Privacy
Notice

Who we are

Joseph & Dean Limited (“we”, “us”) is the data controller for the personal data described in this notice. We are registered in England and Wales under company number 10605492, with a registered office at 20 Villa Road, Bingley, England, BD16 4ER.

For any question about this notice or about how we handle personal data, contact dpo@josephdean.co.uk.

What we collect

When you send an enquiry

Our enquiry form asks for your name, your email address, your message, and optionally your company. We collect only what you choose to send us.

When you visit the site

We use a privacy-preserving analytics service that measures page views and aggregate traffic patterns. It does not set cookies, does not create a persistent identifier for you, and does not track you across other websites. Our hosting provider also keeps standard technical logs for security and reliability.

We do not collect special category data through this website, and we do not use it for advertising, profiling, or automated decision-making.

Why we use it, and our lawful basis

Responding to your enquiry

Article 6(1)(b) UK GDPR where your enquiry concerns entering into a contract with us, and otherwise Article 6(1)(f) legitimate interests — our interest in responding to business enquiries addressed to us.

Keeping the site secure and working

Article 6(1)(f) legitimate interests — our interest in operating a reliable, secure website and understanding aggregate usage.

Who we share it with

We do not sell personal data and we do not share it for anyone else’s marketing. We use the following processors, who act only on our instructions:

Vercel

Website hosting and cookieless traffic analytics. United States, with EU data processing available.

Resend

Delivery of enquiry form submissions by email. United States.

Sanity

Content management for published pages and case studies. European Union.

We may also disclose personal data where we are required to do so by law, or to establish or defend legal claims.

Transfers outside the UK

Some of our processors are located outside the United Kingdom. Where personal data is transferred outside the UK, we rely on the transfer mechanisms set out in each processor’s data processing agreement, which incorporate the UK International Data Transfer Addendum to the EU Standard Contractual Clauses. You can ask us for details of the safeguards that apply to a particular transfer.

How long we keep it

Enquiry correspondence is kept for 24 months from our last contact with you, unless it becomes part of a client relationship, in which case it is kept for the duration of that relationship and for six years afterwards to meet our legal and accounting obligations. Aggregate analytics data contains no personal data and is kept indefinitely.

Your rights

Under UK GDPR you have the right to:

• ask for a copy of the personal data we hold about you
• ask us to correct data that is inaccurate or incomplete
• ask us to erase your data in certain circumstances
• ask us to restrict how we use your data
• object to our use of your data where we rely on legitimate interests
• ask us to transfer your data to you or another controller

To exercise any of these, email dpo@josephdean.co.uk. We will respond within one month.

Complaints

If you are unhappy with how we have handled your personal data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk, or by calling 0303 123 1113.

Changes to this notice

We review this notice periodically. Where we make a material change we will update the date shown alongside it.