1. Introduction
This notice explains how Kompass Consulting Limited collects and uses your personal data, and your rights over that data.
Kompass Consulting is the ‘controller’ of any personal data you give us. This means we decide how and why it is used. Throughout this notice, ‘we’, ‘us’ and ‘our’ refer to Kompass Consulting.
If you have any questions about this notice or about how we handle your data, please contact us on: contact@kompassconsulting.co.uk
2. When we collect your data, and what we collect
We collect personal data about you in three situations:
When you use our website. If you download a report or other content from our website, we collect the details you give us — typically your name, job title, organisation and email address, along with anything else you choose to share. Our website does not use cookies or analytics tracking, so we do not collect data about your device or browsing.
When you meet us in person. If we meet at an event, meeting or similar, we may keep a record of your name, job title, organisation and contact details, together with anything else you share with us in the course of the conversation.
When you enquire about or work with us. If you get in touch about our services, or go on to enter a commercial relationship with us, we collect the details needed to respond and to manage that relationship — for example your name, job title, organisation, contact details and, where relevant, the contact details needed to arrange and invoice work.
Personal data means any information that can identify you as an individual. It does not include anonymised information.
We do not collect special category (sensitive) data about you — such as information about your health, ethnicity, religious beliefs or political opinions — for the purposes described in this notice.
3. How we use your data, and our legal basis
We use your personal data for the following purposes, on the legal bases set out below.
| Purpose | Legal basis |
|---|---|
| Providing the reports or content you ask for through our website | Our legitimate interests in sharing our work and expertise with people who ask for it |
| Following up with you after you download a report — for example, to offer a conversation about it | Our legitimate interests in developing relationships and offering our services to people who have shown an interest |
| Responding to your enquiries and managing our relationship with you | Our legitimate interests in running our business, or the performance of a contract with you |
| Arranging, delivering and invoicing work, and keeping the related records | Performance of a contract with you, and compliance with our legal obligations (for example, accounting and tax) |
Where we rely on our legitimate interests, you have the right to object — see section 6. If you would prefer we did not contact you to follow up after a download, just let us know and we will stop.
We do not carry out automated decision-making or profiling.
4. Who we share your data with
We do not sell your personal data, and we do not share it with third parties for their own purposes.
We may disclose your data where we are required to do so by law, or to establish, exercise or defend legal claims.
We store your personal data within the UK.
5. How long we keep your data, and how we protect it
We keep your personal data only for as long as we need it for the purposes described above, including to meet any legal, accounting or reporting requirements. When we no longer need it, we delete it.
We have appropriate measures in place to keep your personal data secure and to prevent it being lost, misused, altered or accessed without authorisation. Only people who need your data in order to do their work have access to it.
If a data breach occurs that is likely to affect your rights, we will notify you and any relevant regulator where we are legally required to do so.
6. Your rights
Under UK data protection law you have a number of rights over your personal data. You can ask us to:
- give you access to the personal data we hold about you;
- correct any data that is inaccurate or incomplete;
- delete your data, where there is no good reason for us to keep using it;
- restrict how we use your data, or object to us using it (including where we rely on our legitimate interests);
- transfer your data to you or another organisation, where this applies; and
- stop contacting you at any time.
To exercise any of these rights, please contact us using the details in section 1. You will not usually have to pay a fee, and we aim to respond within one month.
If you are unhappy with how we have handled your personal data, you have the right to complain to the Information Commissioner’s Office (ICO), the UK regulator for data protection, at ico.org.uk. We would be grateful for the chance to resolve your concern first, so please do consider contacting us before you approach the ICO.
7. Changes to this notice
We may update this notice from time to time to reflect changes in the law or in how we work. Any updated version will be posted on our website.
Last updated: 1 July 2026