Draft copy, awaiting your approval.
Privacy and Cookies
This policy explains what personal information is collected when you use this website or contact me, why it is used, who it is shared with, and the choices and rights you have.
Last updated: [PENDING: date the policy is approved]
Who is responsible for your information
Deniz Kaya Ltd, trading as KAYA Law, is the controller of the personal information collected through this website. The company details are at the end of this page.
Deniz Kaya Ltd’s registration number with the Information Commissioner’s Office is [PENDING: ICO registration number, or confirmation of exemption].
If you go on to instruct a firm for your legal matter, that firm (FDR Law Limited or Woodstock Legal Services Limited, depending on your matter) is also responsible for your information as part of that matter, under its own privacy notice. [PENDING: confirm with each firm how responsibility for client information is shared, and link to each firm’s privacy notice]
What information is collected
- When you use the contact form: your name, telephone number, email address and anything you write in the comments box. All four are required, so that I can reply to your enquiry.
- When you email me: your email address and the content of your email.
- When you visit the website, if you accept analytics cookies: information about how you use the site, such as the pages you visit, how long you stay, the type of device and browser you use and your approximate location (country or region). This information does not tell me who you are.
- When you visit the website, if you accept advertising cookies: information showing whether you reached the site from a Google advert and whether you then contacted me.
- Spam protection: the contact form uses Cloudflare Turnstile to check that messages are sent by a person, not an automated program. It looks at technical information about your browser and device.
Please do not include sensitive details about your matter in the contact form. If more detail is needed, I ask for it once a firm is acting for you.
How your information is used, and why
| What it is used for | The legal reason |
|---|---|
| Replying to your enquiry and sending you a quote | Taking steps at your request before entering into a contract, and my legitimate interest in answering enquiries |
| Keeping a copy of enquiries, so I can follow up and keep proper records | My legitimate interest in running the business properly |
| Protecting the contact form from spam and misuse | My legitimate interest in keeping the website secure |
| Understanding how the website is used, so I can improve it (Google Analytics) | Your consent, given through the cookie banner |
| Measuring whether Google adverts lead to enquiries (Google Ads conversion tracking) | Your consent, given through the cookie banner |
I do not sell your information, and I do not use it for automated decisions about you.
I do not send marketing emails unless you have asked to receive them.
Who your information is shared with
Your information is shared only where needed, with:
- the firm that will act for you (FDR Law Limited or Woodstock Legal Services Limited), if you ask for a quote or go on to instruct;
- website hosting and security: Cloudflare, which hosts this website and provides the spam check on the contact form;
- email: the service that delivers contact form messages to me, Resend, and my email provider, [PENDING: email provider];
- Google: for Google Analytics, Google Tag Manager and Google Ads conversion tracking, only if you accept those cookies.
Some of these providers may process information outside the United Kingdom. Where they do, they are required to protect it to the standard UK data protection law requires, for example through approved contract terms.
How long your information is kept
- Enquiries that do not lead to an instruction: 12 months, then deleted automatically.
- Enquiries that lead to an instruction: kept by the firm acting for you, under its own privacy notice and retention rules.
- Google Analytics data: kept for [PENDING: Google Analytics retention setting, 2 or 14 months].
Your rights
You have the right to:
- ask for a copy of the information held about you;
- ask for incorrect information to be corrected;
- ask for your information to be deleted;
- ask for its use to be restricted, or object to it being used;
- ask for information you provided to be sent to you, or to someone else, in a usable format;
- withdraw your consent at any time, for example to cookies, without affecting anything done before.
To use any of these rights, please contact me using the details at the end of this page. I will respond within one month, as UK data protection law requires.
If you are unhappy with how your information is handled, you can complain to the Information Commissioner’s Office at ico.org.uk. I would appreciate the chance to put things right first.
Cookies
Cookies are small files stored on your device when you visit a website.
Cookies that are always on. These are needed for the website to work, for example to remember your cookie choices. They do not track you.
Cookies you can choose. These are only used if you accept them in the cookie banner. Until you choose, Google Analytics and Google Ads cookies are not set.
| Cookie | Provider | What it does | How long it lasts |
|---|---|---|---|
| Your cookie choices | KAYA Law | Remembers whether you accepted or rejected optional cookies | [PENDING: set when the cookie banner is installed] |
_ga, _ga_* |
Google Analytics | Counts visits and shows how the site is used | Up to 2 years |
_gcl_au and other Google Ads cookies |
Google Ads | Shows whether an advert led to an enquiry | Up to 90 days |
[PENDING: final cookie list, to be checked once tracking and the cookie banner are installed]
Changing your choices. You can change your cookie choices at any time using the cookie settings link at the bottom of every page [PENDING: cookie settings link, added with the cookie banner]. You can also block or delete cookies in your browser settings.
Changes to this policy
If this policy changes, the updated version is published on this page with a new date.
Contact about your information
Please use the contact form, or click below to see the email address.
Company details
Deniz Kaya Ltd is a professional services company registered in England and Wales. Company number: 13285910. Registered office: 93 Sandringham Way, Waltham Cross, Hertfordshire, EN8 8DU. KAYA Law is a trading name of Deniz Kaya Ltd and is not itself regulated.