Privacy notice
Last updated 6 November 2026
Who we are
This notice explains how Kestrel Research Ltd uses personal data. We are the data controller for the information described here.
- Company
- Kestrel Research Ltd, registered in England and Wales, company number 14204129
- Registered office
- The Pines, 3 Elm Drive, Norwich Road, Besthorpe, Attleborough, Norfolk NR17 2FL
- Contact
- hello@kestrelresearch.co.uk
This website
The site does not use cookies, analytics or advertising trackers, and it loads no content from third parties. Fonts are served from our own domain.
The site is hosted by Cloudflare. Like any web host, Cloudflare processes technical information about each visit, such as your IP address, browser type and the page requested, so that it can deliver the site and protect it from abuse.
When you contact us
The enquiry form on our site does not send or store anything itself. It opens your own email program with your message filled in, and nothing reaches us until you press send there.
When you email us, we receive your name, email address and anything you choose to include, such as your organisation and the details of your project. We use this only to reply to you and, if you ask, to prepare a proposal.
Clients and research participants
For clients, we keep business contact details and the information needed to deliver and invoice the work.
If you take part in an interview or survey for one of our projects, we give you a separate notice at that time, explaining what we collect, why, and how long we keep it.
Our lawful bases
- Replying to enquiries: our legitimate interest in responding to people who contact us, or steps you ask us to take before entering into a contract.
- Delivering client work: performance of a contract.
- Keeping financial records: compliance with our legal obligations.
Who we share data with
We do not sell personal data or use it for marketing lists. We share it only with service providers who help us run the business, under contracts that require them to protect it:
- Cloudflare: website hosting and routing of email sent to our domain.
- Google: the mailbox where our email is received and stored.
These providers may process data outside the UK, including in the United States. Where they do, the transfer is covered by safeguards recognised under UK law, such as the UK–US data bridge or the International Data Transfer Addendum.
How long we keep it
- Enquiries that do not lead to work are deleted within 24 months of our last contact.
- Client and financial records are kept for six years after the end of the financial year they relate to, as required for UK company records.
Your rights
Under UK data protection law you can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or transfer it to someone else. You can also object to our use of it. To make a request, email hello@kestrelresearch.co.uk. We will reply within one month.
Complaints
If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.
Changes to this notice
If we change how we use personal data, we will update this page and the date at the top.