top of page
KA Rice Consulting - M&E and Project Consultancy Logo

Privacy Policy

1. Who I Am

KA Rice Consulting ("I", "me", "my") is a sole-trader monitoring, evaluation and compliance consultancy supporting charities and similar organisations. This policy explains how I collect, use, and protect personal information when you visit the website or get in touch.

​

Data Controller: Kelly Rice, trading as KA Rice Consulting

Contact email: hello@kariceconsulting.co.uk

Office:  KA Rice Consulting, Clyde Offices, 48 West George Street, Glasgow, G2 1BP.

ICO Registration Reference: ZC224563

​

2. What Information I Collect

Information you give me

  • Name and contact details (email address, and phone number if provided)

  • Organisation name and role, where relevant

  • Details of your enquiry, including which package or service you're interested in

  • Any information you choose to share in messages or during calls/meetings


Information collected automatically

  • Basic website usage data via Wix's built-in analytics (e.g. pages visited, general location, device/browser type)

  • Cookies used to operate the website and, where enabled, to understand site usage — see Section 7

3. How I Use Your Information

I use the information collected to:

  • Respond to enquiries and provide quotes for my services

  • Deliver consultancy services under an agreed Scope of Work

  • Manage my client relationships, including invoicing and record-keeping

  • Meet my legal and accounting obligations

  • Improve my website and services

4. Legal Basis for Processing

Under UK GDPR, I rely on the following legal bases:

  • Contract — where processing is necessary to deliver services you've engaged me for

  • Legitimate interests — for responding to enquiries and general business administration, balanced against your rights

  • Legal obligation — for retaining financial records as required by HMRC

  • Consent — where you've opted in to marketing communications or non-essential cookies (you may withdraw this at any time)

5. Client Data I Process on Your Behalf

Where I'm engaged to support your monitoring, evaluation, or reporting work, I may handle data your organisation provides to me (such as beneficiary data within reports, surveys, or datasets). In this context, I act as a data processor on your instructions, and your organisation remains the data controller for that information. Handling of this data is governed by the confidentiality and data protection terms in my Terms & Conditions or Scope of Work, not by this website policy.

6. Sharing Your Information

I do not sell your information. I may share limited data with:

  • Service providers who support my business operations (e.g. Wix for website hosting, my accounting software provider, and email/calendar tools)

  • Professional advisors (e.g. my accountant), where necessary

  • Authorities, where required by law

I do not transfer personal data outside the UK/EEA except where my service providers do so under appropriate safeguards (e.g. standard contractual clauses).

7. Cookies

My website, built on Wix, uses cookies necessary for the site to function, and may use additional cookies for analytics if enabled. You can control non-essential cookies through the cookie banner on the site or your browser settings.

8. How Long I Keep Your Information

  • Enquiry details from non-clients: up to 12 months, unless you ask me to delete it sooner

  • Client contract and financial records: 6 years, in line with HMRC requirements

  • Project-related data (one-off projects): kept for up to 24 months after the project ends, then securely deleted, unless otherwise agreed

  • Project-related data (ongoing or retainer clients): kept for as long as we're working together, then for up to 24 months after that relationship ends, so I can maintain continuity across projects

  • Beneficiary or survey data you've shared with me as part of a project: deleted within 3 months of the project ending, unless you ask me to delete it sooner

9. Your Rights

Under UK GDPR, you have the right to:

  • Access the personal data I hold about you

  • Ask me to correct inaccurate data

  • Ask me to delete your data, where applicable

  • Object to or restrict certain processing

  • Request a copy of your data in a portable format

  • Withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, contact me at hello@kariceconsulting.co.uk 

10. Keeping Your Information Secure

I take reasonable technical and organisational steps to protect your information, including secure storage, access controls, and use of reputable service providers. I store client and business data using encrypted, access-controlled cloud storage, and take care to keep sensitive project data separate between clients. No method of transmission or storage is completely secure, but I work to protect your data appropriately for the nature of a small consultancy handling sensitive charity-sector information.

11. Complaints

If you have concerns about how I handle your data, please contact me first at hello@kariceconsulting.co.uk so I can try to resolve it. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

12. Changes to This Policy

I may update this policy from time to time, for example to reflect new tools I use or changes in law. 

​

Last updated: August 2026

bottom of page