Privacy Notice

Kris Pal-Szabo, sole trader · 145 Joanmount Park, Belfast, Northern Ireland, BT14 6PG, United Kingdom · kp@palsabo.com · Last updated July 2026

1. Who is responsible for your data

Kris Pal-Szabo ("we") is the data controller for personal data processed in connection with our consulting services and this website (palsabo.com). Contact: kp@palsabo.com.

2. What we collect

• Business contact details - name, role, company, email, phone - of client and prospect personnel, including what you submit through the intake form.
• Engagement information - information you or your company provide for the work, which may include marketplace account data, registration and compliance records, and correspondence. Where account access is agreed, credentials are shared through the method agreed with you and used only for the engagement.
• Billing information - invoicing details and payment records. Card payments are processed by Stripe; we do not receive or store card numbers.
• Website basics - this site sets no advertising trackers. Hosting-level aggregate statistics may be collected by our hosting provider.

3. Why we process it and the legal bases

• To respond to enquiries, deliver engagements and administer our client relationship - performance of a contract, and steps taken at your request before a contract.
• To contact prospective business clients about relevant services, and to use engagement references as permitted by our Terms - legitimate interests (B2B). You can object at any time.
• To keep accounting and tax records - legal obligation.

4. Who receives it

Service providers who support the business: payment and banking providers (Stripe, Wise), website hosting (Cloudflare), email and document services (Google Workspace), and form processing (Google Forms). They process data under their own safeguards and our instructions. We do not sell personal data. Where a provider processes data outside the UK/EEA, recognised transfer safeguards (such as adequacy decisions or standard contractual clauses) apply.

5. How long we keep it

Engagement and billing records: 6 years after the end of the tax year they relate to (tax law). Prospect contact details: until you object or the details are no longer relevant. Engagement working materials: deleted or returned on request after the engagement closes, subject to the record-keeping obligations above.

6. Your rights

You have the rights provided by UK data protection law, including access, rectification, erasure, restriction, portability, and objection (including to direct marketing). To exercise them, contact kp@palsabo.com. You can also complain to the Information Commissioner's Office (ico.org.uk).