Privacy Notice & Cookie Information
Last updated: 31 October 2026
This notice explains how K2 Advisory Services handles personal information collected through our website and business enquiries.
1. Who we are
K2 Advisory Services is the trading name of Matthew Barnett, a UK-based sole trader and the controller of personal data collected through this website. For privacy queries, contact enquiries@k2advisoryservices.co.uk. Business correspondence address: Matthew Barnett c/o Diana House, 2 Holt Gardens, London SW17 7FY, United Kingdom.
2. What we collect
When you contact us, we collect your name, email address, organisation (if provided), selected enquiry topic and message. Email correspondence may contain further information you choose to share. Website and security providers may process IP addresses, browser information, request logs and authentication events.
3. Purposes and lawful bases
We process enquiries and maintain professional business relationships under our legitimate interests; take steps towards contracts at your request under contractual necessity where applicable; deliver services under contractual necessity or legitimate interests, depending on the relationship; retain required tax and business records under legal obligations; and protect our website under legitimate interests. We do not automatically add enquirers to marketing mailing lists.
4. Service providers and sharing
Cloudflare provides website delivery, access control and security; Formspree processes website enquiry submissions and email notifications; HubSpot processes website enquiry details in our customer relationship management (CRM) system to help us respond to enquiries and manage business relationships; and Microsoft 365 supports business email and correspondence. The website may submit enquiry information to both Formspree and HubSpot. We may share relevant information with professional advisers or authorities where necessary or legally required. We do not sell personal data.
5. International transfers
Some service providers may process or access personal information outside the UK. Where UK law requires safeguards for restricted transfers, we rely on applicable adequacy regulations or appropriate contractual safeguards. Contact us for further information.
6. Retention
We retain information only for as long as needed for enquiries, business relationships and legal requirements. Our proposed operating policy is to review unsuccessful enquiries and normally delete them within 24 months of the last substantive contact. Client and financial records may need to be retained longer for contractual, legal and tax reasons.
7. Security
We use proportionate access controls and established service providers to help protect personal information. No internet service can guarantee absolute security.
8. Your rights
Depending on the circumstances, you may request access, correction, deletion, restriction, objection or portability of your information. Contact us using the address above. You may complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint/.
9. Cookies and similar technologies
The website's own code does not intentionally set analytics or advertising cookies, and no optional analytics or advertising service is currently integrated. Cloudflare may use cookies or similar technologies needed for website security and, during the private beta, email-based access authentication. These are intended to support essential website operation. Formspree, HubSpot and hosting providers may also receive technical request information associated with form submissions. We do not add HubSpot tracking scripts or advertising cookies as part of this integration. We will review this statement and implement consent controls where required before adding non-essential tracking. You can restrict cookies in your browser, but doing so may prevent beta authentication.
10. Updates
We may update this notice as our services and processing arrangements change. The date at the top indicates the latest revision.