Your information should be handled with care and for a clear purpose. This policy explains what we may receive, why we use it and the choices available to you.
Who we are and how to contact us
This Privacy Policy explains how J R NEALE LTD, referred to as “we”, “us” or “our”, handles personal information in connection with this website, business enquiries and our management consultancy services. We are the controller of information that we collect for our own business purposes. You can contact us about this policy or the handling of your information using the details below.
J R NEALE LTD51 Lytham Green, Muxton
Telford, England, TF2 8SQ
Email: [email protected]
Telephone: +44 7732 730792
If a consultancy assignment involves processing personal information solely on a client’s instructions, the client may be the controller and a separate data processing arrangement may apply. This policy does not replace that arrangement or the client’s own privacy information.
Information we may receive
You can browse this website without creating an account or submitting an online form. If you contact us by email or telephone, we may receive your name, business name, role, email address, telephone number and the contents of your enquiry. We may also retain correspondence and notes needed to understand your request and manage our relationship with you.
During an agreed consultancy assignment, information may include business contacts, meeting notes, responsibilities, operational observations and information you choose to share about your organisation. Please limit personal information to what is relevant. We do not ask website visitors to provide health information, identity documents, payment card details or other sensitive information through this website.
The hosting infrastructure may process technical information needed to deliver and protect the site, such as IP addresses, requested pages, access times, browser information and error records. The precise records depend on the hosting service used.
Where information comes from
Most information comes directly from you, including messages, telephone conversations and materials provided for an engagement. We may also receive work-related contact information from your colleagues, an authorised representative or a person who introduces your business to us.
Where relevant to a specific business question, we may consult publicly available business websites or professional information. We use such information in its business context and only where appropriate to the purpose. If we obtain personal information indirectly, we provide any additional privacy information required for that situation, including information about its source.
How and why we use information
We use information to respond to enquiries, understand the support you are seeking, arrange discussions, prepare proposals and communicate about a potential or existing assignment. Where an engagement is agreed, we use relevant information to carry out the work, document recommendations and administer the business relationship.
Information may also be needed to maintain appropriate business records, resolve questions or complaints, protect our systems and respond to legal obligations. We do not sell personal information or use the website to create advertising profiles.
Providing information in an enquiry is voluntary. However, without suitable contact details or relevant context we may be unable to answer your question or assess a proposed assignment. Any information required for an agreed contract or by law will be explained in the relevant context.
Our reasons for processing personal information
We identify an appropriate lawful basis for each purpose. The basis depends on the information and the relationship involved.
- Legitimate interests: handling business enquiries, communicating with contacts at client organisations, managing professional relationships and protecting our business and website. We consider the effect on individuals and whether their interests or rights override the proposed use.
- Contract: where processing is necessary to enter into or perform a contract with you as an individual. This basis does not automatically apply simply because you work for a company that is our client.
- Legal obligation: keeping or disclosing information where applicable law requires us to do so.
- Consent: where we specifically ask you to agree to an optional use. You can withdraw that agreement using our contact details without affecting processing that was lawful before withdrawal.
International processing
Some technology services may involve storage or access outside the United Kingdom. Where this creates a restricted international transfer, an appropriate legal mechanism must be in place, such as an applicable adequacy decision or recognised contractual safeguards, together with any required assessment.
We do not assume that the location of a client or a website visitor provides permission for unrestricted transfers. You may contact us for information about safeguards relevant to your personal information and how to request a copy or explanation, subject to necessary protection of confidential information.
How long we keep information
We retain information for as long as reasonably needed for the purpose for which it was collected, including any related record-keeping requirements. We assess retention by considering whether an enquiry remains active, whether an engagement is ongoing, the need to explain or defend work performed, applicable legal requirements and the sensitivity of the information.
For enquiries that do not lead to work, the relevant considerations are the need to complete the conversation and handle reasonable follow-up. For engagement records, the considerations include the duration of the relationship and any continuing contractual, legal or dispute-related need. Information should be deleted, anonymised or securely disposed of when no longer required. Backup copies may remain until the normal backup cycle replaces them.
Protecting information
We use proportionate organisational and technical measures designed to protect information against unauthorised access, accidental loss and misuse. Appropriate measures may include restricted access, account protection, secure storage and careful selection of service providers.
No internet service, email system or storage method can guarantee complete security. Please avoid sending unnecessary personal or sensitive information in an initial enquiry. Where an assignment requires sensitive business material, contact us first to agree a suitable method of exchange.
If a personal data incident occurs, we assess it and take the steps required by applicable law, including notifying the relevant authority or affected individuals where necessary.
Your choices and rights
Depending on the circumstances, you may have rights to request access to your information, correct inaccurate details, ask for deletion, restrict particular processing or receive certain information in a portable format. Rights are not absolute; their application depends on the purpose, legal basis and any relevant exemptions.
Your right to object: you may object to processing based on legitimate interests for reasons relating to your situation. You may also object to the use of your information for direct marketing at any time.
To make a request, email [email protected] and describe what you need. We may ask for enough information to confirm your identity and locate the relevant records. We respond within the period required by applicable law and explain any lawful extension or restriction. We do not normally charge for a rights request; any lawful exception will be explained before it is applied.
Automated decisions and children
We do not use this website to make decisions based solely on automated processing that produce legal or similarly significant effects on individuals. The website does not create behavioural profiles or provide automated eligibility decisions for consultancy services.
The site is directed at business owners, managers and other professional contacts. It is not designed for children, and we do not knowingly seek personal information from children through it. If you believe a child has provided personal information unnecessarily, please contact us so that we can assess the situation and take appropriate action.
Questions and complaints
Please contact us if you have concerns about how your information has been handled. Include enough detail for us to understand the issue, while avoiding unnecessary sensitive information. We will consider your concern and explain the next steps.
You can also raise a complaint with the Information Commissioner’s Office, the UK data protection regulator. Information about complaints and individual rights is available at ico.org.uk/make-a-complaint/. You do not have to complete our internal discussion before contacting the regulator.
Changes to this policy
We may revise this policy when the website, our processes or relevant requirements change. The date at the top identifies the most recent revision of this document. A material change affecting how existing information is used may require additional notice, which will be provided where appropriate.
Please read this policy alongside any engagement-specific privacy information provided to you. If you are unsure which notice applies to a particular activity, contact us before sharing information and we will clarify the position.