Privacy Policy — Kensho Media

This notice explains what personal data Kensho Media collects when you visit www.kenshomedia.com or get in touch with us, why we use it, who we share it with, and the rights you have under UK data protection law.

---

1. Who we are

Kensho Media is a senior-led SEO, content, and digital PR agency working with brands in high-stakes markets, including iGaming, finance, and health. In this policy, "Kensho Media", "we", "us", and "our" refer to Kenshomedia Limited, a company registered in England and Wales.

For the personal data described here, Kenshomedia Limited is the data controller — meaning we decide why and how your data is processed. Our registration details are:

• Company: Kenshomedia Limited
• Company number: 7580178

If you have any questions about this policy or how we handle your data, the quickest way to reach us is set out in Section 17.

---

2. Scope of this policy

This policy covers personal data we process in connection with our corporate website at www.kenshomedia.com and our day-to-day business — including enquiries, discovery calls, client work, marketing, and recruitment.

It does not cover any separate websites, brands, or client-facing properties we operate or develop under other domains, which are governed by their own privacy notices. Where we act purely as a service provider that processes data on behalf of a client (for example, when we run SEO or content work using a client's systems), that client is the controller and their privacy notice applies — we act as a processor under our contract with them.

---

3. The personal data we collect

We collect personal data in three ways: information you give us directly, information we collect automatically when you use our site, and information we receive from third parties.

Information you give us

• Contact & enquiry details — when you complete a contact form, book a discovery call, or email us: your name, email address, phone number, company, role, and anything you choose to tell us in your message.
• Client & prospect information — if we work together: business contact details, billing information, project requirements, and correspondence.
• Subscription details — if you sign up for our insights or newsletter: your name and email address.
• Recruitment information — if you apply for a role: your CV, contact details, work history, and anything in your application.

Information we collect automatically

• Technical & device data — IP address, browser type and version, operating system, device type, and time-zone setting.
• Usage data — pages you view, how you arrived at our site, links you click, and how long you spend on pages.
• Cookie data — identifiers set by cookies and similar technologies, as described in Section 6.

Information from third parties

• Professional networks — if you connect or interact with us on platforms such as LinkedIn, we may receive limited profile information you have chosen to make available.
• Referrals & analytics — referral data from sites that link to us, and aggregated insight from analytics and advertising platforms.
• Service providers — our hosting, scheduling, and marketing tools may pass us data you submit through them.

We do not seek to collect special category data (such as health, ethnicity, or political opinions) through our website, and we ask that you do not include it in free-text messages.

---

4. How and why we use your data

We only use your personal data where the law allows us to. The table below sets out what we do with your data and the legal basis we rely on for each purpose.

---

5. Our legal bases for processing

Under UK GDPR we must have a lawful basis for each use of your data. We rely on the following:

• Consent — where you have given clear permission, such as subscribing to marketing or accepting non-essential cookies. You can withdraw consent at any time.
• Contract — where processing is necessary to take steps before entering, or to perform, a contract with you.
• Legal obligation — where we must process data to comply with the law, for example keeping financial records.
• Legitimate interests — where processing is necessary for our legitimate business interests (such as running and securing our site, responding to enquiries, and promoting our services), provided these do not override your rights and freedoms. You can object to this — see Section 11.

---

6. Cookies and similar technologies

Cookies are small files placed on your device that help a website function and let us understand how it is used. We use a small number of categories:

When you first visit, our cookie banner lets you accept or reject non-essential cookies, and you can change your choice at any time through [ your cookie-settings link / banner ]. You can also block or delete cookies through your browser settings, though some features may not work as intended.

To confirm: list the specific tools you use here — for example [ Google Analytics 4 ], [ Cloudinary ], and any advertising or scheduling pixels — along with their cookie lifespans. A linked, itemised cookie table is best practice under PECR.

