Privacy policy

KD Catering Consultancy
Last updated: October 2026

KD Catering Consultancy (“KD Catering Consultancy”, “we”, “us” or “our”) is committed to protecting and respecting your privacy.

This Privacy Policy explains how we collect, use, store and protect personal information when you visit our website, contact us, make an enquiry, engage our services or otherwise interact with us.

We process personal data in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018.

1. Who We Are

KD Catering Consultancy provides independent catering and hospitality consultancy services to businesses and organisations.

Our services may include operational reviews and audits, catering management support, compliance reviews, food safety and health & safety support, financial and performance reviews, training, waste and stock control, purchasing and menu reviews, and other catering consultancy services.

For the purposes of UK data protection law, KD Catering Consultancy is the data controller where we determine how and why your personal information is processed.

KD Catering Consultancy

Website: www.kdcateringconsultancy.co.uk
Email: info@kdcateringconsultancy.co.uk

2. Personal Information We May Collect

The personal information we collect will depend on how you interact with us.

This may include:

  • your name;

  • job title and organisation;

  • business or personal contact details, including your email address and telephone number;

  • information you provide when making an enquiry;

  • information provided when engaging KD Catering Consultancy to deliver services;

  • correspondence between you and KD Catering Consultancy;

  • information relating to contracts, quotations and services provided;

  • billing and payment information;

  • feedback, testimonials or survey responses;

  • information required to manage our relationship with you or your organisation; and

  • technical information collected when you use our website, such as your IP address, browser type, device information and website usage data.

We will only collect information that is reasonably necessary for the purposes for which it is being processed.

3. Information We May Encounter While Providing Consultancy Services

As part of our consultancy work, we may be given access to information relating to a client's catering operation, employees, contractors, customers or other individuals.

For example, during an operational review or audit we may encounter staff records, training information, absence or staffing information, compliance records or other information containing personal data.

Where this occurs, we will only access and process personal information where it is reasonably necessary to provide the agreed service.

Depending on the circumstances, KD Catering Consultancy may act as a data processor on behalf of the client rather than as the data controller. Where appropriate, the handling of this information will be governed by our contract or a suitable data processing agreement with the client.

Clients remain responsible for ensuring that personal information they provide to us has been collected and shared lawfully.

4. How We Collect Personal Information

We may collect personal information:

  • directly from you when you contact us;

  • when you make an enquiry through our website;

  • when you request a quotation or information about our services;

  • when you or your organisation engage our services;

  • during meetings, telephone calls, emails or other correspondence;

  • while carrying out consultancy, audits, reviews or training;

  • from organisations or individuals authorised to provide information to us;

  • from suppliers and professional advisers; and

  • from publicly available sources where appropriate.

Our website may also collect certain technical information automatically through cookies and similar technologies.

5. How We Use Your Personal Information

We may use personal information to:

  • respond to enquiries;

  • provide quotations and proposals;

  • provide our catering consultancy services;

  • communicate with clients and prospective clients;

  • arrange meetings, site visits, audits, reviews and training;

  • manage our relationship with clients;

  • prepare reports, recommendations and other consultancy documentation;

  • administer contracts and client accounts;

  • issue and process invoices and payments;

  • maintain appropriate business and financial records;

  • improve our services and customer experience;

  • maintain the security and operation of our website and business systems;

  • deal with complaints, queries or disputes;

  • comply with legal, regulatory, insurance and accounting requirements; and

  • protect our legitimate business interests.

Where permitted by law, we may also use your contact information to provide information about KD Catering Consultancy services that we believe may be relevant to you.

You can ask us to stop sending marketing communications at any time.

6. Our Lawful Bases for Processing

Under UK GDPR, we must have a lawful basis for processing personal information.

Depending on the circumstances, we may rely upon:

Contract – where processing is necessary to enter into or perform a contract with you.

Legitimate interests – where processing is necessary for the legitimate operation and development of our business and those interests are not overridden by your rights and interests.

