Kingsmede : build, learn, growWho We Are
Kingsmede Consulting Ltd is a leadership and organisational development consultancy based in the United Kingdom. We provide services including leadership development, service management improvement, process improvement, and personal coaching and growth.
For the purposes of UK data protection law, Kingsmede Consulting Ltd is the Data Controller responsible for your personal data.
| Trading name | Kingsmede Consulting Ltd |
| Website | www.kings-mede.com |
| hello@kings-mede.com |
What This Policy Covers
This policy explains how Kingsmede Consulting Ltd handles personal data in connection with its services and professional activities. The following applies:
- Kingsmede does not store or track visitors to our website.
- Connections, messages, and followers on LinkedIn are not stored outside the LinkedIn platform.
- Anyone enquiring through our channel may do so via hello@kings-mede.com. No data is held outside the email system.
This policy is written in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Personal Data We Collect
3.1 Data You Provide Directly
When you contact us — whether through LinkedIn, our website contact form, or by email — we may collect:
- Your name and job title
- Your employer and industry sector
- Your email address and telephone number
- The content of messages or enquiries you send to us
- Information about your professional development needs or challenges
3.2 Data Collected via LinkedIn
When you interact with Kingsmede on LinkedIn, we may collect or receive:
- Your LinkedIn public profile information (name, headline, employer, location)
- Messages you send to us via LinkedIn Messaging
- Comments or reactions you leave on our posts
- Connection requests you send to us
- Your engagement with our content (views, likes, shares — where LinkedIn makes this available to us)
LinkedIn has its own Privacy Policy which governs how LinkedIn collects and processes your data as a platform. Our policy only covers what Kingsmede does with data that we receive. You can review LinkedIn's Privacy Policy at linkedin.com/legal/privacy-policy.
3.3 Data Collected Automatically
Our website may collect limited technical data automatically, including:
- Your IP address and browser type
- Pages visited and time spent on the site
- Referring website or search terms
This data is collected via cookies and analytics tools. Please see our Cookie Policy (please see Section 11) for further details.
How We Use Your Personal Data
We use personal data only for legitimate purposes and always with an appropriate legal basis under UK GDPR.
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Responding to enquiries and messages | Name, contact details, message content | Legitimate interests (Art. 6(1)(f)) |
| Providing coaching or consultancy services | Name, professional details, coaching notes | Performance of a contract (Art. 6(1)(b)) |
| Maintaining client records | Name, contact history, service records | Legitimate interests / Legal obligation |
| Sending follow-up communications about our services | Name, email, LinkedIn profile | Legitimate interests (Art. 6(1)(f)) |
| Publishing content and engaging on LinkedIn | Public LinkedIn profile data | Legitimate interests (Art. 6(1)(f)) |
| Improving our services and website | Usage data, feedback | Legitimate interests (Art. 6(1)(f)) |
| Complying with legal obligations | As required by law | Legal obligation (Art. 6(1)(c)) |
LinkedIn — Specific Considerations
5.1 Joint Controller Arrangement
When Kingsmede operates a LinkedIn Company Page, LinkedIn and Kingsmede may be considered joint controllers for certain analytics data (LinkedIn Page Insights). LinkedIn is primarily responsible for ensuring individuals can exercise their rights in relation to this data. For more information, see LinkedIn's Page Insights Joint Controller Addendum.
5.2 How We Use LinkedIn Data
We use information visible on LinkedIn and shared via LinkedIn only to:
- Respond to enquiries and messages sent to us directly
- Connect professionally with individuals relevant to our work
- Share content and engage with our professional community
- Understand our audience through LinkedIn's aggregated analytics
We do not scrape, download, or systematically harvest LinkedIn profile data. We do not use LinkedIn data for automated profiling or decision-making.
5.3 Direct Messaging via LinkedIn
If you send us a message via LinkedIn Messaging, we will use the content of that message to respond to you. If you enquire about our services, we may follow up by email or phone if you have provided those details. We will not send you unsolicited marketing messages via LinkedIn.
