Legal
How J C BROTHERS LIMITED collects, uses, and protects your personal data in accordance with UK GDPR and the Data Protection Act 2018.
J C BROTHERS LIMITED ("we", "us", "our", or "the Company") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you interact with our website, use our services, or communicate with us.
This policy is issued in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We are registered with the Information Commissioner's Office (ICO) and comply fully with all applicable data protection legislation in the United Kingdom.
By using our website or engaging our services, you consent to the collection, use, and processing of your personal data as described in this Privacy Policy.
J C BROTHERS LIMITED is the data controller responsible for your personal data. Our details are as follows:
If you have any questions about how we handle your personal data, please contact us using the details above.
We collect and process the following categories of personal data:
We do not knowingly collect any special category data (such as health information, racial or ethnic origin, religious beliefs, or biometric data). If such data is provided to us inadvertently, we will process it only where necessary and in accordance with Article 9 of the UK GDPR.
We use your personal data for the following purposes:
Under the UK GDPR, we rely on the following legal bases for processing your personal data:
We do not sell, rent, or trade your personal data. We may share your data with third parties only in the following circumstances:
We may share relevant data with trusted sub-contractors and partners who assist us in delivering our installation services, including:
All sub-contractors are bound by confidentiality agreements and process data only on our instructions.
We may disclose your data if required to do so by law or in response to a valid request from law enforcement, regulatory authorities, or court orders. We will only disclose data that is strictly necessary to comply with the legal obligation.
All third-party processors are selected for their data protection standards and are bound by written agreements that comply with UK GDPR requirements.
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and regulatory requirements. Our retention periods are as follows:
| Data Type | Retention Period |
|---|---|
| Enquiry and quotation data (where no contract is formed) | 12 months from last contact |
| Customer project records and certification | 10 years (regulatory requirement) |
| Electrical safety certification | 10 years (NICEIC requirement) |
| Financial and tax records | 7 years (HMRC requirement) |
| Marketing consent records | Until consent is withdrawn |
| Website analytics data | 26 months |
| Communication records (emails, calls) | 6 years |
After the retention period expires, personal data is securely deleted or anonymised. Where data must be retained for longer periods to comply with legal obligations, it will be held securely and used only for the specific legal purpose required.
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:
Despite our best efforts, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal data, we cannot guarantee absolute security.
Under the UK GDPR and Data Protection Act 2018, you have the following rights regarding your personal data:
You have the right to request a copy of the personal data we hold about you. This is known as a Subject Access Request (SAR).
You have the right to request that we correct any personal data that is inaccurate or incomplete.
Also known as the "right to be forgotten." You can request that we delete your personal data, subject to legal retention obligations.
You have the right to request that we restrict the processing of your personal data in certain circumstances.
You have the right to receive your personal data in a structured, machine-readable format and to transmit it to another provider.
You have the right to object to the processing of your personal data, including for direct marketing purposes.
Where we process your data based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.
You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your data appropriately.
To exercise any of these rights, please contact us using the details provided in Section 13 below. We will respond to all valid requests within one month of receipt. In complex cases, this may be extended by two months, in which case we will inform you of the extension and the reasons for it.
Our website uses cookies and similar technologies to provide and improve our services. Cookies are small files placed on your device when you visit a website.
The types of cookies we use are:
You can control cookies through your browser settings. Most browsers allow you to refuse cookies or alert you when cookies are being sent. Please note that disabling cookies may affect the functionality of our website.
For more information about cookies, please see our Cookie Policy.
As a UK-based company, we primarily process and store your personal data within the United Kingdom and the European Economic Area (EEA).
Where we do transfer personal data outside the UK or EEA, we ensure that such transfers are carried out in accordance with the UK GDPR. This may involve using standard contractual clauses approved by the ICO, ensuring the receiving country has an adequate data protection status, or implementing other appropriate safeguards.
If you would like more information about international transfers, please contact us using the details below.
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Any changes will be posted on this page with an updated effective date.
We recommend that you review this policy periodically to stay informed about how we protect your data. If we make material changes to this policy, we will notify you through our website or via email (if we have your email address on file).
The "Effective Date" at the top of this page indicates when the policy was last revised.
If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact us:
If you are not satisfied with how we handle your personal data, you have the right to complain to the Information Commissioner's Office (ICO):