Kapinga Consulting
Last updated: September 2026
Kapinga Consulting is a clinical safety and regulatory consultancy operating as Kapinga Ltd, registered in England and Wales (Company No. 16433635), VAT No. 521 2014 58. Our website address is https://kapinga.co.uk.
For the purposes of UK data protection law, Kapinga Ltd is the data controller for personal data collected through this website.
If you have any questions about this policy or how we handle your personal data, please contact us at info@kapinga.co.uk.
When you submit an enquiry through our contact form, we collect your name, organisation, email address, phone number (if provided), your selected area of enquiry, and your message. We use this information to respond to your enquiry and to determine whether we can help with your requirements.
This data is stored in our WordPress content management system and forwarded to our team by email. We use Gmail (Google Workspace) for email processing.
Our website may collect standard technical data including your IP address and browser information for security and spam prevention purposes. This is handled automatically by WordPress and our hosting provider.
Our website uses functional cookies necessary for the site to operate. We do not currently use tracking or advertising cookies. If this changes, this policy will be updated and appropriate consent mechanisms will be put in place.
Pages on this site may include embedded content from third-party services. Embedded content behaves as if you have visited those third-party websites directly, and those services may collect data about you in accordance with their own privacy policies.
We process your contact form data on the basis of legitimate interests — specifically, to respond to enquiries from prospective and existing clients about our clinical safety and regulatory services. Where you become a client, processing is necessary for the performance of a contract.
We do not sell or share your personal data with third parties for marketing purposes.
Your data may be accessed by members of the Kapinga team in the course of handling your enquiry or delivering services. Our team currently includes individuals based in the United Kingdom and, for content and communications support, in Pakistan. Where personal data is accessed from outside the UK, we take steps to ensure appropriate safeguards are in place in accordance with UK GDPR requirements.
We use the following third-party processors who may process data on our behalf:
Google (Gmail / Google Workspace) — email processing and communication
Buffer — social media scheduling and publishing
Hostinger — website hosting
WordPress — content management and contact form storage
Each of these providers operates under their own data processing agreements and privacy policies.
Enquiry data (non-clients): We retain contact form submissions and related correspondence for up to 12 months from the date of enquiry. If no engagement follows, data is deleted after this period.
Client data: Personal data processed in connection with an active or completed client engagement is retained for 6 years following the end of the engagement, in line with standard business record-keeping requirements.
You may request deletion of your data at any time (see Your Rights below), subject to any legal or regulatory obligation to retain it.
Under UK GDPR, you have the right to:
Access the personal data we hold about you
Request correction of inaccurate data
Request erasure of your data, where we are not legally required to retain it
Object to processing based on legitimate interests
Request restriction of processing in certain circumstances
Lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk
To exercise any of these rights, please contact us at info@kapinga.co.uk. We will respond within one calendar month.
We may update this policy from time to time. The date at the top of this page reflects when it was last revised. Continued use of our website following any update constitutes acceptance of the revised policy.
