Privacy Policy

1. Who we are

This website and the services described on it are operated by Knightingale Enterprises Ltd, a company registered in England and Wales, trading as Knightingale Group. We are the data controller responsible for the personal information described in this policy.

If you have any question about this policy or about how we handle your information, contact us at [email protected]. We aim to respond within five working days.

2. The short version

3. Information we collect

Depending on how you interact with us, we may collect:

• Identity and contact information — your name, email address, mobile or landline telephone number, and the country or region you are based in.
• Enquiry information — the information you choose to give us about your business, your goals, your current situation, and what you are looking for, whether submitted through a form or given during a call.
• Consent records — a record of what you consented to, the wording you were shown, and the date, time and source of that consent. We keep this so we can demonstrate that consent was validly obtained.
• Communications — messages you exchange with us by email, SMS, WhatsApp or through our forms, and our notes from calls with you.
• Call recordings — where a consultation call is recorded, and only where you have been told at the start of the call and have agreed to it.
• Technical information — basic information your browser sends when you visit this website, such as your approximate location, device type and browser. This website does not run advertising or behavioural tracking.

We do not knowingly collect special category data (such as health, religious or political information), and you should not send it to us.

4. How we collect it

• Directly from you — when you use the chat widget on this website, complete one of our online forms or landing pages, book a call, reply to a message, or email or message us.
• During calls — when you speak with us on a consultation, discovery or onboarding call.
• Automatically — limited technical information collected when you browse this website.

5. Why we use it, and our lawful basis

Under UK data protection law we must have a lawful basis for using your personal information. Ours are:

• Consent — for marketing text messages and marketing emails. You give this by actively ticking a box that is never pre-ticked, and you can withdraw it at any time.
• Performance of a contract, or steps taken at your request before entering one — to respond to your enquiry, arrange and confirm calls, send booking confirmations and reminders, and deliver services you have asked for.
• Legitimate interests — to run, secure and improve our business, keep records, and prevent misuse of our services. We balance this against your rights, and you can object at any time.
• Legal obligation — to keep records we are required by law to keep, and to respond to lawful requests from authorities.

6. Mobile information and SMS

This section governs how we handle mobile telephone numbers and text messaging consent. It applies in addition to the rest of this policy, and where there is any conflict, this section takes precedence.

How we obtain SMS consent

We obtain consent to send you text messages through the chat widget on this website and through our online forms and landing pages. At every one of those points, the full consent wording is shown to you next to the field where you enter your number, and consent is given by ticking a box that is never pre-ticked and which is never required in order to submit. You can always contact us without agreeing to receive text messages.

We use two separate consent options, and you may agree to one, both, or neither:

• Service and appointment messages — booking confirmations, appointment reminders, call rescheduling, and messages relating to a service you have requested or purchased.
• Marketing messages — offers, programme launches, events and promotional updates. Consent to receive marketing text messages is not a condition of any purchase.

We keep a record of the consent you gave, the exact wording you were shown, and when and where you gave it.

What we do with your mobile number

• We use it to send you the categories of message you agreed to receive, and to reply to you.
• We share it only with the service providers who technically deliver those messages on our behalf — our messaging platform, our CRM, and the mobile network carriers. These providers act on our instructions and may not use your number for their own purposes.
• We do not disclose your mobile number, or the fact that you opted in, to any other organisation for that organisation's own marketing.

Opting out

You can stop text messages at any time by replying STOP to any message we send you. We also accept QUIT, END, CANCEL, UNSUBSCRIBE, REVOKE and OPT OUT. You will receive one confirmation message, and then no further messages in that programme. For help, reply HELP to any message or email [email protected].

Full text messaging terms, including message frequency and cost, are set out in our Terms & Conditions.

7. Who we share information with

We share personal information only with service providers who help us operate, and only to the extent they need it to perform their function for us. These fall into the following categories:

• Messaging and CRM platforms — to store your contact record and to send the emails and text messages you have agreed to receive.
• Telecommunications carriers and messaging aggregators — to physically deliver text messages to your handset.
• Call and meeting software — to host and, where agreed, record consultation calls.
• Professional advisers — our accountants and legal advisers, where required.
• Authorities — where we are required to disclose information by law, to comply with a regulation or governmental request, to avoid liability, or to protect our rights or property.

8. Messages sent on behalf of client brands

Knightingale Enterprises Ltd provides growth, marketing and sales services to client businesses, and in some cases operates messaging programmes on their behalf. Where that is the case:

• Every message clearly identifies the brand it is sent on behalf of, so you always know who is contacting you.
• Your consent applies to that named brand and to Knightingale Enterprises Ltd as its service provider. It is not shared with, or reused by, any other client.
• Opting out stops messages from that programme, and you can opt out of each programme independently.

9. International transfers

Some of our service providers are based outside the United Kingdom, including in the United States. Where personal information is transferred outside the UK, we rely on an adequacy decision or on standard contractual clauses (the UK International Data Transfer Agreement or Addendum), so that your information continues to receive an equivalent level of protection.

10. How long we keep it

• Enquiry and contact records — up to 24 months after your last interaction with us, unless you ask us to erase them sooner.
• Consent and opt-out records — retained for as long as we operate the messaging programme and for a period afterwards, because we are required to be able to evidence consent and to honour opt-outs. Opt-out records are kept indefinitely so that we do not message you again by mistake.
• Call recordings — up to 12 months, unless needed for a longer period in connection with a live engagement.
• Financial records — six years, as required by UK tax law.

11. Your rights

Under the UK GDPR and the Data Protection Act 2018 you have the right to:

• Ask what personal information we hold about you, and get a copy of it.
• Have inaccurate information corrected.
• Ask us to delete your information.
• Ask us to restrict how we use it, or object to us using it.
• Receive your information in a portable format, or have it transferred to another organisation.
• Withdraw consent at any time, without affecting anything we did before you withdrew it.
• Object to direct marketing at any time — this is an absolute right, and we will always act on it.

To exercise any of these, email [email protected]. We will not charge you, and we will respond within one month.

If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113. We would appreciate the chance to put things right first.

12. Cookies and third-party content

This website does not use advertising cookies, behavioural tracking or third-party marketing pixels.

Some pages embed content hosted by other companies — video players from Loom and Fathom, images from Google, web fonts from Google Fonts, and our chat widget provided by LeadConnector. When that content loads, those companies may receive your IP address and may set their own cookies, governed by their own privacy policies. If you do not play an embedded video, no video-related cookie is set.

13. Security

We use reputable providers with appropriate technical and organisational safeguards, restrict access to personal information to those who need it, and use multi-factor authentication on the accounts that hold it. No transmission over the internet is ever completely secure, but we take these obligations seriously and will notify you and the ICO where we are legally required to do so.

14. Children

Our services are intended for people aged 18 and over. We do not knowingly collect information from children. If you believe a child has given us their information, contact us and we will delete it.

15. Changes to this policy

We may update this policy from time to time. The date at the top of the page always shows when it was last changed. Where a change materially affects how we use your information, we will tell you directly.

16. Contact us