Privacy Policy

1. Who we are

JTandy is the trading name of James Tandy, a sole trader based in the United Kingdom, providing website and local SEO services to home-service businesses. JTandy operates this website (available at jtandy.co.uk and jtandy.com, together “the website”).

For the purposes of UK data protection law (the UK GDPR and the Data Protection Act 2018), JTandy is the data controller of the personal information described in this policy. You can contact us about anything in this policy at james.tandy@jtandy.com.

2. The information we collect

Information you give us. When you request a free review, submit an enquiry form or contact us by email or WhatsApp, we collect the details you provide, which may include:

• your name and business name;
• your email address and phone number;
• your website address, trade and the area you serve;
• anything you tell us about your business or what you would like us to look at; and
• the date and time of your booking if you schedule a call.

Information collected automatically. Like almost every website, our hosting provider keeps standard server logs (such as IP address, browser type and the pages requested) for security and reliability. The website also uses a small amount of local storage in your browser for convenience, for example so a partially completed form is not lost if you refresh the page. See our Cookie Policy for details.

3. How we use your information

• to respond to your enquiry and prepare your free audit;
• to arrange and hold calls you book with us;
• to provide services you engage us for, and to keep proper business records;
• to run, secure and improve the website; and
• to comply with legal obligations that apply to us.

We do not sell your personal information, and we do not send unsolicited marketing lists or bulk email.

4. Our lawful bases

• Consent, when you submit a form and agree to us using your details to complete and send your audit. You can withdraw consent at any time;
• Contract, when we take steps you ask for before entering an agreement, or provide services under one;
• Legitimate interests, in responding to enquiries, running and protecting the website and keeping records of our work; and
• Legal obligation, for example keeping accounting records we are required to hold.

5. Who we share information with

We use a small number of trusted service providers to run the business. They process data on our behalf and are not permitted to use it for their own purposes:

• Hosting: the website is hosted on Vercel, whose infrastructure serves the site and keeps standard server logs;
• Email delivery: form submissions are delivered to our inbox via Resend, and our mailbox is provided by Google Workspace;
• Messaging: if you choose to contact us on WhatsApp, your messages are handled by WhatsApp (Meta) under its own terms and privacy policy;
• Analytics: with your consent (asked for via the cookie banner), Google Analytics processes aggregated visit data so we can see which pages and adverts bring genuine enquiries — see the Cookie Policy for details and how to change your choice; and
• Business tools: we may mirror enquiry details into our own customer-record and workflow tools so nothing is lost.

We may also disclose information where the law requires it, or to professional advisers under a duty of confidentiality.

6. International transfers

Some of the providers above process data outside the UK, including in the United States. Where that happens we rely on appropriate safeguards recognised under UK law, such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or an adequacy decision.

7. How long we keep information

We keep enquiry details for as long as needed to deal with your enquiry and for a reasonable period afterwards, so we can pick the conversation back up if you return. If you become a client, we keep records for the length of the engagement and then as required for legal, accounting and insurance purposes (typically up to six years). You can ask us to delete your details sooner at any time.

8. Your rights

Under UK data protection law you have the right to:

• access a copy of the personal information we hold about you;
• have inaccurate information corrected;
• have your information erased;
• restrict or object to our processing of it;
• receive your information in a portable format; and
• withdraw consent at any time, where consent is the basis we rely on.

To exercise any of these rights, email james.tandy@jtandy.com. We aim to respond within one month. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk, though we would welcome the chance to resolve any concern with you first.

9. Security

The website is served over HTTPS, form submissions are validated and rate-limited, and access to your details is limited to James Tandy. No method of transmission or storage is completely secure, but we take reasonable technical and organisational measures to protect your information.

10. Children

The website and our services are aimed at businesses and are not intended for children. We do not knowingly collect information from anyone under 18.

11. Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last revised, and meaningful changes will be reflected on this page.

12. Contact

Questions about this policy or your information: james.tandy@jtandy.com.