How we use your information

This notice explains what personal information J-Mach Limited collects, why, how long it is kept and what your rights are. It follows the UK GDPR and the Data Protection Act 2018 as amended by the Data (Use and Access) Act 2025.

Last updated 14 September 2026.

Who we are

J-Mach Limited is the data controller for the information described here. Company number 08374642, registered office 7-8 Portmill Lane, Hitchin, Hertfordshire, SG5 1DJ. We are a small company and do not need a data protection officer; questions about this notice go to info@jmach.co.uk.

What we collect, why, and our lawful basis

When you use the contact form

We receive the name, company, email address, phone number and message you type. We use it to reply to you and, if the conversation continues, to prepare a proposal. Our lawful basis is legitimate interests (UK GDPR Article 6(1)(f)): you have asked us a question and it is in both our interests that we answer it. Nothing is added to a mailing list.

When you become a customer or supplier

We hold the business contact details of the people we deal with: names, job titles, work email addresses and phone numbers, with the correspondence, licences, invoices and support history that come with the relationship. Our lawful bases are the contract between us (Article 6(1)(b)) and our legal obligation to keep business and tax records (Article 6(1)(c)).

When you visit the site

Our hosting provider records the technical details of each request (the address it came from, the page requested, the browser used) in short-lived server logs used to keep the site running and secure, on the basis of our legitimate interest in doing so. We run no analytics and set no cookies. See the cookies page.

We do not make automated decisions about you and we do not use your information for profiling or marketing.

Who we share it with

Only the providers that run our own systems: Vercel hosts this website and GoDaddy provides our email. Each processes data on our instructions under a written contract, as Article 28 of the UK GDPR requires. We do not sell or pass on personal information and we do not use it for advertising.

Some of these providers operate outside the UK. Where personal data leaves the UK it does so under the safeguards in Chapter V of the UK GDPR, such as the provider's standard data protection terms, applying the data protection test introduced by the Data (Use and Access) Act 2025.

How long we keep it

• Enquiries that do not lead to work: twelve months from the last message, then deleted.
• Customer and supplier records: for the length of the relationship, then six years to meet our record-keeping obligations.
• Server logs: a matter of days, as set by the hosting provider.

Your rights

Under the UK GDPR you can ask us for a copy of the information we hold about you, ask us to correct it, ask us to delete it, object to our use of it, ask us to restrict what we do with it, or ask for it in a form you can take elsewhere. Email info@jmach.co.uk. We answer within one month, and we will not charge.

How to complain

If you think we have handled your information badly, tell us first at info@jmach.co.uk. We acknowledge complaints within 30 days and answer them without undue delay, as the Data (Use and Access) Act 2025 requires of every controller since 19 June 2026.

You can also complain to the regulator: the Information Commissioner's Office, which becomes the Information Commission on 30 September 2026, at ico.org.uk, telephone 0303 123 1113.

Our customers' systems

The systems J-Mach builds and hosts for its customers hold those customers' data: their customers, orders, certificates, delegates and documents. In those systems the customer is the controller and J-Mach is the processor, acting only on the customer's instructions. If your information is in one of those systems, please contact the customer concerned. How we look after that data is set out in our data protection statement.

Changes

If we change what we collect or why, or the law changes, we will update this notice and the date at the top.

See also: Cookies · Data protection · Modern slavery · Website terms