1. Who we are
JTandy Automations ("JTandy", "we", "us") is a sole-trader business registered in the United Kingdom. We
build revenue systems — websites, follow-up automation, and review automation — for UK tradespeople.
Data controller: James Tandy
Email: James.Tandy@jtandy.com
2. What data we collect
We only collect data you provide directly:
- Contact forms: Name, email address, phone number (optional), message or current
situation description
- Audit requests: Business name, website URL, contact details
- Email correspondence: Any information you share when emailing us
We also collect limited technical data automatically:
- Analytics: Pages visited, time on site, referral source (via privacy-respecting
analytics)
- Cookies: See our Cookie Policy for details
3. How we use your data
We use your personal data to:
- Respond to your enquiry or audit request
- Send you a written recommendation or lead leak report
- Provide the services you've purchased
- Improve our website and services
We will never sell, rent, or share your data with third parties for marketing purposes.
4. Legal basis for processing
Under UK GDPR, we process your data based on:
- Consent: When you submit a form or contact us, you consent to us processing that
data for the stated purpose
- Contractual necessity: When we need your data to deliver services you've purchased
- Legitimate interest: To improve our website and understand how visitors use it
5. Third-party services
We use the following third-party services that may process your data:
- n8n (self-hosted): Workflow automation for form handling and email delivery
- Email provider: To send you communications
- Web hosting: To serve this website
All third-party services are selected for their data protection practices and, where applicable, are
GDPR-compliant.
6. Data retention
We keep your data for as long as necessary to fulfil the purpose for which it was collected:
- Enquiry data: Up to 24 months after last contact
- Client data: For the duration of our engagement, plus 6 years for legal/accounting
purposes
- Analytics data: Aggregated and anonymised; no personally identifiable data is
retained
7. Your rights
Under UK GDPR, you have the right to:
- Access — Request a copy of the data we hold about you
- Rectification — Ask us to correct inaccurate data
- Erasure — Ask us to delete your data ("right to be forgotten")
- Restrict processing — Ask us to limit how we use your data
- Data portability — Receive your data in a structured, machine-readable format
- Object — Object to processing based on legitimate interest
To exercise any of these rights, email James.Tandy@jtandy.com. We'll respond within 30 days.
8. Security
We take reasonable measures to protect your data, including encrypted connections (HTTPS), secure
hosting, and limited access to personal data. No method of electronic transmission is 100% secure, but
we do our best.
9. Changes to this policy
We may update this policy from time to time. Changes will be posted on this page with an updated "Last
updated" date. We won't reduce your rights under this policy without your explicit consent.
10. Complaints
If you're unhappy with how we handle your data, you can contact us at James.Tandy@jtandy.com. You also have the right to lodge a
complaint with the Information
Commissioner's Office (ICO).
