Privacy notice

If we've emailed your business about its website, posted it a card with a homepage we designed for it, or you've sent us an enquiry through one of our pages or by message on Facebook or Instagram, this page explains what we hold about you, where it came from, why we use it and how to make us stop.

Who we are

KRM Solutions is a trading name of Kiel Malpass, a sole trader in Bolton. He is the controller of the information below. Contact: info@krmsolutions.uk, or post to the address at the foot of this page.

What we hold and where it comes from

From your business's website: the business name, the email addresses and phone numbers it shows, and any staff names shown next to them. We also check how the site works (for example whether a phone number can be tapped) and take phone and desktop screenshots of the homepage.
From Companies House: the company's name, number, status, type, nature of business, registered office address and the names of its current directors, so we only ever email limited companies, LLPs and PLCs, so we can post a card to the company, and so we know who to ask for if we phone.
From OpenStreetMap: some business names, addresses, phone numbers and website addresses.
From Google PageSpeed Insights: Google's speed and accessibility measurements of the website.
From Google Maps: whether Google's listing for the business shows a website, so we only post cards to businesses without one. We keep only Google's reference number for the listing and our yes or no.
From the page our card links to: the email address, phone number or message you choose to leave there, and when the page was opened. We don't record who opened it or from where.
From photos you email us: if we sent your business a card and you email us photos of your work, we keep the photos, with the location and camera details removed, to design homepages with them, and we show those designs only on your card's private page. If you don't become a client, we delete them within 12 months, like the rest.
From our enquiry forms: what you type into the form on our /redesign or /new-website page. See If you send us an enquiry.
From messages you send us on Facebook or Instagram: your name or username there and what you write. See If you send us an enquiry.

We don't buy lists, and we don't use any information that isn't published by you or on a public register, or that you haven't given us.

Why we use it

To review a business's website, design an example of how its homepage could look, and email the business once to offer our website service. Our lawful basis is legitimate interests: offering a relevant service to a company, at an address it publishes for enquiries, with a clear way to say no. Email marketing law lets us email companies this way as long as every email says who we are and how to opt out. We never email sole traders or partnerships without their consent.

We may also phone a business, at the number its own website shows, to offer the same service. Before we call, we check the number against the Telephone Preference Service and Corporate TPS registers and our own "do not contact" list, and we don't call numbers on them. We never hide our number when we call. Our lawful basis is legitimate interests, as above. If you tell us not to call again, we won't.

If a business has no website, we may design a homepage for it and post one card to its business address (the registered office for a company) to offer the same service. The law doesn't require consent for marketing by post; our lawful basis is legitimate interests, and every card says who we are and how to stop. If you leave your details on the page the card links to, we use them only to reply to you.

Each review page, example homepage and card page has a private web address and asks search engines not to list it.

If you send us an enquiry

The forms on our homepage and our /redesign and /new-website pages ask for an email address or phone number and, depending on the page, your website and your name, or your business's name, what it does and your town. We also record when you sent it and the campaign labels in the link you followed (which of our ads or posts it was, nothing about you). We don't record your IP address with it.

We use it to reply to you, to redesign or design your homepage as you asked, and to talk to you about building your website. Our lawful basis is taking steps at your request before a possible contract with you, and our legitimate interests in answering enquiries and knowing which of our ads work.

If you message our Facebook Page or our Instagram account, for example from one of our ads, the conversation is kept by Meta Platforms Ireland Limited, which runs those apps under its own privacy policy. We copy each message you send, with your name or username there, into our own email so we can answer quickly, and we use it the same way and on the same basis as a form enquiry.

If you text our number, 07507 321242, we receive your number and your message, copy it into our own email so we can answer, and use it the same way and on the same basis as a form enquiry. If you reply STOP, we keep your number on a "do not contact" list so we never text you again.

If you don't become a client, we delete your enquiry, message or text within 12 months of our last contact with you.

We also count visits to those two pages, without cookies: for each visit we keep only the page, the campaign labels in the link and the time. To avoid counting a reload twice, our server holds a scrambled (hashed) form of your IP address and browser details in memory for 30 minutes and never writes it down. Our lawful basis is our legitimate interest in knowing which of our ads work.

Cookies and the Meta Pixel

Apart from the visit statistics below, the pages on krmsolutions.co.uk set one cookie: krm_consent, which remembers your choice below for 180 days.

On the /redesign and /new-website pages we'd like to use the Meta Pixel, code from Meta Platforms Ireland Limited, to see whether our Instagram and Facebook ads lead to enquiries and to show our ads to people more likely to be interested. It only loads if you choose "Accept". Until then, and if you choose "Reject", the pixel doesn't load.

If you accept, Meta's code sets cookies in your browser (_fbp, and _fbc if you came from one of our ads) and sends Meta the address of the page, that you viewed it, whether you sent the form (not what you typed into it), your IP address, details of your browser and device, and Meta's own cookies, which let Meta link the visit to your Facebook or Instagram account. Our lawful basis is your consent.

Meta and we are joint controllers for collecting this information on our page and sending it to Meta, as the EU Court of Justice decided in Fashion ID (case C-40/17). What Meta does with it after that is up to Meta, which is the controller for that and explains it in its privacy policy; Meta may transfer it outside the UK. We only see totals in Meta's ad reports, not who you are.

You can change your mind at any time: tap "Cookie settings" at the foot of either page and choose "Reject". The pixel then stops loading and we remove its cookies from our site. You can also delete cookies in your browser's settings.

Visit statistics

The pages of this site (not the review, example homepage and card pages we make for a business) run HeyCatch, an analytics tool from HeyCatch, Inc. in the USA, so we can see how people find and use the site and improve it. It records the address of each page you view, the page you came from, the campaign labels in the link, the links and buttons you tap (their words, never what you type into a form), your IP address and approximate location, and details of your browser and device. To recognise the same browser from one page to the next, it keeps a random ID in a cookie and in your browser's storage (names starting ph_ and heycatch_) for up to a year.

We use this only for statistics about our own site. UK law lets a site do that without asking first, as long as it tells you and makes it easy to say no. Our lawful basis is our legitimate interest in knowing how our site is used. HeyCatch processes the information for us under its data processing terms and stores it with PostHog, Inc., also in the USA, so it leaves the UK. HeyCatch keeps it while we use its service and deletes it within 2 months after we stop.

If your browser sends a "Do Not Track" signal, we don't count your visits at all. You can also block or delete cookies in your browser's settings.

Who helps us

Anthropic (USA): its AI models help write each review and the example homepage from the website's text and screenshots, and any photos you send us.
Google: our email (Google Workspace), the PageSpeed measurements and the Maps listing check.
imail comms limited (UK): prints and posts our cards, using the card and the business address only.
ClickSend: carries text messages to and from our number.
HeyCatch (USA): our visit statistics.
Fasthosts (UK): the server where our database and website are kept.

They process the information for us under their data processing terms. We don't sell or share it with anyone else.

How long we keep it

If you don't become a client, we delete your details within 12 months of our email, call or card, anything you left on the card's page within 12 months of your last message, and an enquiry from one of our forms, a message on Facebook or Instagram, or a text within 12 months of our last contact with you. If you ask us to stop, we keep only your email address, phone number, domain or postal address on a "do not contact" list, so we never contact you again.

Your rights

You can ask for a copy of what we hold, ask us to correct or delete it, or object to us using it. An objection to marketing always wins: tell us on the phone, reply "unsubscribe" to our email, tap "Don't post me anything else" on the page our card links to, or email info@krmsolutions.uk, and we'll stop. To withdraw your consent to the Meta Pixel, use "Cookie settings" at the foot of the /redesign or /new-website page. To stop us counting your visits, use "Stop counting my visits" under Visit statistics. If you're unhappy with how we've handled your information, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Last updated 2 November 2026.

Email us Back to the home page