Privacy Policy, Cookie Notice & UK Legal Disclosures

This notice explains how personal data is collected, processed, and protected on jordanpalmer.co.uk in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 (PECR), and applicable UK commercial transparency regulations.

---

2. Data Protection & Privacy Notice (UK GDPR)

Jordan Palmer acts as the Data Controller for personal information submitted directly through this website. Personal data is handled with strict confidentiality and is never sold, rented, or traded to third parties.

Information Collected & Lawful Basis (Article 6 UK GDPR)

• Enquiry & Contact Data: Full name, email address, organisation name (optional), enquiry category, indicative timeline, and message details provided voluntarily via the Contact Form.
• Lawful Basis for Commercial Enquiries: Processing is necessary to take steps at your request prior to entering into a contract (Article 6(1)(b) UK GDPR) and for legitimate business communication interests (Article 6(1)(f) UK GDPR).
• Lawful Basis for Voluntary Advocacy Enquiries: Explicit consent (Article 6(1)(a) and, where relevant information is voluntarily disclosed by the enquirer, Article 9(2)(a) UK GDPR) solely for evaluating and assisting with your requested administrative or consumer dispute matter.
• No Pre-Ticked Consent Boxes: In strict compliance with UK GDPR and ICO guidance, this website never uses pre-ticked checkboxes or bundled consent mechanisms, and submitting an enquiry never subscribes you to automated marketing lists.

Data Retention & Your Statutory Rights

Enquiry correspondence is retained only for as long as necessary to respond to your enquiry, deliver agreed project work, or comply with UK statutory tax and accounting obligations (typically 6 years for commercial records under HMRC rules). Voluntary advocacy correspondence is deleted or returned promptly upon conclusion of assistance or at your request.

Under the UK GDPR, you have the right to request access to your personal data (Subject Access Request), rectification of inaccurate data, erasure, restriction of processing, data portability, and the right to withdraw consent at any time. You also have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner’s Office (ICO) (ico.org.uk).

3. Cookie Policy (PECR Compliance)

In accordance with the Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR), this website is engineered on a privacy-first basis:

• Zero Intrusive Tracking: This theme does not embed third-party behavioural advertising pixels, cross-site profiling cookies, or unconsented analytics scripts.
• Strictly Necessary Functional Tokens: Only essential security tokens (such as WordPress cryptographic nonces used to protect contact form submissions against Cross-Site Request Forgery) are used during active form interaction.

4. Commercial Claims, Case Studies & Regulatory Scope

In compliance with the UK Code of Non-broadcast Advertising and Direct & Promotional Marketing (CAP Code) and the Consumer Protection from Unfair Trading Regulations 2008:

• Qualitative Descriptions of Services: Service descriptions, capability overviews, and collaboration models represent our professional delivery standards and technical competencies. We avoid unverified statistical generalizations and focus on transparent, qualitative demonstrations of capability.
• Case Studies & Outcomes: Case studies illustrate procedural methodologies and qualitative problem-solving achieved in historical engagements. Because every technical infrastructure, operational environment, and administrative dispute differs, past results are illustrative and do not constitute a guarantee of identical future outcomes.