Privacy Policy

Last updated: 14/08/2026

KC Resilience Advisory (“KCRA”, “we”, “us” or “our”) is committed to protecting your privacy and handling personal information responsibly, lawfully and transparently.

This Privacy Policy explains how we collect, use, store and protect personal information when you visit our website, contact us, make an enquiry, engage our services, attend or participate in our training, advisory or simulation programmes, or otherwise communicate with us.

This policy applies to the website www.kcra.co.uk and to personal information processed by KCRA in connection with its consultancy, advisory, training and professional development services.

Who we are

KC Resilience Advisory provides specialist advisory, training, simulation and consultancy services to organisations, institutions and professionals.

For data protection purposes, the data controller is:

KC Resilience Advisory

Operating under STKC Consulting Ltd

71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ

Email: HQ@kcra.co.uk

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us using the details above.

The information we collect

We may collect and process the following types of personal information:

Information you provide to us

This may include:

• your name;

• job title and organisation;

• email address and telephone number;

• professional contact details;

• information contained in enquiries or correspondence;

• information provided when arranging a meeting, consultation, training session or advisory engagement;

• information provided in connection with attendance at a programme, workshop, simulation or event;

• dietary, accessibility or reasonable adjustment information, where relevant to participation in an event or training session;

• billing, invoicing or payment-related information, where applicable.

Information about clients, delegates and participants

Where KCRA provides training, simulation, advisory or consultancy services to an organisation, we may receive information about individuals involved in that engagement. This may include names, roles, contact details, attendance information, participation details, feedback, evaluation responses and any information reasonably required to deliver the relevant service.

Special category data

In limited circumstances, we may process more sensitive personal information, known as special category data. This may include information about health, disability, accessibility requirements, dietary requirements that reveal religious belief, or information shared in the context of training, advisory work, workplace culture, discrimination, safeguarding or professional development.

We will only process special category data where necessary and where we have a lawful basis and an additional condition under data protection law, such as your explicit consent, employment/social protection obligations where relevant, or where processing is necessary for the establishment, exercise or defence of legal claims.

Website and technical information

When you visit our website, we may collect limited technical information, including:

• IP address;

• browser type and version;

• device information;

• pages visited;

• time and date of visits;

• referring website or search terms;

• cookie and analytics information, where applicable.

This helps us understand how visitors use the website and improve its functionality and content.

How we collect personal information

We may collect personal information when:

• you contact us through the website, by email, phone, social media or other channels;

• you make an enquiry about KCRA’s services;

• your organisation engages us to provide advisory, consultancy, training or simulation services;

• you attend or participate in a KCRA programme, workshop, meeting or event;

• you subscribe to updates or request information from us;

• you provide feedback or complete an evaluation form;

• you visit or interact with our website.

We may also receive personal information from your employer, organisation, professional representative, event organiser, or another person arranging training or consultancy services on your behalf.

How we use your personal information

We may use your personal information for the following purposes:

• to respond to enquiries and communicate with you;

• to provide information about our services;

• to arrange meetings, calls, consultations, workshops, training, simulations or events;

• to deliver advisory, consultancy, training and professional development services;

• to manage client relationships and engagements;

• to tailor training or advisory content to the needs of a client or participant group;

• to process invoices, payments and administrative records;

• to request or review feedback;

• to improve our website, services and communications;

• to comply with legal, regulatory, tax, accounting or professional obligations;

• to protect our legitimate business interests, including record-keeping, dispute resolution and service quality.

Lawful basis for processing

We only process personal information where we have a lawful basis to do so under data protection law. The lawful basis we rely on will depend on the purpose for which we use the information.

Contract

We may process personal information where this is necessary to enter into or perform a contract with you, or to take steps at your request before entering into a contract. This may include arranging and delivering advisory, consultancy, training, simulation or professional development services.

Legitimate interests

We may process personal information where this is necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms.

Our legitimate interests include responding to professional enquiries, managing client relationships, arranging and improving our services, keeping appropriate business records, requesting feedback, and communicating with organisations about services, events or updates that may be relevant to their work.

Consent

We may process personal information where you have given us consent to do so. This may include certain marketing communications, non-essential cookies, or specific uses of information where consent is required.

You can withdraw your consent at any time by contacting us at HQ@kcra.co.uk or, for marketing emails, by using any unsubscribe option provided.

Legal obligation

We may process personal information where this is necessary to comply with legal obligations, including tax, accounting, regulatory or record-keeping requirements.

Special category data

Where we process special category data, such as information about health, disability, accessibility requirements, or other sensitive information, we will only do so where we have a lawful basis and an additional condition under data protection law.

This may include your explicit consent, where processing is necessary for the establishment, exercise or defence of legal claims, or where another lawful condition applies.

Marketing communications

We may use your contact details to send you information about KCRA services, events, publications, updates, or opportunities that may be relevant to your professional interests.

We may contact existing or prospective organisational clients about services, events or updates that we reasonably consider relevant to their professional role or organisation. Where consent is required, we will ask for it before sending marketing communications. You can opt out at any time by contacting HQ@kcra.co.uk or using the unsubscribe link in any marketing email.

We will not sell your personal information to third parties for marketing purposes.

Sharing your information

We may share personal information where necessary with:

• professional advisers, including accountants, lawyers or insurers;

• IT, website, email, hosting, cloud storage or administrative service providers;

• payment, invoicing or accounting providers;

• trainers, consultants, associates or contractors working with KCRA to deliver services;

• event platforms, booking systems or video conferencing providers;

• regulatory authorities, public bodies or law enforcement, where required by law.

Where we use third-party service providers, we take reasonable steps to ensure they handle personal information securely and only process it for authorised purposes.

