Last updated: 13 September 2026
Who we are
Kirsty Harvey trading as Kirsty Nicole Virtual Assistant (“Kirsty Nicole VA”, “we”, “us” or “our”) is a UK-based virtual assistant and business support provider based in Whitehaven, Cumbria. For data protection purposes, Kirsty Harvey is the controller of the personal information described in this notice.
If you have any questions about this Privacy Policy or how your personal information is handled, contact us at info@kirstynicoleva.co.uk.
What personal information we collect
Depending on how you interact with us, we may collect your name, email address, business name, the information you include in an enquiry or contact form, correspondence with us, and information connected with providing services to you if you become a client.
When you use this website, limited technical information may also be collected automatically, including your IP address, browser and device information, pages visited, referral information and cookie or consent preferences.
How we use your information
- To respond to enquiries and arrange discovery calls.
- To take steps at your request before entering into a contract.
- To provide, administer and improve our services.
- To manage client relationships, records, invoices and business administration.
- To keep the website secure and functioning properly.
- To understand website use and performance where you have consented to analytics cookies.
- To comply with legal, tax, regulatory or professional obligations.
- To establish, exercise or defend legal claims where necessary.
Our lawful bases
We only process personal information where we have a lawful basis to do so. Depending on the circumstances, this may be because processing is necessary to take steps at your request before entering into a contract, to perform a contract with you, to comply with a legal obligation, because it is in our legitimate interests to run and protect the business and respond to enquiries, or because you have given consent, including for non-essential cookies where applicable.
Contact forms and enquiries
Our contact form asks for your name and email address and may also collect your business name and anything you choose to include in the enquiry field. We use this information to respond to you and, where relevant, discuss potential services.
Enquiries that do not lead to a client engagement will normally be retained for up to 12 months from the last meaningful contact, unless there is a good reason to retain them for longer, for example where a dispute or legal issue arises.
Client records
If you become a client, we may retain contracts, instructions, correspondence, invoices and related business records for up to six years after the end of the relationship where this is necessary for legal, tax, accounting or claims purposes. Some records may need to be kept for a different period where the law requires it.
Cookies and analytics
We use cookies and similar technologies for essential website functions and, where you choose to allow them, analytics. Non-essential cookies are not intended to be set before you have made a choice through our cookie consent tool. You can review or change your cookie preferences using the cookie controls available on the website.
More information is available in our Cookie Policy.
Who we share information with
We may share personal information with trusted service providers where necessary to operate the business and website, such as website hosting, email, cloud storage, form, analytics, accounting or professional service providers. We only share information that is reasonably necessary for the relevant purpose.
We may also disclose information where required by law, regulation, court order, a competent authority, or where necessary to protect our legal rights.
International transfers
Some service providers may process personal information outside the UK. Where this happens, we take reasonable steps to ensure an appropriate safeguard is in place where required by UK data protection law.
How we keep information secure
We use appropriate technical and organisational measures designed to protect personal information against accidental loss, misuse, unauthorised access, alteration or disclosure. Access is limited to people and service providers who reasonably need it.
Your data protection rights
Depending on the circumstances, you may have the right to ask for access to your personal information, correction of inaccurate information, erasure, restriction of processing, objection to certain processing, data portability, or withdrawal of consent where consent is the lawful basis relied upon.
To exercise a right, email info@kirstynicoleva.co.uk. We may need to confirm your identity before acting on a request.
Complaints
If you have concerns about how your personal information has been handled, please contact us first so we can try to resolve them. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection. More information is available at ico.org.uk/make-a-complaint.
Changes to this policy
We may update this Privacy Policy from time to time to reflect changes to the website, our services, our use of personal information or the law. The latest version will be published on this page with the date it was last updated.