updated: June 2026
At Kestrel TSCM Limited, we are committed to protecting and respecting your privacy. This Privacy Notice explains how we collect, use, store, and protect your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and applicable data protection laws.
1. Data Controller
Kestrel TSCM Limited is the Data Controller responsible for your personal data.
For any privacy-related enquiries, please contact:
Email: support@kestreltscm.com
2. Information We Collect
We may collect and process the following personal information:
- Full Name
- Email Address
- Company Name (where provided)
- Job Title (where provided)
- Any information voluntarily submitted through contact forms, enquiries, or correspondence
We do not collect special category data unless specifically required and agreed in advance.
3. How We Use Your Information
We use your personal information for the following purposes:
- Responding to enquiries and requests
- Providing information about our products and services
- Managing customer and business relationships
- Sending updates, newsletters, and marketing communications (where consent has been provided)
- Maintaining records of communications
- Complying with legal and regulatory obligations
4. Lawful Basis for Processing
We process personal data under one or more of the following lawful bases:
Consent
Where you have explicitly agreed to receive marketing communications or updates.
Legitimate Interests
To respond to business enquiries, maintain professional relationships, and provide information about our services.
Legal Obligation
Where processing is necessary to comply with legal or regulatory requirements.
5. Data Retention
We retain personal information only for as long as necessary to fulfil the purposes for which it was collected.
Typically:
- General enquiries: up to 24 months after the last interaction.
- Marketing contacts: until consent is withdrawn or you unsubscribe.
- Customer records: as required by applicable legal and contractual obligations.
6. Data Sharing
We do not sell, rent, or trade personal information.
Your information may be shared with trusted service providers who assist us with:
- Website hosting
- Email communications
- CRM systems
- IT support services
All third parties are required to maintain appropriate security measures and process data only on our instructions.
7. International Transfers
Where personal data is transferred outside the United Kingdom or European Economic Area (EEA), we ensure appropriate safeguards are in place, including:
- Adequacy decisions
- Standard Contractual Clauses (SCCs)
- Other legally recognised transfer mechanisms
8. Security Measures
We implement appropriate technical and organisational measures to protect personal data against:
- Unauthorised access
- Accidental loss
- Alteration
- Disclosure
- Destruction
These measures include secure systems, access controls, encryption where appropriate, and regular security reviews.
9. Your Rights
Under UK GDPR and applicable data protection laws, you have the right to:
- Access your personal data
- Correct inaccurate information
- Request deletion of your data
- Restrict processing
- Object to processing
- Withdraw consent at any time
- Request data portability
- Lodge a complaint with the relevant supervisory authority
To exercise any of these rights, please contact us at:
10. Marketing Communications
Where you have provided consent, we may send information about our products, services, events, training courses, and industry updates.
You may unsubscribe at any time by:
- Clicking the unsubscribe link in our emails
- Contacting us directly at support@kestreltscm.com
11. Cookies
Our website may use cookies and similar technologies to improve user experience and website functionality.
Further details can be found in our Cookie Policy.
12. Changes to This Privacy Notice
We may update this Privacy Notice from time to time. Any changes will be published on this page together with the updated revision date.
Consent Statement for Contact Forms
By submitting this form, you consent to Kestrel TSCM Limited storing and processing your name and email address for the purpose of responding to your enquiry and, where selected, providing information about our products, services, and industry updates. You may withdraw your consent at any time by contacting us.
☐ I agree to the processing of my personal data in accordance with the Privacy Policy.
☐ I would like to receive future communications, product updates, and industry news from Kestrel TSCM Limited.
This version is suitable for UK GDPR compliance and can be placed directly on the Kestrel TSCM website or linked from any enquiry form.
