Privacy Policy
1. Introduction
SJM Group (“we”, “us”, “our”) is committed to protecting your privacy and ensuring that your personal information is handled securely, transparently, and in accordance with UK data protection law.
This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website, submit an enquiry, or engage with our services.
We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Contact Details
Data Controller: SJM Group
Email: contact@sjmgroup.uk
Telephone: 07817 352 110
If you have any questions about this Privacy Policy or how we handle your data, please contact us using the details above.
3. What Information We Collect and Why
A. Information you provide directly (e.g., via our enquiry form):
- Name
- Email address
- Telephone number
- Postal address (if provided)
- Details of your enquiry
- Any additional information you choose to include.
Why we collect it:
- To respond to your enquiry
- To provide quotations or arrange site visits
- To deliver services and maintain customer records
- To manage customer accounts and guarantees.
B. Information collected automatically when you use our website:
- IP address
- Browser type and version
- Device information
- Website usage data (e.g., pages visited, time on site)
- Cookie data (where consent is given).
Why we collect it:
- To improve website performance and user experience
- To understand how visitors use our website
- To maintain website security.
C. Information used for service updates or marketing (only where consent is given):
- Name
- Email address
- Telephone number
- Records of consent
We do not send marketing communications without your explicit consent.
4. Lawful Bases for Processing
Under UK GDPR, we rely on the following lawful bases:
| Purpose | Lawful Basis |
|---|---|
| Responding to enquiries | Legitimate interests |
| Providing quotes or delivering services | Contract |
| Maintaining records for tax or legal compliance | Legal obligation |
| Website analytics and non-essential cookies | Consent |
| Marketing communications | Consent |
We only rely on consent where it is appropriate and freely given.
Security
- Our services are not directed at children, and we do not knowingly collect data relating to children.
- We use appropriate technical and organisational measures to protect your personal data.
- We do not transfer data outside the UK.
5. Where We Get Personal Information From
We collect personal information:
- Directly from you (e.g., enquiry form, email, telephone)
- Automatically through our website (cookies and analytics, where consented)
- We do not obtain personal data from third-party data brokers or external marketing lists.
6. How Long We Keep Your Information
We retain personal data only for as long as necessary:
- Enquiry form submissions: 12–24 months
- Customer records: up to 7 years (legal and financial compliance)
- Cookie/analytics data: according to your cookie preferences and browser settings
- If you would like more details on retention periods, please contact us.
7. Who We Share Information With
We may share your personal data with:
- Internal staff responsible for handling enquiries and delivering services
- Professional advisers (e.g., accountants, legal advisers)
- Trusted service providers (e.g., website hosting, IT support, email services)
- Sub-contractors involved in delivering our services
- Regulatory bodies where required by law
- We do not sell your personal data.
- We do not share your data with joint controllers unless explicitly stated (currently, we do not operate any joint controller arrangements).
8. Cookies and Tracking Technologies
Our website uses cookies to improve functionality and analyse usage.
Non-essential cookies (such as analytics) will only run if you give consent via our cookie banner.
For more information, please see our Cookie Policy.
9. Your Rights Under UK GDPR
You have the right to:
- Access your personal data
- Correct inaccurate information
- Request deletion
- Restrict processing
- Object to processing
- Withdraw consent (where consent is the lawful basis)
- Request data portability
- Lodge a complaint with the ICO
To exercise these rights, contact us at contact@sjmgroup.uk.
We will respond within one month.