Introduction 

At JAH Consultancy we believe no-one should have their privacy ignored. This notice applies to the JAH Consultancy website. We’ll cover:

• who we are 
• the information we collect 
• how we use personal information 
• the legal basis for processing personal data 
• when we share personal data 
• where we store and process personal data 
• how we secure personal data 
• how long we keep personal data 
• your rights in relation to personal data 
• use of automated decision-making and profiling 
• how you can contact us 
• use of cookies and other technologies 
• linking to other website and third-party content
• We know this information is not the most thrilling read, but it is important.

Who we are 

JAH Consultancy Ltd is the data controller. The company’s representative is Janice Hannaway. 

You can contact her via: janice@jahconsultancy.co.uk

Information we collect 

We do not collect personally-identifiable information from people who browse our website. 

We will collect some personal data if: 

• you email us 
• we work for you

JAH Consultancy may record anonymous data from visitors to our website. Information we collect may include: 

• the pages you visit 
• the name of your internet service provider 
• the website that you use to link to our site 
• other interests you have 
• basic demographic information 
• the websites that you visit from our site 
• your IP address 

We use this data for statistical purposes only. Individual users remain anonymous. We use this information to: 

• help improve the content of the site
• compile aggregate statistics about individuals using our site for internal market research purposes

How we use personal information 

If you contact us, we use your personal data (name, email address, phone number) to communicate with you. 

If we work for you, we will send an invoice and need to keep records. This may include your name, email address and correspondence address.

The legal basis we have for processing personal data 

We only process your personal data where you have given consent or on a contract basis. This would be as a result of you emailing or phoning us (consent) or engaging us in some work (contract). 

When we share personal data 

We treat personal data confidentially. We only share it when we need to, so that we can carry out our business. For example, communicating with you via email and keeping financial records. 

Where we share your personal data with third parties, we require them to:

• respect its security 
• treat it according to the law 

We only allow third parties to process your personal data:

• for specified purposes 
• according to our instructions

Where we store and process personal data 

We operate from the UK. Some of our third-party service providers are from outside the European Economic Area (EEA). Transfers of personal data outside of the EEA are only allowed if they meet certain criteria. 

If we transfer your personal data out of the EEA, we try to make sure at least one of these provisions is in place:

• the European Commission has approved the country as providing an adequate level of protection 
• we may use specific contracts, codes of conduct, or certification mechanisms approved by the European Commission 
• for US providers, that they are part of EU-US Privacy Shield 

If none of these options are available, we may request your consent to the specific transfer. You do not have to agree and can withdraw your consent at any time.

How we secure personal data 

We take the security of your personal data seriously. To help protect your personal data, we do our best to: 

• protect your data against accidental loss 
• prevent unauthorised access, use, destruction or disclosure 
• make sure there is business continuity and disaster recovery 
• restrict access to personal information 

For example, we do not share passwords to our accounts and computers, we also keep backups.

How long we keep personal data

We only keep your data for as long as we need to. For example, during an engagement or discussion about engaging us. 

For tax purposes, we have to keep records for 6 years after an engagement with a client has ended. 

If you contact us but decide not to go ahead with our services, we’ll delete your emails and any other records after 6 months.

Your rights in relation to personal data 

Under the GDPR, you have the right to:

• access personal data that we hold about you 
• request the correction or deletion of your personal data 
• withdraw your consent for us to process your personal data 
• receive your personal data in a structured, commonly used and machine-readable format (data portability) 
• request the restriction or suppression of your personal data 
• object to the processing of your personal data

You can find out more about your rights regarding personal data from the Information Commissioner’s Office (ICO).

Use of automated decision-making and profiling 

We do not use profiling or other automated decision-making. 

How you can contact us

All the ways you can contact us: 

Email: janice@jahconsultancy.co.uk 

Phone: 07950 340 556 

Post:

Use of cookies and other technologies 

Cookies are small text files placed on your computer or device by our site. When you visit our website, we may assign your computer one or more cookies to: 

• help with access to our website facilitate 
• personalise your online experience 
• record information about your visit 

We also may collect information about your online activity on our website, such as:

• the web pages you visit 
• the links or advertisements you click on 
• other actions you take while on our website 

The cookies do not store any Personally Identifiable Information (PII) about you. 

Most browsers automatically accept cookies. You can usually change your browser setting to decline cookies. If you choose to decline cookies, some of the features and services of our website may not work as intended. 

We also use cookies for purposes such as: 

• maintaining continuity during an online session 
• gathering data about the use of our site 
• monitoring online promotions 
• anti-fraud and information security purposes 

You can withdraw your consent for cookies at any time.