Privacy Policy

5. Recipients and Service Providers

Personal data may be made available to service providers involved in operating the Website and handling enquiries, including:

• Webflow, as the provider of the Website hosting and infrastructure;
• Google Workspace, including Gmail, as the email service used to receive, store, and manage enquiries submitted through the Website.

Personal data is not sold, rented, or disclosed to third parties for their own marketing purposes.

Personal data may also be disclosed where required by applicable law, a court order, or a request from a competent public authority, or where necessary to establish, exercise, or defend legal claims.

6. Data Retention

Personal data is retained only for as long as necessary to fulfil the purposes described in this Privacy Policy or to comply with applicable legal obligations.

Personal data relating to enquiries submitted through the Website may be retained for as long as reasonably necessary to respond to the enquiry, maintain business records, protect legal interests, or comply with applicable legal obligations.

Where an enquiry results in the provision of consulting or advisory services, personal data may be retained for the duration of the business relationship and thereafter for the period necessary to comply with applicable legal, accounting, and tax obligations, or to establish, exercise, or defend legal claims.

7. International Data Transfers

Personal data processed through the Website may be transferred to or processed in countries outside the European Economic Area (“EEA”) through the use of Webflow and Google Workspace, including Gmail.

Any subsequent processing carried out by these service providers is subject to their respective privacy notices, data processing terms, and applicable data protection requirements.

Further information about how Webflow and Google Workspace process personal data internationally is available in their respective privacy documentation.

8. Data Subject Rights

Subject to the conditions and limitations set out in applicable data protection law, data subjects may have the following rights in relation to their personal data:

• Right of access — the right to obtain confirmation as to whether personal data is being processed and, where applicable, to receive access to such data and related information;
• Right to rectification — the right to request correction of inaccurate personal data and completion of incomplete personal data;
• Right to erasure — the right to request deletion of personal data where the applicable legal requirements are met;
• Right to restriction of processing — the right to request that the processing of personal data be restricted in certain circumstances;
• Right to data portability — the right to receive personal data provided by the data subject in a structured, commonly used, and machine-readable format, and to transmit such data to another controller where legally applicable;
• Right to object — the right to object, on grounds relating to the data subject’s particular situation, to processing based on legitimate interests;
• Right to lodge a complaint — the right to lodge a complaint with a competent data protection supervisory authority if you believe that the processing of your personal data violates applicable data protection law.

Requests concerning these rights may be submitted to privacy@kyrconsult.com.

Before responding to a request, additional information may be required where reasonably necessary to verify the identity of the person making the request and to prevent unauthorised disclosure of personal data.

The exercise of these rights may be subject to restrictions or exemptions provided by applicable law.

9. Cookies and Similar Technologies

The Website does not use analytics, advertising, or tracking technologies for marketing purposes.

To protect the Website against spam and automated abuse, the contact form uses Google reCAPTCHA. Google reCAPTCHA may process technical information and use cookies or similar technologies necessary to assess whether a request is submitted by a legitimate user or an automated system. Such processing is subject to Google’s applicable privacy policy and terms.

If additional cookies or similar technologies are introduced in the future, this Privacy Policy will be updated accordingly, and any required notices or consent mechanisms will be implemented in accordance with applicable law.

10. Data Security

Reasonable technical and organisational measures are implemented to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction.

Enquiries submitted through the Website are received and stored using Google Workspace, including Gmail. The security of Google Workspace infrastructure and services is governed by Google’s applicable security documentation, privacy terms, and data processing terms.

Access to received enquiries is restricted to authorised persons. However, no method of transmission over the Internet or electronic storage can be guaranteed to be completely secure, and absolute security cannot be guaranteed.

11. Automated Decision-Making and Profiling

Personal data collected through the Website is not used for automated decision-making or profiling within the meaning of Article 22 GDPR.

Enquiries submitted through the contact form are reviewed manually. No decisions producing legal effects or similarly significant effects are made solely by automated means.

12. Changes to This Privacy Policy

This Privacy Policy may be updated from time to time to reflect changes in the Website, the services used in connection with the Website, or applicable legal requirements.

The current version of this Privacy Policy will always be available on the Website.

Material changes may be communicated through the Website where appropriate.