Legal
Your data, handled properly.
How Kandidly collects, uses and protects your personal information.
Kandidly Ltd · Version 1.0 · Last updated 17 August 2026
This policy explains what personal information we collect through our website, why we collect it, who we share it with and what you can do about it. We have tried to keep it readable. If anything is unclear, email us and we will explain it.
Kandidly Ltd is a paid media agency registered in England and Wales under company number 11329607. Our registered office is 46 Hide Road, Harrow HA1 4SF.
We are the controller for the personal information described in this policy. That means we decide what is collected and what it is used for, and we are responsible for looking after it.
We are registered with the Information Commissioner’s Office under registration number ZA803893.
You can contact us about anything in this policy at info@kandidly.co.uk, or by writing to us at the address above.
This policy covers personal information we collect through kandidly.co.uk. It does not cover:
If you sign up to our newsletter we collect your email address, and your name if you give it to us.
We use double opt-in. After you sign up we email you to check it was really you, and we only add you to the list once you confirm. We keep a record of when you signed up, where you signed up and the exact wording you agreed to.
Why: to send you newsletters and marketing emails about Kandidly and what we do.
Lawful basis: your consent.
You can withdraw consent at any time by clicking unsubscribe in any email we send you, or by emailing us. Withdrawing consent does not affect anything we did before you withdrew it. We do not pass your details to anyone else for their own marketing.
When you enquire about working with us, we collect your name and email address, together with the information you give us about your business: whether you are ecommerce or lead generation, your monthly paid media spend, the challenges you are facing, how you measure success and your target, where you are in your procurement process, and anything else you choose to add.
Why: to reply to you, work out whether we are a good fit, and put together a proposal if you want one.
Lawful basis: our legitimate interests in responding to people who approach us about our services and in running our business. Where your enquiry moves towards a proposal, we also rely on taking steps at your request before entering into a contract.
If the form offers you the option to receive our marketing emails, we will only send them if you tick that box. That is a separate consent and you can withdraw it at any time.
If you apply to join us through our website, we collect your name, your email address and whatever you tell us about yourself in the form.
Why: to consider you for a role, contact you about your application, and keep a record of how we made the decision.
Lawful basis: our legitimate interests in recruiting for our business.
We do not ask you for equal opportunities or diversity information, criminal record information, or right to work documents through this form. If your application progresses, we will explain separately what else we need and why.
Paid Forward is a podcast hosted by our founder, Raman Verma. If you pitch yourself as a guest through our website, we collect your name, email address, company or brand, role, LinkedIn profile or website, what you would like to talk about, and anything else you add.
Why: to consider your pitch, get back to you, and arrange a recording if we go ahead.
Lawful basis: our legitimate interests in running the podcast and considering the people who put themselves forward for it.
If we invite you on, we will record the episode and publish it on platforms including YouTube, Spotify and Apple Podcasts, and we may use clips from it to promote the episode. We will agree the details with you before we record.
When you visit our website, we and the providers we use may collect your IP address, your device and browser type, the pages you look at, how you arrived, and how you move around the site.
Most of this comes from cookies and similar technologies. We only use the non-essential ones if you agree to them.
Lawful basis: your consent for analytics and advertising technologies. For the small number of technologies that are strictly necessary to keep the site working and secure, we rely on our legitimate interests.
Our Cookie Policy sets out exactly what is used, by whom and for how long.
Where we rely on legitimate interests, we have weighed up what we want to do against your interests, rights and reasonable expectations, and recorded that assessment. You can ask us for a summary of it.
You also have the right to object to processing based on legitimate interests. See section 9.
We only send marketing emails to people who have asked for them. Every email has an unsubscribe link, and unsubscribing takes effect straight away.
We also advertise on platforms such as Google and Meta, and we may show ads to people who have visited our website. This only happens if you accepted marketing cookies. You can change your mind at any time through the cookie settings on our site.
We use a small number of service providers to run the website and our business. They only handle your information to provide their service to us, under a written contract.
We also share information where we have to: with our professional advisers, such as accountants, lawyers and insurers, and with regulators, law enforcement or courts where the law requires it.
Google, Meta and the other advertising platforms are not simply acting on our instructions. For their advertising and measurement products they also use the information for their own purposes, and they are responsible for that use. The links in our Cookie Policy take you to their own privacy information.
We do not sell your personal information.
If we start using a new provider that collects information through our website, we will update this policy first, and where your consent is needed we will ask for it before anything starts running.
Some of our providers are based in the United States or store information there, or process it there, including Webflow, MailerLite, MailerSend, Make, Monday.com, Google, Meta, Microsoft and Cloudinary. This means your information may be transferred outside the United Kingdom.
Where that happens, we rely on one of the following:
Within our own team, access to information submitted through the website is limited to staff based in the United Kingdom.
Newsletter subscribers — Until you unsubscribe. If you have not opened or clicked anything for 24 months we will ask whether you still want to hear from us, and remove you if you do not reply.
Enquiries — 24 months from our last contact with you. If you become a client, your details move into our client records and are kept for the length of the relationship and 6 years after it ends.
Careers applications — unsuccessful — 12 months from the decision, in case something suitable comes up.
Careers applications — successful — Moved into our employment records, which are covered by a separate privacy notice.
Podcast pitches we do not take up — 24 months from the date you pitched.
Podcast guests we record — The signed agreement and the episode are kept for as long as the episode remains published.
Google Analytics data — 14 months.
Cookie consent records — 24 months, so we can show what you agreed to and when.
We may keep information for longer where we have to for legal, tax or insurance reasons, or where it is needed for a claim.
You have the right to:
Not every right applies in every situation. If one does not apply to your request, we will tell you why.
To exercise any of these, email info@kandidly.co.uk. We will respond within one month. If your request is complicated we can extend that by up to two further months, and we will tell you if that happens. We may need to check who you are before we act.
We do not make decisions about you by automated means alone.
If you are unhappy with how we have handled your information, tell us first at info@kandidly.co.uk. We will acknowledge your complaint within 30 days and do our best to put it right.
If you are still not satisfied, you can complain to the Information Commissioner’s Office at ico.org.uk, or by calling 0303 123 1113. You can go to the ICO at any point, but it usually helps to raise it with us first.
We update this policy when what we do changes. The version number and date at the top tell you which version you are reading.
If we make a change that materially affects you, we will make that obvious on the website. If we add a technology that needs your consent, we will ask for it again before it runs.
Kandidly Ltd, 46 Hide Road, Harrow HA1 4SF
info@kandidly.co.uk
Company number 11329607. ICO registration number ZA803893.