Privacy Policy

1. Who we are

Karga Consultancy Limited is the data controller for personal data collected through this website. We are registered in England and Wales (Company No. 15311819), with a registered office at 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.

For any privacy enquiry you can contact us at hello@karga.uk.

2. What data we collect

We only collect data you actively provide or that is necessary to operate the site:

• Contact details you submit through our enquiry form: name, email address, company name (optional) and the content of your message.
• Technical data such as IP address, browser type and pages visited, collected by our hosting provider for security and basic analytics.

3. How we use your data and our lawful basis

We process your personal data for the following purposes and lawful bases under UK GDPR:

• To respond to your enquiry and provide a proposal — lawful basis: taking steps at your request prior to entering a contract, and our legitimate interest in answering business enquiries.
• To maintain the security and integrity of our website — lawful basis: our legitimate interest in protecting our systems.

4. Cookies and electronic communications (PECR)

In line with the Privacy and Electronic Communications Regulations (PECR), this website does not use advertising or third-party tracking cookies. Only strictly necessary cookies required for the site to function (for example, to keep your session and protect form submissions) may be set. Because these are essential, they do not require consent under PECR — so no cookie consent banner is shown.

We do not send unsolicited electronic marketing. We will only contact you electronically in direct response to an enquiry you have submitted, or where you have given consent. You can ask us to stop contacting you for marketing purposes at any time by emailing hello@karga.uk.

5. Sharing and processors

We do not sell your personal data. We share it only with trusted service providers acting on our behalf as data processors, such as our website hosting and email delivery providers. All processors are bound by contractual obligations to protect your data.

6. International transfers

Where data is processed outside the UK or European Economic Area, we ensure appropriate safeguards are in place, such as adequacy decisions or Standard Contractual Clauses.

7. How long we keep your data

We retain enquiry data only as long as necessary to respond and, where relevant, to manage our business relationship — typically up to 24 months after last contact — unless a longer period is required by law.

8. Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request erasure of your data ("right to be forgotten").
• Restrict or object to processing.
• Data portability.
• Withdraw consent at any time, where processing is based on consent.

9. Security

We use appropriate technical and organisational measures — including encryption in transit, access controls and security testing — to protect your data against unauthorised access, loss or misuse.

10. Complaints

You can contact us at hello@karga.uk to exercise any of your rights. If you are unhappy with how we handle your data, you also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

11. Changes to this policy

We may update this policy from time to time. The latest version will always be published on this page with the date of the most recent revision.