Legal obligation – where we are required to process information to comply with a legal or regulatory obligation.

Consent – where you have given us specific consent to process your information for a particular purpose.

Where we rely upon consent, you may withdraw that consent at any time.

7. Special Category Personal Data

KD Catering Consultancy does not routinely require special category personal data.

However, we recognise that certain information may occasionally be encountered while providing consultancy services, particularly when reviewing operational, staffing, dietary, allergen, health & safety or compliance matters.

Where special category personal data is processed, we will only do so where there is an appropriate lawful basis and an additional condition for processing under data protection law.

We will seek to minimise the collection and use of such information wherever possible.

8. Sharing Personal Information

We do not sell personal information.

We may share personal information where reasonably necessary with trusted third parties, including:

  • IT, website and cloud service providers;

  • accounting and bookkeeping providers;

  • professional advisers, including accountants, insurers and legal advisers;

  • contractors or consultants engaged to support the delivery of our services;

  • payment service providers;

  • government bodies, regulators or law enforcement authorities where required by law; and

  • other third parties where you have authorised us to do so.

Where third-party providers process personal information on our behalf, we take reasonable steps to ensure appropriate contractual and data protection arrangements are in place.

9. Data Security

We take appropriate technical and organisational measures to protect personal information against accidental or unlawful loss, alteration, disclosure, destruction or unauthorised access.

Access to personal information is limited to those who have a legitimate business need to access it.

Although we take reasonable steps to protect personal information, no method of electronic transmission or storage can be guaranteed to be completely secure.

10. How Long We Keep Personal Information

We only retain personal information for as long as reasonably necessary for the purpose for which it was collected, including to meet legal, accounting, contractual and regulatory requirements.

Retention periods may vary depending on the nature of the information and our relationship with you.

When information is no longer required, we will securely delete, anonymise or otherwise dispose of it where appropriate.

11. International Transfers

Some of the technology and service providers we use may process or store information outside the United Kingdom.

Where personal information is transferred internationally, we will take appropriate steps to ensure that the transfer complies with UK data protection law and that appropriate safeguards are in place where required.

12. Cookies and Our Website

Our website may use cookies and similar technologies to ensure the website operates correctly, understand how visitors use the site and improve the user experience.

Some cookies are essential for the operation of the website. Other cookies, such as analytics or marketing cookies, will only be used where permitted by applicable law.

Further information about the cookies used on our website should be provided through our Cookie Policy and/or cookie consent tool.

13. Links to Other Websites

Our website may contain links to third-party websites.

KD Catering Consultancy is not responsible for the privacy practices, security or content of third-party websites. We recommend reviewing the privacy policy of any external website you visit.

14. Your Data Protection Rights

Depending on the circumstances, UK data protection law gives you rights including the right to:

  • request access to the personal information we hold about you;

  • request correction of inaccurate or incomplete information;

  • request deletion of your personal information in certain circumstances;

  • request restriction of processing;

  • object to certain types of processing;

  • request transfer of your information in certain circumstances;

  • withdraw consent where processing is based on consent; and

  • object to direct marketing at any time.

Not all rights apply in every circumstance.

If you wish to exercise any of these rights, please contact us using the details below.

We may need to verify your identity before responding to your request.

15. Complaints

If you have concerns about how KD Catering Consultancy handles your personal information, please contact us first so that we have an opportunity to resolve the matter.

You also have the right to make a complaint to the Information Commissioner's Office (ICO), the UK's independent data protection regulator.

16. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes to our business, services, website, technology or legal obligations.

The latest version will be published on our website and the date at the top of this policy will be updated accordingly.

17. Contact Us

If you have any questions about this Privacy Policy, how we process personal information or wish to exercise your data protection rights, please contact:

KD Catering Consultancy

Email: info@kdcateringconsultancy.co.uk
Website: www.kdcateringconsultancy.co.uk