Privacy Policy

1. Who We Are

JP Compliance Consulting Ltd is the data controller responsible for determining how and why your personal information is used.

2. Personal Information We Collect

The information we collect depends on how you interact with us. It may include:

• Your name and job title
• Your business or organisation name
• Your email address and telephone number
• Your business address or correspondence address
• Information submitted through our website contact form
• Details contained in emails, telephone calls or other correspondence
• Information about your products, projects and compliance requirements
• Quotations, contracts, invoices and payment records
• Technical documents and project materials you provide to us
• Information about how you access and use our website, including device, browser, pages visited and approximate location data

Please avoid submitting confidential, commercially sensitive or special-category personal information through our general website contact form unless it is necessary for your enquiry.

3. How We Collect Your Information

We may collect personal information:

• Directly from you when you contact us
• When you submit an enquiry through our website
• When you request a quotation or engage our services
• During meetings, telephone calls and project discussions
• When you provide documents or project information to us
• Automatically through cookies, Google Analytics, Squarespace analytics and similar website technologies
• From publicly available sources, professional networks, referrals or business directories where appropriate

4. How We Use Your Personal Information

We may use your information to:

• Respond to questions and enquiries
• Understand your business and compliance requirements
• Prepare quotations, proposals and contracts
• Provide compliance consultancy and related services
• Manage client relationships and project communications
• Arrange testing, certification or technical support where instructed
• Issue invoices and maintain financial records
• Manage and improve our website and services
• Protect our business, website and systems against misuse or fraud
• Establish, exercise or defend legal claims
• Meet legal, regulatory, tax and accounting obligations

5. Our Lawful Bases for Processing

UK data protection law requires us to have a lawful basis for processing personal information. The lawful basis used will depend on the circumstances.

Where we rely on legitimate interests, we consider whether our use of your information is necessary, proportionate and balanced against your rights and interests.

Where we rely on consent, you may withdraw your consent at any time. Withdrawing consent will not affect the lawfulness of processing undertaken before it was withdrawn.

6. Who We Share Information With

We do not sell or rent your personal information.

Where reasonably necessary, we may share information with:

• Testing laboratories and technical service providers
• Certification and approval bodies
• Regulatory authorities and government organisations
• Professional advisers, including accountants and legal advisers
• Website, email, IT and cloud service providers
• Squarespace, which hosts and supports our website
• Google, in connection with Google Analytics
• Payment and banking service providers
• Law enforcement bodies, courts or authorities where disclosure is required or permitted by law
• A purchaser, investor or adviser involved in a potential sale, restructuring or transfer of our business

We only share information that is reasonably necessary for the relevant purpose. Where appropriate, third parties are required to protect personal information and process it in accordance with applicable data protection law.

7. Client and Project Information

Our consultancy work may involve product specifications, technical files, test information, certification documents and other commercially sensitive material.

We take reasonable steps to maintain the confidentiality and security of information supplied to us. Project information will only be used for the agreed purpose and may be shared with relevant laboratories, certification bodies, technical specialists or authorities where this is necessary to deliver the services you have requested.

Where additional confidentiality requirements apply, these should be recorded in the relevant consultancy agreement or a separate non-disclosure agreement.

8. How Long We Keep Your Information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet legal, regulatory, accounting and contractual requirements.

Retention periods may vary depending on the nature of the information and our relationship with you. When deciding how long to retain information, we consider:

• The nature and sensitivity of the information
• The purpose for which it was collected
• Whether we continue to have a business relationship with you
• Contractual and professional requirements
• Tax, accounting and other legal obligations
• The need to establish, exercise or defend legal claims

When information is no longer required, we will securely delete it or anonymise it so that it can no longer identify an individual.

9. How We Protect Your Information

We use appropriate technical and organisational measures designed to protect personal information against accidental loss, unauthorised access, alteration, disclosure or misuse.

No website, email service or internet transmission is completely secure. Although we take reasonable steps to protect your information, we cannot guarantee the absolute security of information transmitted online.

