Privacy Policy
How JCWT Consulting Ltd collects, uses and protects your personal data.
Last updated: September 2026
1. Who we are
JCWT CONSULTING LTD ("we", "us", "our") is the data controller responsible for your personal data. We provide business planning, funding support, and financial consulting services to individuals and businesses across the United Kingdom.
If you have any questions about this policy or how we handle your data, please contact us at: [email protected]
| Purpose | Lawful basis |
|---|
2. What personal data we collect
Depending on how you interact with us, JCWT CONSULTING LTD may collect and process the following categories of personal data:
- Names, email addresses, telephone numbers and business contact details.
- Company names, roles and information about the business.
- Information entered into contact and consultation forms.
- Booking details and service requirements.
- Messages, emails and other customer communications.
- Documents and attachments voluntarily supplied.
- Information required to assess or provide business-planning, forecasting, funding-support or utility-review services.
- Website usage, device and cookie information where permitted.
| Purpose | Lawful basis |
|---|
We do not seek to collect special category data (such as health information or financial account credentials) through our website. Please do not include such information in forms or correspondence unless we have specifically requested it.
3. How we collect your data
We may collect personal data in the following ways:
- Directly through website forms, bookings, email, telephone or consultations.
- Through documents and attachments supplied by the individual.
- Automatically through cookies and website analytics, subject to your cookie choices.
- From publicly accessible business sources, including company websites, business directories and public supplier records.
- From professional or referral partners where the information has been shared lawfully.
| Purpose | Lawful basis |
|---|
4. How we use your data and our lawful basis
We process personal data only where we have a lawful basis to do so. The table below sets out our main processing activities and the basis on which we rely:
| Purpose | Lawful basis |
|---|---|
| Responding to enquiries and preparing requested proposals | Steps before entering a contract |
| Delivering purchased services and managing customer relationships | Performance of a contract |
| Maintaining business records and complying with regulatory requirements | Legal obligation |
| Operating, securing and improving the website and services | Legitimate interests |
| Relevant business-to-business marketing | Legitimate interests, subject to the recipient's right to object |
| Non-essential cookies or marketing where consent is required | Consent |
| Sharing information with a finance provider or utility referral partner | Only where required to provide the requested service and with appropriate authority |
We will not use your personal data for purposes that are incompatible with those listed above without first obtaining your consent or establishing another lawful basis.
5. Marketing communications
We may contact you with information about our services where you have requested this or where we have a legitimate interest in doing so. Professional contact information may be obtained from publicly available business sources such as company websites, business directories or public supplier records.
You can object to direct marketing at any time by contacting us at [email protected] or by clicking the unsubscribe link in any email we send you. We will act on your request promptly and may retain suppression details to ensure you are not contacted again.
| Purpose | Lawful basis |
|---|
6. Cookies and website analytics
Our website and marketing platform may use cookies and analytics tools to measure website visits, page activity, device information and campaign performance, subject to the visitor's cookie choices.
You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of some parts of our website.
| Purpose | Lawful basis |
|---|
7. Who we share your data with
We share personal data only where necessary and with appropriate safeguards in place. Categories of recipients may include:
- Website hosting and technical service providers.
- Email, communications and marketing platforms.
- Cloud storage and business software providers.
- Professional advisers such as solicitors or accountants, where necessary.
- Finance providers or commercial utility referral partners, where you have requested the relevant service.
- Regulators, courts or public authorities where legally required.
| Purpose | Lawful basis |
|---|
We do not sell your personal data. We do not share your data with third parties for their own marketing purposes without your consent.
8. International transfers
Some of our service providers may process your data outside the United Kingdom. Where this occurs, we ensure that appropriate safeguards are in place in accordance with UK GDPR, such as standard contractual clauses or adequacy decisions.
| Purpose | Lawful basis |
|---|
9. How long we keep your data
We retain personal data only for as long as reasonably necessary for the enquiry, service, contractual relationship, legal obligations and legitimate business records. In practice:
- Unsuccessful enquiries and marketing records are periodically reviewed and deleted when no longer required.
- Customer records may be retained where necessary for tax, accounting, contractual or legal requirements.
- Unsubscribe and suppression details may be retained to prevent further marketing contact.
- Documents and attachments are deleted when they are no longer needed for the purpose for which they were supplied.
| Purpose | Lawful basis |
|---|
We do not apply fixed retention periods across all data categories. Retention is reviewed periodically and data is deleted or anonymised when it is no longer needed.
10. Your rights
Under UK GDPR, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected]. We will respond within one calendar month.
- Access: to request a copy of the personal data we hold about you.
- Rectification: to request that we correct inaccurate or incomplete data.
- Erasure: to request that we delete your data where there is no compelling reason for us to continue processing it.
- Restriction: to request that we restrict the processing of your data in certain circumstances.
- Objection: to object to processing based on legitimate interests, including direct marketing. Where you object to direct marketing, we will stop immediately.
- Data portability: to receive your data in a structured, machine-readable format where processing is based on consent or contract and carried out by automated means.
- Withdrawal of consent: where processing relies on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
- Complaint to the ICO: you have the right to lodge a complaint with the Information Commissioner's Office at any time.
| Purpose | Lawful basis |
|---|
You also have the right to complain to the Information Commissioner's Office (ICO) at any time. See section 11 for details.
11. Right to complain
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection.
ICO website: ico.org.uk | ICO helpline: 0303 123 1113
We would, however, appreciate the opportunity to address your concerns before you contact the ICO. Please contact us in the first instance at [email protected].
| Purpose | Lawful basis |
|---|
12. Changes to this policy
We may update this Privacy Policy from time to time. The date at the top of this page indicates when it was last revised. We encourage you to review this policy periodically.
| Purpose | Lawful basis |
|---|