---

7. Who we share your data with

We do not sell your personal data. We share it only where necessary, with the following categories of recipient, under contracts that require them to protect it:

• Hosting & infrastructure providers — who host our website and store our data [ e.g. Google Cloud, Vercel ].
• Media & content delivery — services that store and serve site assets [ e.g. Cloudinary ].
• Analytics & marketing platforms — that help us measure and improve performance [ e.g. Google Analytics ].
• Communication, CRM & scheduling tools — used to manage enquiries, calls, and email [ e.g. email provider, scheduling tool ].
• Professional advisers — such as our accountants, auditors, and lawyers.
• Authorities & acquirers — where required by law, or in connection with a sale or reorganisation of our business.

---

8. International data transfers

Some of our service providers are based outside the United Kingdom, which means your data may be transferred to and stored in other countries. Where we transfer data outside the UK, we make sure it is protected by an appropriate safeguard, such as:

• transfers to countries the UK government has decided provide an adequate level of protection; or
• contractual protections such as the UK's International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses.

You can ask us for more detail about the safeguards we use by contacting us as described in Section 17.

---

9. How long we keep your data

We keep personal data only for as long as we need it for the purposes set out in this policy, then delete or anonymise it. As a guide:

Where the law requires us to keep certain records for a set period, we will retain them for that period even after you ask us to delete other data.

---

10. How we keep your data secure

We take the security of your data seriously and use appropriate technical and organisational measures to protect it against unauthorised access, loss, or misuse. These include access controls, encryption in transit, reputable service providers, and limiting access to data on a need-to-know basis.

No method of transmitting or storing data is completely secure, so while we work hard to protect your data, we cannot guarantee absolute security. If a personal data breach occurs that is likely to affect your rights, we will notify you and the Information Commissioner's Office where the law requires.

---

11. Your rights

Under UK data protection law you have a number of rights over your personal data. These are free to exercise, and we will respond within one month.

• Access — ask for a copy of the personal data we hold about you.
• Rectification — ask us to correct data that is inaccurate or incomplete.
• Erasure — ask us to delete your data in certain circumstances.
• Restriction — ask us to limit how we use your data while a concern is resolved.
• Portability — receive certain data in a reusable format, or have it sent to another provider.
• Objection — object to processing based on legitimate interests, and to direct marketing at any time.
• Withdraw consent — withdraw any consent you have given, without affecting earlier processing.

To exercise any of these rights, contact us using the details in Section 17. We may need to verify your identity before acting on a request.

---

12. Marketing choices

We will only send you marketing where you have agreed to receive it, or where we are otherwise permitted to under the law. Every marketing email includes an unsubscribe link, and you can opt out at any time by using it or by contacting us directly. Opting out of marketing will not affect any service-related messages we need to send you, such as responses to your enquiries.

---

13. Children's privacy

Our website and services are aimed at businesses and professionals, not children. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, please contact us and we will delete it.

---

14. Automated decision-making and profiling

We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing. We may use analytics to understand aggregate audience behaviour and improve our marketing, but this does not single you out for decisions without human involvement.

---

15. Third-party links

Our website and content may link to third-party sites and platforms, including the websites of our clients, partners, and social networks. We are not responsible for the privacy practices of those sites, and we encourage you to read their privacy notices before sharing your data with them.

---

16. Changes to this notice

We may update this policy from time to time to reflect changes in our practices, technology, or the law. When we do, we will revise the "last updated" date at the top of this page, and where changes are significant we will take reasonable steps to bring them to your attention. We encourage you to review this page periodically.

---

17. How to contact us, and complaints

If you have any questions about this policy, want to exercise your rights, or wish to make a complaint about how we handle your data, please get in touch:

• Data controller: Kenshomedia Limited
• Privacy contact: [ privacy@kenshomedia.com ]

We hope to resolve any concern you raise. If you are not satisfied, you also have the right to complain to the UK's supervisory authority for data protection:

• Supervisory authority: Information Commissioner's Office (ICO)
• Website: ico.org.uk
• Helpline: 0303 123 1113

---

© 2026 Kensho Media. All rights reserved.