10. International Data Transfers

Some of our technology and service providers may process or store personal information outside the United Kingdom.

Where personal information is transferred internationally, we will take reasonable steps to ensure that an appropriate legal safeguard is in place. This may include reliance on adequacy regulations, approved contractual safeguards or another lawful transfer mechanism.

11. Cookies and Similar Technologies

Cookies are small text files or pieces of data placed on your computer, mobile device or browser when you visit a website.

Our website may use:

• Essential cookies: These are required for the website to operate securely and correctly. They cannot normally be disabled through our website.
• Analytics and performance cookies: These help us understand how visitors use the website so we can measure performance and improve its content and usability.
• Functional cookies: These may remember choices or preferences to provide enhanced website functionality.

We use a cookie consent banner to give visitors control over non-essential cookies. Non-essential analytics cookies will only be used where you have provided consent.

You can accept, reject or manage non-essential cookies using the cookie controls displayed on our website. You may also manage cookies through your browser settings, although blocking essential cookies may affect how the website operates.

12. Google Analytics

We use Google Analytics to understand how visitors find and use our website. This helps us assess website traffic, identify popular pages and improve our content and services.

Google Analytics may process information such as:

• Pages viewed and navigation through the website
• The approximate time and duration of visits
• Referring websites or traffic sources
• Browser, operating system and device information
• General or approximate geographic information
• Interactions with website content
• Cookie and device identifiers

Google Analytics is treated as a non-essential analytics service. Analytics cookies will only be placed on your device after you have provided consent through our website cookie banner.

Google may process information outside the United Kingdom. Where this occurs, appropriate legal safeguards will be used in accordance with applicable data protection law.

You can withdraw or change your consent at any time using the cookie preferences control available on the website.

13. Squarespace

Our website is hosted using Squarespace. Squarespace may process technical and usage information required to securely deliver the website, provide website functionality, prevent fraud and provide analytics services.

Squarespace may use essential cookies that are necessary for the website to operate. Where Squarespace analytics or performance cookies are non-essential, they will be managed through the website's cookie consent settings.

14. Contact Forms and Email Enquiries

When you submit an enquiry through our website, we collect the information entered into the form. This may include your name, business name, email address, telephone number and the contents of your message.

We use this information to review and respond to your enquiry, understand your requirements and, where appropriate, prepare a quotation or proposal.

Information submitted through the website may be processed by Squarespace and our email service provider as part of delivering your message to us.

15. Marketing Communications

We may contact existing clients or business contacts about relevant services where we have a lawful basis to do so.

Where consent is required, we will request it before sending marketing communications. You may unsubscribe or object to marketing at any time by contacting us or using any unsubscribe option included in the communication.

Opting out of marketing will not prevent us from sending necessary communications relating to an active enquiry, contract or project.

16. Your Data Protection Rights

Depending on the circumstances, you may have the right to:

• Ask for access to the personal information we hold about you
• Ask us to correct inaccurate or incomplete information
• Ask us to erase your personal information
• Ask us to restrict how your information is used
• Object to certain uses of your information
• Request the transfer of certain information to you or another organisation
• Withdraw consent where processing is based on consent
• Raise concerns about decisions made solely through automated processing, where applicable

These rights are not absolute and may be subject to legal limitations or exemptions.

To exercise a right, please email jpcomplianceconsultingltd@gmail.com . We may need to request information to confirm your identity before responding.

17. Children's Privacy

Our website and services are intended for businesses and professional users. They are not directed towards children, and we do not knowingly collect personal information from children through the website.

18. Links to Other Websites

Our website may contain links to websites operated by other organisations. We are not responsible for the privacy practices, security or content of third-party websites.

We recommend reviewing the privacy information provided by any third-party website before submitting personal information.

19. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to our services, website, technology, business practices or legal obligations.

The latest version will be published on this page and identified by the date shown at the top of the policy.

20. Concerns and Complaints

Please contact us first if you have a question or concern about how we use your personal information. We will do our best to resolve the matter.

You also have the right to raise a complaint with the UK Information Commissioner's Office.