Privacy & Cookie Policy

Who we are

JLW Solutions is a senior management consultancy operating in the United Kingdom. For the purposes of data protection law, JLW Solutions is the data controller — meaning we determine how and why your personal data is processed. You can contact us about any data protection matter at enquiries@jlwsolutions.co.uk.

What personal data we collect

When you submit the contact form on this website, we collect: your name; your email address; the content of your message; and, if you choose to provide it, the type of work you are enquiring about. We do not collect any special category data (such as health, financial, or biometric information) through this website, and we do not collect data from children.

How we collect your data

We collect personal data only when you actively provide it by submitting the contact form on this website. We do not collect personal data through any other means, such as social media scraping, purchased lists, or third-party data brokers.

Why we process your data and our lawful basis

We process your personal data for one purpose only: to respond to your enquiry. The lawful basis for this processing under Article 6(1)(f) UK GDPR is legitimate interests — specifically, our legitimate interest in communicating with individuals who have chosen to contact us with a business enquiry. We have assessed that this processing does not override your rights and freedoms, as you have initiated contact and would reasonably expect a response. We do not use your data for marketing, profiling, automated decision-making, or any purpose other than responding to your message.

How your data is stored and who has access

Contact form submissions are received and stored via GoDaddy's Inbox service, which we use to manage and respond to enquiries. GoDaddy acts as a data processor on our behalf under a data processing agreement. Your data is held on GoDaddy's secure infrastructure and is not shared with any other third parties, sold, or used for any commercial purpose. GoDaddy may process data in countries outside the UK; where this occurs, appropriate safeguards are in place in accordance with UK GDPR Chapter V requirements.

How long we keep your data

We retain enquiry data for no longer than 2 years from the date of last contact, unless a longer retention period is required to manage an ongoing business relationship. Once the retention period expires, data is deleted or anonymised. You may request deletion at any time before that period ends — see 'Your rights' below.

International transfers

GoDaddy, our data processor, may store or process data outside the United Kingdom. GoDaddy maintains appropriate safeguards for international transfers, including reliance on the UK's International Data Transfer Agreement (IDTA) or equivalent mechanisms where applicable. We do not transfer your personal data to any other countries or organisations.

Your rights under UK GDPR

You have the following rights in relation to your personal data: the right to access a copy of the data we hold about you; the right to rectification if your data is inaccurate or incomplete; the right to erasure ('right to be forgotten') in certain circumstances; the right to restrict processing; the right to object to processing based on legitimate interests; and the right to data portability where processing is based on consent or contract and carried out by automated means. To exercise any of these rights, please contact us at enquiries@jlwsolutions.co.uk. We will respond within one calendar month. You will not be charged for making a request. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

Cookies and similar technologies

This website does not use traditional HTTP cookies. We use browser localStorage — a similar client-side storage technology — for two purposes: (1) to store your analytics consent preference (key: c2_analytics_consent), which records whether you have accepted or declined analytics tracking and expires after 365 days; and (2) standard browser session storage used by the website framework for navigation purposes. Neither entry contains personal data. Under the Privacy and Electronic Communications Regulations 2003 (PECR), we rely on your explicit consent before activating any analytics tracking. You can withdraw consent at any time by clearing your browser's local storage for this site.

Analytics

If you accept analytics tracking via the consent banner displayed on your first visit, this website uses GoDaddy's built-in analytics service (C2 analytics) to collect anonymised data about page views and visitor behaviour. This data is aggregated and does not identify you personally. Analytics tracking is activated only after you give explicit consent in accordance with PECR. You may withdraw consent at any time by clearing your browser's local storage for this site, after which no further analytics data will be collected.

Third-party services

This website does not use Google Analytics, Facebook Pixel, advertising networks, remarketing tags, or any other third-party tracking or behavioural analytics services. The only external service involved in processing personal data is GoDaddy (as described in 'How your data is stored' above). We do not embed third-party social media widgets, fonts served from external CDNs, or any other resources that could result in your data being shared with third parties without your knowledge.

Data security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include using HTTPS encryption for all data transmitted through this website, and relying on GoDaddy's enterprise-grade security infrastructure for data storage. In the unlikely event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours and, where required, notify you directly.

Changes to this policy

We may update this policy from time to time to reflect changes in our practices or in applicable law. The date at the top of this page reflects when it was last revised. We encourage you to review this policy periodically. Where changes are material, we will take reasonable steps to bring them to your attention.

Contact and complaints

If you have any questions about this policy, wish to exercise your data subject rights, or have a concern about how we handle your personal data, please contact us at enquiries@jlwsolutions.co.uk. If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO): ico.org.uk · 0303 123 1113 · Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.