Privacy Policy

Who we are

This website is operated by JM BTS Ltd, a technology consulting company based in the Midlands, UK. When this policy refers to “we”, “us”, or “our”, it means JM BTS Ltd.

We act as the data controller for the personal information collected via this website. For any data-related queries, contact us at hello@jm-bts.com.

What data we collect and why

Booking and enquiry form

When you submit the contact form on this website we collect the following information:

• First and last name — to address you correctly in our reply
• Email address — to respond to your enquiry or booking request
• Company name (optional) — to understand the context of your request
• Service interest — to route your enquiry to the right response
• Message (optional) — additional context you choose to share

The lawful basis for this processing is legitimate interests (Article 6(1)(f) UK GDPR) — specifically, our legitimate interest in responding to commercial enquiries — and, where a service is purchased, performance of a contract (Article 6(1)(b)).

Server and access logs

Our hosting provider automatically records standard web-server access logs (IP address, browser user-agent, pages requested, timestamps). These are used solely for security monitoring and diagnosing technical issues. We do not use them for tracking or profiling.

How we use your data

We use the information you submit only to:

• Respond to your enquiry or booking request
• Arrange and deliver the service you have requested
• Keep a record of our business relationship for accounting and legal compliance purposes

We do not use your information for unsolicited marketing, automated profiling, or any purpose unrelated to the reason you contacted us.

Data retention

Enquiry data is retained for two years from the date of last contact, after which it is deleted from our systems. If a commercial engagement follows your enquiry, records related to that engagement are retained for six years in line with UK accounting and tax obligations.

Who we share your data with

We do not sell, rent, or trade your personal data. Your information may be processed by the following sub-processors solely to the extent required to deliver our service:

• Cloud hosting provider (Render) — the platform on which this website and its API run. Data is stored in their infrastructure and subject to their data processing agreement.
• Email provider (Google Workspace / Gmail) — used to receive and send replies to enquiries. Emails containing your data pass through Google’s systems.
• Database host — form submissions are stored in a PostgreSQL database on the same hosting infrastructure.
• Google Analytics (Google Ireland Ltd) — website usage analytics, loaded only if you accept analytics cookies via the consent banner. See Cookies below.

We do not use any advertising or social-media tracking scripts on this website.

Cookies

This website uses Google Analytics to understand how visitors use the site (pages viewed, time on site, general location and device type). Analytics cookies are not set by default — they only load if you click “Accept” on the cookie banner shown on your first visit. If you click “Reject”, or take no action, Google Analytics is never loaded and no analytics cookies are set.

If you accept, the following cookies may be set:

• _ga — distinguishes unique visitors. Expires after 13 months.
• _ga_<container-id> — persists session state for Google Analytics 4. Expires after 13 months.

No third-party advertising or social-media cookies are loaded, and Google Analytics is configured for analytics purposes only — not for advertising or cross-site tracking. Aside from analytics cookies (which require your consent), the only cookies this site sets are those strictly necessary for the web server to function, which do not identify you personally.

You can withdraw or change your consent at any time via the Cookie Preferences link in the footer. Withdrawing consent removes any existing Analytics cookies and stops further data collection.

Your rights under UK GDPR

As a UK resident, you have the following rights in relation to your personal data:

• Right of access — you can request a copy of the data we hold about you.
• Right to rectification — you can ask us to correct inaccurate data.
• Right to erasure — you can ask us to delete your data where there is no overriding legal reason to retain it.
• Right to restriction — you can ask us to pause processing while a complaint is investigated.
• Right to data portability — you can request your data in a machine-readable format.
• Right to object — you can object to processing based on legitimate interests.

To exercise any of these rights, email us at hello@jm-bts.com. We will respond within 30 days. If you are unsatisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

Changes to this policy

We may update this policy from time to time. Any material changes will be reflected in the “Last updated” date at the top of this page. Continued use of this website after an update constitutes acceptance of the revised policy.