International transfers

Some of our service providers may process personal information outside the UK. Where this happens, we will ensure that appropriate safeguards are in place, such as UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, and other legally recognised safeguards.

How long we keep your information

We will only keep personal information for as long as necessary for the purposes for which it was collected, including for the purposes of providing our services, managing our relationship with you or your organisation, meeting legal, accounting or reporting requirements, and protecting our legitimate business interests.

The period will depend on the nature of the information and our relationship with you. For example, we may retain:

• enquiry records for a limited period after the enquiry has been resolved, unless the enquiry leads to a client relationship or service engagement;

• client, contract, invoicing and financial records for as long as required for legal, tax, accounting or reporting purposes;

• training, workshop and event records for as long as needed for administration, evaluation, service improvement and appropriate record-keeping;

• feedback and evaluation responses for as long as needed to review and improve our services;

• marketing contact details until you unsubscribe, object to receiving marketing, or ask us to delete your information, unless we have another lawful basis to retain it.

When personal information is no longer required, we will delete it securely or anonymise it

Cookies and website analytics

Our website may use cookies and similar technologies to support website functionality, understand visitor behaviour and improve the user experience.

Cookies are small text files placed on your device when you visit a website. Some cookies are necessary for the website to function properly. Others, such as analytics cookies, help us understand how visitors use the website and improve our content and services.

We may use:

• essential cookies required for website operation;

• analytics cookies to understand how visitors use the website;

• functionality cookies to improve your experience.

Where required by law, we will ask for your consent before placing non-essential cookies on your device.

You can manage or disable cookies through your browser settings, and where a cookie banner is used, through the choices provided on the website. However, disabling some cookies may affect how the website functions.

How we protect your information

We take reasonable technical and organisational measures to protect personal information from unauthorised access, loss, misuse, alteration or disclosure.

These measures may include secure storage, password protection, access controls, appropriate IT systems, limited access to personal data, and using reputable service providers.

However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

Your rights

Under data protection law, you may have the right to:

• request access to the personal information we hold about you;

• ask us to correct inaccurate or incomplete information;

• ask us to delete your personal information in certain circumstances;

• ask us to restrict how we use your information;

• object to processing based on legitimate interests;

• withdraw consent, where processing is based on consent;

• request transfer of your personal information in certain circumstances;

• complain to the Information Commissioner’s Office.

To exercise any of these rights, please contact us at HQ@kc-ra.com‍ ‍

Responding to requests

We will usually respond to rights requests within one month. In some circumstances, this period may be extended where permitted by law. We may need to verify your identity before responding to a request.

Complaints

If you have concerns about how we handle your personal information, please contact us first so that we can try to resolve the issue.

You also have the right to complain to the Information Commissioner’s Office, the UK regulator for data protection.

Website: www.ico.org.uk

Telephone: 0303 123 1113

Automated decision-making

We do not use your personal information for automated decision-making or profiling that produces legal or similarly significant effects.

Links to other websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices, content or security of those websites. You should read the privacy policy of any external website you visit.

Changes to this policy

We may update this Privacy Policy from time to time. Any updates will be posted on this page with a revised “last updated” date.

KCRA Cookie Policy

Last updated: 14/08/2026

This Cookie Policy explains how KC Resilience Advisory (“KCRA”, “we”, “us” or “our”) uses cookies and similar technologies on our website, www.kcra.co.uk.

This policy should be read alongside our Privacy Policy, which explains how we collect, use and protect personal information.

What are cookies?

Cookies are small text files that are placed on your device when you visit a website. They allow a website to recognise your device and store certain information about your visit.

Cookies can be used to make a website work properly, remember your preferences, understand how visitors use the website, and improve the user experience.

Similar technologies may include pixels, tags, scripts, local storage or other tools that store or access information on your device.

How we use cookies

We may use cookies and similar technologies to:

• make our website function properly;

• keep the website secure and reliable;

• remember choices or preferences you have made;

• understand how visitors use our website;

• improve our website, content and services;

• measure the effectiveness of our communications or website content.

We do not use cookies to sell your personal information.

Types of cookies we may use

Essential cookies

Essential cookies are necessary for the website to work properly. They may be used for basic functions such as page navigation, security, load balancing, or remembering cookie preferences.

These cookies do not usually require consent because they are necessary for the operation of the website.

Analytics cookies

Analytics cookies help us understand how visitors use our website, such as which pages are visited, how long visitors spend on the site, and whether users experience any errors.

This information helps us improve the website and make our content more useful.

Where required by law, we will ask for your consent before using analytics cookies.

Functionality cookies

Functionality cookies allow the website to remember choices you make, such as display preferences or other settings, to improve your experience.

Where required by law, we will ask for your consent before using functionality cookies.

Third-party cookies

Some cookies may be placed by third-party services used on our website, such as website analytics providers, embedded content providers, video platforms, scheduling tools, or other service providers.

Third-party providers may use cookies or similar technologies in accordance with their own privacy and cookie policies.

Where required by law, we will ask for your consent before third-party non-essential cookies are placed on your device.

Managing cookies

You can manage or disable cookies through your browser settings. Most browsers allow you to block cookies, delete existing cookies, or receive a warning before cookies are placed on your device.

Where our website uses a cookie banner or cookie preference tool, you can also use it to accept, reject or manage non-essential cookies.

Please note that blocking or disabling some cookies may affect how the website works.

Changes to this Cookie Policy

We may update this Cookie Policy from time to time. Any changes will be posted on this page with a revised “last updated” date.

Contact us

If you have any questions about this Cookie Policy or how we use cookies, please contact us at:

KC Resilience Advisory

Email: HQ@kcra.co.uk