Privacy Policy

1. Introduction

Welcome to JP Reynolds Consultancy Ltd ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or engage our services.

By accessing or using our website, you agree to the terms of this Privacy Policy. If you do not agree with the terms, please do not access the site. We are registered in England and Wales under company number 14334311, with our registered office at 9 Tennal Grove, Birmingham B32 2HP.

2. Information We Collect

2.1 Personal Information

We may collect personal information that you voluntarily provide to us when you:

• Fill out our contact form or request information
• Engage our consulting or research services
• Subscribe to our newsletter or updates
• Participate in research studies or surveys
• Contact us via email, phone, or post
• Attend our events or workshops

This information may include:

• Name and job title
• Organisation name
• Email address
• Telephone number
• Postal address
• Professional qualifications and expertise areas
• Research interests and requirements

2.2 Automatically Collected Information

When you visit our website, we may automatically collect certain information about your device and usage, including:

• IP address and browser type
• Operating system and device information
• Pages visited and time spent on our website
• Referring website or search terms
• Geographic location (country/region level)

3. How We Use Your Information

We use the information we collect for the following purposes:

• To provide our services: Delivering research, consultancy, and advisory services as requested
• To communicate with you: Responding to inquiries, providing quotes, and maintaining professional relationships
• To improve our services: Analysing website usage and client feedback to enhance our offerings
• To send relevant information: With your consent, sharing industry insights, research findings, and service updates
• To comply with legal obligations: Meeting regulatory requirements and maintaining accurate business records
• To protect our interests: Preventing fraud and ensuring the security of our systems

4. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

• Contractual necessity: Processing necessary to fulfil our contract with you or to take steps at your request before entering into a contract
• Legitimate interests: Processing necessary for our legitimate business interests, such as improving our services and maintaining client relationships, provided these interests do not override your rights
• Legal obligation: Processing necessary to comply with our legal obligations, including accounting and tax requirements
• Consent: Where you have given explicit consent, such as for marketing communications (you may withdraw consent at any time)

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your data with:

• Service providers: IT service providers, cloud storage providers, and professional advisors who assist us in operating our business
• Research partners: Academic institutions and research collaborators, only where necessary and with appropriate confidentiality agreements
• Legal authorities: When required by law, court order, or to protect our legal rights
• Business transfers: In connection with a merger, acquisition, or sale of assets, where personal information may be transferred as part of the business

All third parties are required to maintain the confidentiality and security of your personal information and are prohibited from using it for any purpose other than providing services to us.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for data transmission
• Secure cloud storage with access controls
• Regular security assessments and updates
• Limited access to personal data by authorised personnel only
• Confidentiality agreements with all staff and contractors
• Regular data protection training for our team

7. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Our typical retention periods are:

• Client and project information: 7 years after project completion (for legal and professional indemnity purposes)
• Contact form submissions: 2 years, unless a business relationship is established
• Marketing preferences and correspondence: Until you unsubscribe or request deletion
• Website analytics data: 26 months

8. Your Rights

Under GDPR and applicable data protection laws, you have the following rights:

• Right to access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data ("right to be forgotten")
• Right to restrict processing: Request limitation on how we use your data
• Right to data portability: Receive your data in a structured, commonly used format
• Right to object: Object to processing based on legitimate interests or direct marketing
• Right to withdraw consent: Withdraw consent at any time where processing is based on consent

To exercise these rights, please contact us using the information provided below. We will respond to your request within one month.

9. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience. These include:

• Essential cookies: Necessary for website functionality and security
• Analytics cookies: Help us understand how visitors interact with our site (Google Analytics)
• Preference cookies: Remember your settings and preferences

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

10. Third-Party Links

Our website may contain links to third-party websites, including LinkedIn, academic institutions, and research resources. We are not responsible for the privacy practices of these external sites. We encourage you to read their privacy policies before providing any personal information.

11. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such data, please contact us immediately.

12. International Data Transfers

As a UK-based company, we primarily process data within the United Kingdom and European Economic Area (EEA). Where we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically. Significant changes will be notified to you directly where appropriate.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

15. Complaints

If you are not satisfied with our response to your privacy concerns, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues:

Website: www.ico.org.uk
Phone: 0303 123 1113
Address: Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF