Privacy notice

Who we are

JCT EHS Limited is the controller for the information described here. We are registered in England and Wales under company number 07992254, with our registered office at Bridge Innovation Centre, Pembrokeshire Science and Technology Park, Pembroke Dock SA72 6UN.

Company

JCT EHS Limited (company no. 07992254)

Address

Bridge Innovation Centre, Pembrokeshire Science and Technology Park, Pembroke Dock SA72 6UN

Email

[email protected]

Telephone

01834 871099

We are not required to appoint a data protection officer. Enquiries about privacy go to the contact details above.

Information we collect

When you send an enquiry. We collect the name, email address, area of interest and message you enter in the form. You choose what to tell us; only the name, email address and message are required so that we can reply.

When you use the site. Our hosting provider processes technical information such as your IP address, browser type and the pages requested. This is used for security, rate limiting and bot protection, and to produce anonymous traffic statistics. We do not use it to identify you, and we do not combine it with enquiry information.

We do not collect special category information, and we do not knowingly collect information from children. This site is intended for business use.

Why we use it, and our lawful basis

• To reply to your enquiry and discuss work. Our lawful basis is legitimate interests: responding to someone who has contacted a business is within their reasonable expectations and has minimal impact on privacy.
• To keep the site secure and free from spam. Our lawful basis is legitimate interests: protecting the site and our mailbox from abuse.
• To provide services once agreed. Our lawful basis is performance of a contract.
• To meet legal and accounting obligations. Our lawful basis is compliance with a legal obligation.

We do not use your information for marketing, we do not add you to a mailing list, and we do not make automated decisions about you.

Who we share it with

We share information only with the service providers that make this site work, and only as far as necessary:

• Cloudflare — hosting and delivery of the site, bot protection, and delivery of enquiry emails. Cloudflare acts as our processor.
• Google — the Workspace mailbox where enquiries arrive. Google acts as our processor.

We do not sell personal information, and we do not share it with advertisers or data brokers. We may disclose information where the law requires it, or to professional advisers under a duty of confidence.

Where your information is processed

Cloudflare and Google are based in the United States and may process information outside the UK. Where that happens, the transfer is protected by the UK Extension to the EU–US Data Privacy Framework where the recipient is certified, and otherwise by the UK International Data Transfer Addendum to the standard contractual clauses.

How long we keep it

• Enquiries: 24 months from our last contact, then deleted. If we go on to provide services, we keep the related records for six years to meet accounting and tax requirements.
• Security and rate-limiting information: counters expire within minutes. Security information held by our hosting provider is retained for a short period under their standard settings.
• Anonymous traffic statistics: retained in aggregate; these do not identify you.

Your rights

Under the UK GDPR you have the right to:

• ask for a copy of the information we hold about you;
• have inaccurate information corrected;
• ask us to delete information we no longer need;
• ask us to restrict what we do with it;
• object to processing based on legitimate interests;
• ask for information you gave us in a portable format.

To exercise any of these, contact us using the details above. We will respond within one month. There is no charge unless a request is manifestly unfounded or excessive.

Complaints

If you are unhappy with how we have handled your information, please tell us first so that we can try to put it right. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

Do you have to give us information?

No. You are not required by law or contract to provide anything. If you choose not to give us a name, email address or message, we cannot reply to your enquiry.

Changes to this notice

If what we do with personal information changes — for example, when the full website launches with course booking — we will update this notice and change the date at the top before the change takes effect.