Our Legal Basis for Processing
Under UK GDPR, we must have a lawful basis for processing personal data. We rely on the following:
Legitimate Interests (Article 6(1)(f))
This is our most common basis. We have a legitimate interest in processing data to respond to enquiries, develop our business, and engage professionally with our network. We always balance this against your rights and interests, and we would not process data where our interests are overridden by yours.
Performance of a Contract (Article 6(1)(b))
Where we are delivering coaching or consultancy services to you, we process your personal data as necessary to fulfil that contract.
Legal Obligation (Article 6(1)(c))
We may need to process data to comply with legal obligations, including tax, accounting, and regulatory requirements.
Consent (Article 6(1)(a))
Where we rely on consent — for example, for marketing emails — we will always ask for it explicitly and make it easy for you to withdraw it at any time.
Who We Share Your Data With
Kingsmede Consulting Ltd does not, under any circumstances, share your personal data with any third party. Your information is used solely to respond to your enquiry or to deliver the services you have engaged us for, and remains entirely within our control.
How Long We Keep Your Data
We keep personal data only for as long as necessary for the purpose it was collected, or as required by law.
| Type of Data | Retention Period |
|---|---|
| Enquiry / prospecting data (no contract formed) | 12 months from last contact |
| Client records (where a contract exists) | 6 years after contract end (UK limitation period) |
| Financial and invoicing records | 6 years (HMRC requirement) |
| LinkedIn messages and correspondence | 12 months, or duration of relationship |
| Website analytics data | 26 months (standard analytics retention) |
| Coaching session notes (with client consent) | Duration of engagement + 12 months |
Your Rights Under UK GDPR
As a data subject, you have the following rights in relation to your personal data:
Right of Access
Request a copy of the personal data we hold about you. We will respond within one calendar month.
Right to Rectification
Ask us to correct inaccurate or incomplete personal data we hold about you.
Right to Erasure
Ask us to delete your personal data where we no longer have a lawful basis to hold it.
Right to Restriction
Ask us to restrict how we process your data in certain circumstances, such as during a complaint investigation.
Right to Portability
Where processing is automated and based on consent or contract, request your data in a structured, machine-readable format.
Right to Object
Object to processing based on legitimate interests. We will stop unless we can demonstrate compelling grounds that override your rights.
Right to Withdraw Consent
Where we rely on consent, withdraw it at any time without affecting earlier processing.
How to Exercise Your Rights
Contact us at hello@kings-mede.com. We will respond within one calendar month. There is no charge for reasonable requests.
How We Protect Your Data
We take data security seriously and implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction, or alteration. These include:
- Password protection and access controls on all systems holding personal data
- Use of reputable, UK GDPR-compliant cloud services with appropriate data processing agreements
- Regular review of data held and deletion of data no longer required
- Staff awareness of data protection obligations
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours and, where required, inform affected individuals without undue delay.
Cookies
Our website uses cookies to improve your experience and to collect anonymous analytics data. We use only necessary cookies unless you consent to additional cookies.
You can manage your cookie preferences at any time via your browser settings. Declining non-essential cookies will not affect your ability to use the website.
For full details of the cookies we use, please see our separate Cookie Policy.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in the law, our practices, or our services. The current version will always be available at kings-mede.com/privacy-policy and will show the effective date at the top of the document.
Where changes are material, we will take reasonable steps to notify you — for example by posting a notice on LinkedIn or contacting you directly if you are an active client.
Contact Us
If you have any questions about this Privacy Policy, or about how Kingsmede Consulting Ltd handles your personal data, please get in touch:
| Data Controller | Kingsmede Consulting Ltd |
| hello@kings-mede.com | |
| Website | www.kings-mede.com |
Questions about how we handle your data? We're happy to explain anything in plain language.
Get in touch