Legal

Privacy Policy

Last updated: 6 April 2026

1. Who we are

This website is operated by Dr. Andrew Kingston, trading as AKALYSIS, a statistical, epidemiological, and data science consultancy based in the United Kingdom.

Dr. Andrew Kingston is the Data Controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

You can contact us regarding data matters via the contact form on this website.

2. What personal data we collect

We only collect personal data that you voluntarily provide when you submit the contact form on this website. This may include:

  • →Name (required)
  • →Email address (required)
  • →Organisation or employer (optional)
  • →Type of enquiry (optional)
  • →Your message (required)

We do not use tracking cookies, advertising pixels, or behavioural analytics. This website uses Vercel Analytics, which collects anonymous, aggregated traffic data (page views, country-level location, device type) and does not use cookies or track individual users.

3. How we use your personal data

We use the information you submit solely to:

  • →Respond to your enquiry
  • →Arrange and conduct an initial consultation
  • →Manage any resulting consultancy engagement

We will never sell, rent, or share your personal data with third parties for marketing purposes. We will not add you to any mailing list or contact you for any purpose other than responding to your enquiry.

4. Legal basis for processing

We process your personal data under the following legal bases under Article 6 of UK GDPR:

Legitimate interests (Article 6(1)(f))

It is in our legitimate interest as a consultancy to receive and respond to enquiries from potential clients. We have considered this against your interests and rights and are satisfied that our legitimate interests are not overridden.

Pre-contractual steps (Article 6(1)(b))

Where your enquiry relates to entering into a consultancy contract, processing is necessary to take steps at your request prior to entering into that contract.

5. Data processors and third parties

We use the following third-party services to operate this website. Each acts as a data processor under our instruction and is bound by appropriate data processing terms:

Resend

Used to deliver contact form submissions to us by email. Your name, email address, and message are transmitted through Resend's infrastructure. Resend is compliant with UK GDPR and processes data under Standard Contractual Clauses. Data is not retained by Resend beyond delivery. Resend Privacy Policy.

Vercel

This website is hosted on Vercel's global edge network. Vercel processes web request data (IP addresses, headers) to serve pages. Vercel Analytics collects anonymous, aggregated usage statistics only — no personal data is retained. Vercel Privacy Policy.

Both Vercel and Resend are US-based companies. Data transfers to the US are made under appropriate safeguards (Standard Contractual Clauses) in accordance with UK GDPR Chapter V.

6. How long we keep your data

We retain personal data only for as long as necessary:

  • →Enquiries that do not lead to an engagement — retained for up to 6 months, then securely deleted.
  • →Enquiries that result in a consultancy engagement — retained for the duration of the engagement and up to 7 years thereafter, as required for accounting and legal purposes under UK law.

7. Your rights under UK GDPR

You have the following rights in relation to your personal data. To exercise any of them, please contact us via the contact form. We will respond within one calendar month.

Right of access

Request a copy of the personal data we hold about you.

Right to rectification

Ask us to correct inaccurate or incomplete data.

Right to erasure

Ask us to delete your data ("right to be forgotten"), where no legal obligation requires us to retain it.

Right to restriction

Ask us to pause processing of your data in certain circumstances.

Right to object

Object to processing based on legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds.

Right to portability

Request your data in a structured, machine-readable format, where processing is automated.

8. Right to complain to the ICO

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection.

ICO website: ico.org.uk  ·  ICO helpline: 0303 123 1113

We would, however, appreciate the opportunity to address your concern directly before you contact the ICO.

9. Cookies

This website does not use cookies for tracking, advertising, or analytics. Vercel Analytics operates without cookies and does not identify individual users. No cookie consent banner is required.

Your browser may store technical session data (such as cached assets) as a standard part of how the web works. This is not personal data and is outside the scope of this policy.

10. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top of this page will reflect any changes. Continued use of this website after a change constitutes acceptance of the updated policy.

Data protection queries

For any questions about this privacy policy or how we handle your personal data, please use our contact form. Please mark your message with the subject “Data Protection Enquiry” so we can prioritise your request.