Privacy Policy

Who We Are

MK Agency is a marketing strategy consultancy founded by Menna Kamahy and operating from London, UK. We provide marketing strategy, and brand consulting services to founder-led businesses and growth-stage brands.

For the purposes of data protection law, MK Agency is the data controller of your personal information. Our registered address is:

Data We Collect

We collect personal data in the following ways:

Information you provide directly:

• Name and email address when you contact us via our website or book a call
• Business name, role, and details shared during consultation enquiries
• Any information submitted through contact forms or discovery call bookings
• Communications you send us by email or phone

Information collected automatically:

• Technical data such as your IP address, browser type, and device information
• Pages visited on our website and time spent on each
• Referring URLs and how you found our site
• Cookie and tracking data (see Cookies section below)

We do not knowingly collect data from individuals under the age of 16.

How We Use Your Data

We use your personal data only for legitimate business purposes, including:

• Responding to enquiries and booking discovery calls
• Delivering contracted marketing strategy or consultancy services
• Sending relevant updates, newsletters, or resources (where you have opted in)
• Improving the performance and content of our website
• Complying with legal obligations
• Maintaining internal business records

We will never use your data for automated decision-making that produces legal or similarly significant effects on you without your explicit consent.

Lawful Basis

Under UK GDPR, we rely on the following lawful bases for processing your data:

• Contractual necessity — where processing is needed to fulfil or enter into a contract with you
• Legitimate interests — for example, responding to enquiries, improving our services, and marketing to existing contacts in a reasonable and expected way
• Consent — where you have actively opted in, such as subscribing to our newsletter
• Legal obligation — where we must process data to comply with UK law

Sharing Your Data

We do not sell, rent, or trade your personal data. We may share it with trusted third parties only where necessary:

• Service providers — such as email platforms, calendar booking tools (e.g. Google Calendar), and website hosting services
• Professional advisors — such as accountants or legal counsel, bound by confidentiality
• Analytics tools — to understand website performance (data is anonymised or aggregated wherever possible)
• Legal authorities — if we are required to do so by law or court order

All third parties we work with are required to handle your data in accordance with applicable data protection law.

Data Retention

We keep your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law.

• Enquiry and contact data: up to 2 years from last contact
• Client project data: up to 6 years (in line with UK accounting obligations)
• Newsletter subscribers: until you unsubscribe
• Website analytics: as per third-party tool retention settings (typically 14–26 months)

When data is no longer needed, we delete or anonymise it securely.

Your Rights

Under UK GDPR, you have the following rights:

• Right of access — to request a copy of the data we hold about you
• Right to rectification — to ask us to correct inaccurate data
• Right to erasure — to request we delete your data (subject to legal obligations)
• Right to restrict processing — to limit how we use your data
• Right to data portability — to receive your data in a structured, machine-readable format
• Right to object — to processing based on legitimate interests or for direct marketing
• Right to withdraw consent — at any time, where processing is based on consent

To exercise any of these rights, please contact us at hello@mennakamahy.co.uk. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

Cookies

Our website uses cookies — small files placed on your device — to improve performance and your browsing experience. We use:

• Essential cookies — required for the website to function correctly
• Analytics cookies — to understand how visitors interact with our site (e.g. Google Analytics)
• Preference cookies — to remember your settings or choices

You can control or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our site. Where required by law, we will ask for your consent before placing non-essential cookies.

Security

We take data security seriously. We use appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, alteration, or disclosure. These include secure communications protocols, restricted access controls, and regular security reviews.

No method of transmission over the internet is completely secure, but we continually work to ensure your data is protected to the highest reasonable standard.

Third-Party Links

Our website may contain links to external websites or platforms (such as LinkedIn, Instagram, or Google Calendar). We are not responsible for the privacy practices of these third-party sites and encourage you to review their policies directly.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The most current version will always be published on this page with an updated date at the top. For significant changes, we will notify active clients directly.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or your personal data, please reach out: