KEMPOCK LIMITED PRIVACY POLICY AND GDPR
Privacy Policy
Kempock Limited (trading as Kempock and Kempock Advisory) Last updated: 30 June 2026
Who we are
Kempock Limited (trading as Kempock and Kempock Advisory) is a political advisory and communications consultancy registered in Scotland under company number SC893487.
Contact: jamie@kempock.com
We are the data controller for the personal information described in this policy, which means we decide how and why your personal data is processed.
What information we collect
We collect personal data when you interact with us directly, including when you:
Submit an enquiry through the contact form on this website
Email us at jamie@kempock.com
Message us via WhatsApp
Call or text our published phone number
Otherwise correspond with us about our services
This may include your name, email address, phone number, organisation, job title, and the content of any message or enquiry you send us. We do not knowingly collect any special category data (such as health information, political opinions, or trade union membership) unless you choose to share it with us as part of an enquiry — if you do, we treat it with additional care as set out below.
We also automatically collect limited technical information when you visit this website, such as your IP address, browser type, and pages visited, via standard website analytics. See Cookies below.
How we use your information
We use your personal data to:
Respond to your enquiry and discuss potential or ongoing advisory work
Provide our services to clients, where you are a client or client contact
Maintain records of our business correspondence
Comply with our legal and regulatory obligations (for example, company and tax record-keeping)
Understand how visitors use this website, to keep it working well
Our legal basis for processing
Under UK GDPR, we rely on the following legal bases:
Legitimate interests — to respond to enquiries, maintain client relationships, and operate our business, where this does not override your own rights and interests
Contract — where processing is necessary to deliver advisory services you've engaged us for
Consent — where you've actively opted in (for example, signing up to receive updates from us, if we offer this)
Legal obligation — where we're required to keep certain records by law (e.g. Companies House, HMRC)
Sensitive enquiries
Given the nature of political advisory work, some enquiries may touch on sensitive or confidential matters. We treat all client and prospective client communications as confidential by default, and we do not disclose the fact or content of an enquiry to third parties without your consent, except where required by law.
Who we share your information with
We do not sell or rent your personal data. We may share limited information with:
Service providers who support our operations, such as our website host (Squarespace), email provider, and accounting software — each bound by their own data protection obligations
Trusted specialist partners (for example, legal, PR, or policy advisers) where you've agreed we should involve them as part of an engagement
Regulators or authorities, where required by law
International transfers
Our website is hosted by Squarespace, which may store and process data outside the UK (including in the United States). Where this happens, it is covered by appropriate safeguards such as Standard Contractual Clauses, as required under UK GDPR.
How long we keep your information
We keep enquiry and client correspondence for as long as is necessary to provide our services, maintain proper business records, and meet legal/regulatory retention requirements (including company law and tax record-keeping, which typically require records to be kept for at least 6 years). Where an enquiry doesn't lead to ongoing work, we'll retain it for a reasonable period in case you get back in touch, and delete it thereafter.
Cookies
This website may use cookies and similar technologies, including those set automatically by our website platform (Squarespace) for site functionality and analytics. [CONFIRM: do you have Google Analytics, Meta Pixel, or any other tracking installed beyond Squarespace's own analytics? This section needs updating to reflect exactly what's running.]
Where we use non-essential cookies (such as analytics), we will ask for your consent via a cookie banner, which you can withdraw at any time. You can also control cookies through your browser settings.
Your rights
Under UK GDPR, you have the right to:
Be informed about how we use your data
Access the personal data we hold about you
Have inaccurate data corrected
Have your data deleted, in certain circumstances
Restrict or object to our processing of your data
Request your data in a portable format
Withdraw consent at any time, where we rely on consent
To exercise any of these rights, contact us at jamie@kempock.com. We'll respond within one month.
Complaints
If you're unhappy with how we've handled your personal data, you can contact us directly, or raise a complaint with the UK's data protection regulator:
Information Commissioner's Office (ICO) ico.org.uk | 0303 123 1113
Changes to this policy
We may update this policy from time to time. The "last updated" date at the top will reflect the most recent version.
Contact us
If you have any questions about this policy or how we handle your data, contact: