On this page
1. Who we are
KGS Digital Limited is the data controller for the personal data described in this policy. That means we decide what is collected and why, and we are responsible for looking after it.
KGS Digital Limited
Registered in England and Wales, company number 17327867
London, United Kingdom
Email: nyle@kgsdigitalltd.co.uk
Phone: 07854 156 977
If you have any question about this policy, or you want us to do something with your data, email the address above. It reaches a person, not a queue.
2. What we collect
When you request a free growth report
The form on our site asks for:
- Your name
- Your business name
- Your website or Instagram address, if you have one
- Your email address
- Anything you choose to tell us about your business in the free-text box
Please don't put anything sensitive in the free-text box. It is there for context about your business, not for personal details about you or anyone else.
Technical information
When you submit the form we also record:
- A one-way scrambled version of your IP address. We take your IP address, mix it with a secret value and run it through a one-way cryptographic function. What we store cannot be turned back into your IP address. We use it only to spot and block automated abuse of the form.
- The page that referred you to us, if there was one.
What we deliberately do not collect
- No advertising or tracking pixels, and no third-party analytics profiling.
- No special category data (health, ethnicity, beliefs, and similar).
- No payment or card details are ever taken through this website.
- No raw IP addresses are stored.
3. Enquiries you start but don't finish
We want to be straight with you about this, because most websites are not.
If you start filling in the growth report form and enter a valid email address, we save what you have typed at that point, even if you never press the button. If you then leave the page, we may still hold your name, business name, email address and anything else you had entered.
We do this so we can follow up on genuine enquiries that got interrupted. A notice saying so is displayed on the form itself, before you type anything.
Nothing is saved until a valid email address is present in the form. If you type only your name and leave, nothing about you reaches us at all.
Our lawful basis for this is legitimate interests. In plain terms, our reasoning is:
- You came to a page whose entire purpose is requesting a report from us, and you got as far as giving us a working email address, so contact from us about that request is unlikely to be a surprise.
- We use it only to follow up on that enquiry. We do not add you to a mailing list, we do not sell or share it with anyone for their own purposes, and we do not use it to build a profile of you.
- We delete abandoned enquiries automatically after 90 days.
- You can tell us to delete it at any time and we will, without asking you why.
If you would rather we did not hold it, email nyle@kgsdigitalltd.co.uk and it will be deleted. You have an absolute right to object to this particular use, and we will not weigh it against anything. It just goes.
4. Why we use it, and our lawful basis
| What we do | What we use | Lawful basis |
|---|---|---|
| Produce your free growth report and email you about it | Name, business, website, email, what you told us | Legitimate interests: responding to an enquiry you made of us |
| Follow up an enquiry you started but did not finish | Whatever you had entered, once a valid email was present | Legitimate interests: recovering a genuine enquiry (see section 3) |
| Keep a record of who we have spoken to and what was said | The above, plus our own internal notes | Legitimate interests: running our business and keeping accurate records |
| Stop bots and abuse of the form | Scrambled IP address | Legitimate interests: keeping our service secure and available |
| Deliver work you have engaged us for | The above, plus anything you send us during the project | Performance of a contract with you |
Where we rely on legitimate interests, we have weighed our interest against your rights and freedoms, and we have limited what we collect and how long we keep it accordingly. You can ask us for the reasoning behind any of these at any time.
5. How long we keep it
| Record | Kept for |
|---|---|
| Enquiries you started but never submitted | 90 days from your last activity, then deleted automatically |
| Submitted growth report requests that did not become work | 24 months from our last contact, then deleted automatically |
| Client records | For as long as you are a client, then 24 months |
| Records we must keep by law, such as invoices | As long as tax and company law requires, currently 6 years |
These deletions are automated, not a promise we have to remember to keep. A scheduled job runs every night and removes anything past its date.
6. Who else sees it
We do not sell your personal data, and we never will. We do not share it with anyone for their own marketing purposes. It is seen by us, and by the suppliers who run the infrastructure this site sits on:
| Supplier | What they do for us |
|---|---|
| Netlify | Hosts the website and runs the code that receives your enquiry |
| Neon | Provides the database where enquiries are stored, via Netlify |
| Resend | Sends us the internal email alerting us to your enquiry, where enabled |
| Google Fonts | Supplies the typefaces this site is set in. Your browser requests these directly from Google, which means Google receives your IP address when you load our pages. We do not receive anything from Google in return, and no font request carries anything you typed. |
Each of these acts as our processor and is bound to use your data only on our instructions, except Google Fonts, which is a direct request from your browser to Google under Google's own privacy policy.
We may also disclose data if we are legally required to, for example by a court order.
7. Where your data is stored
Our hosting and database suppliers are United States companies and your data may be stored or processed on servers outside the United Kingdom, including in the United States.
Where data leaves the UK, we rely on the safeguards required by the UK GDPR, which for these suppliers is the International Data Transfer Addendum to the European Commission's standard contractual clauses, or the UK extension to the EU-US Data Privacy Framework where the supplier is certified under it. You can ask us for details of the safeguards that apply to a particular supplier.
8. Cookies and tracking
This website sets no cookies on visitors, and there is no cookie banner because there is nothing to consent to.
To be precise about what does happen:
- No cookies, no localStorage, no tracking. The form uses a random reference number to link your keystrokes to one enquiry, but that number lives in your browser's memory for the length of your visit only. It is never written to your device, and it disappears the moment you close the tab.
- No analytics. We run no Google Analytics, no Meta pixel, no advertising tags of any kind.
- One cookie exists on this domain, and only our own staff ever receive it: a login cookie for the private admin area at /admin. It is strictly necessary for that login to work, so it is exempt from consent requirements. You will never be sent it.
- Google Fonts is the one third party your browser contacts, as described in section 6.
9. Your rights
Under the UK GDPR you have the right to:
- Be told what we hold about you, and get a copy of it.
- Have it corrected if it is wrong or incomplete.
- Have it deleted. For enquiry data, we will simply do this on request.
- Restrict how we use it while a query about it is resolved.
- Object to us using it where we rely on legitimate interests. If you object to direct marketing, we must stop, full stop.
- Receive it in a portable format, or have it sent to someone else, where technically feasible.
- Not be subject to automated decision-making. We do not do any. Your growth report is graded by a person.
To use any of these, email nyle@kgsdigitalltd.co.uk. It is free, and we will respond within one month. We may ask you to confirm your identity first, so that we do not hand your data to somebody else.
10. Complaints
If you are unhappy with how we have handled your data, please tell us first and give us the chance to put it right.
You also have the right to complain to the Information Commissioner's Office, the UK's data protection regulator, at any time:
Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113
ico.org.uk/make-a-complaint
11. How we protect it
- The whole site is served over HTTPS, and enquiries travel encrypted.
- Enquiries go into an access-controlled database, not an inbox or a spreadsheet.
- The admin area is password protected, kept out of search engines, and its session cookie is restricted so it cannot be read by scripts or sent from other sites.
- We store a scrambled IP address rather than the real one, so that even our own records cannot identify your connection.
- We collect as little as we can get away with, and delete it on a schedule.
12. Changes to this policy
If we change how we use your data, we will update this page and change the date at the top. If the change is significant, and we hold your email address, we will tell you directly.