Legal

Privacy Policy

This policy explains how JCM Consultant Engineers Ltd (“JCMCE”, “we”, “us”) collects and processes personal data when you use this website or contact us. We are the data controller for the information you provide.

Last updated: 25 July 2026

Information we collect

We process information you choose to provide when contacting us. The public website does not currently accept online enquiry submissions. Online network applications and document uploads are not currently open. Public portal access is not currently open. We also process limited technical information, such as IP address, user agent, request identifiers and security events, to operate and protect the website. If a visitor accepts optional analytics, we also process a random browser identifier, page paths, selected interaction names, referring hostname and approved campaign attribution fields. Analytics does not collect enquiry text or chat messages.

How we use it

We use this information to respond to enquiries, assess access and work applications, deliver contracted services, administer named-user portals, prevent misuse, investigate security events and meet legal or regulatory duties. Depending on the activity, our lawful basis may be steps requested before a contract, performance of a contract, compliance with a legal obligation, or our legitimate interests in operating and securing the business. Where consent is specifically requested, it may be withdrawn for future processing.

AI assistant

The public Project Guide provides curated JCMCE guidance and may use a contracted AI service when that service is configured and available. The guide states when a reply is AI processed. Do not enter credentials, special category personal data, client confidential information or project documents. Chat text is not included in marketing analytics and JCMCE does not use the guide to make employment, access or project decisions. If a visitor chooses to prepare an enquiry, an editable draft is held in session storage in that browser tab for up to four hours. A visitor may also explicitly save one discussion in local storage on that device for up to 90 days. A locally saved discussion is not sent to JCMCE, does not identify the visitor to JCMCE and can be deleted through the Project Guide or browser controls. It is transferred to the contact form or email application only when the visitor selects that action.

Cookies, analytics and sign in

The public site does not set advertising cookies. A strictly necessary preference cookie records whether optional analytics were accepted or rejected. If analytics is accepted, JCMCE uses a random first party identifier to count page views, lifecycle exploration, Project Guide use and enquiry starts. Google Analytics is loaded only when a valid measurement property is configured and the visitor has accepted analytics. Visitors can reject analytics without losing site functionality and can change their choice through the footer. The Cookie Policy lists the supported technology, purposes and durations. Public portal sign-in is not currently open, so the public website does not set portal-authentication cookies.

Sharing and retention

We do not sell your data. We may share it with trusted service providers who help us operate, host, secure and support the website and any commissioned online services, including Microsoft Azure and our contracted AI provider. They receive only the information needed for their function and are subject to contractual and security controls. Data may be processed outside the UK where an applicable adequacy decision or approved transfer safeguard is in place. Network and opportunity applications are normally retained for up to 24 months, unless a shorter period is requested or a longer period is required for an active engagement, dispute or legal duty. Other records follow the relevant contract, legal and security-retention schedule.

Your rights

Under UK GDPR you have the right to access, correct, erase, or restrict the processing of your personal data, and to object to processing or request data portability. To exercise any of these rights, or to raise a concern, contact us using the details below. You may also lodge a complaint with the Information Commissioner’s Office (ICO).

Contact