Website Privacy Notice

1. Who We Are

JP Primary Care Consulting Ltd (“JPPCC”, “we”, “us”, “our”) is a healthcare consultancy registered in England. We operate the website at jpprimarycareconsulting.com.

Registered address: Apartment 2, The Normal Boot and Shoe Factory, 34–48 Talbot Road, Northampton, NN1 4JA.

We are registered with the Information Commissioner’s Office (ICO) under registration number ZB822902.

Jo Pennell, Director, is the data controller for personal data collected through this website. For any data protection queries, please contact: office@jppcc.co.uk.

2. What This Policy Covers

This policy explains how we collect and use personal data when you visit or use our website. It covers only data collected through this website and its forms.

We hold separate privacy policies for specific project work we deliver under contract, including our work commissioned by North Northamptonshire Council. If you are participating in a funded programme or project delivered by JPPCC, a separate privacy notice will be provided to you.

3. What Personal Data We Collect

Through our website contact and enquiry forms, we may collect:

  • Your name
  • Your email address
  • Your telephone number
  • Your organisation name and job title
  • The nature of your enquiry or message

We do not knowingly collect sensitive or ‘special category’ personal data through our website forms. Please do not include health information, financial details, or other sensitive data in general website enquiries.

We may also collect limited technical data automatically when you visit our website (see Section 7 on Cookies and Technical Data).

4. Legal Basis for Processing

We process your personal data on the following legal bases under UK GDPR:

  • Legitimate interests: Legitimate interests — to respond to enquiries you initiate, manage our professional relationships, and operate our website effectively. We have assessed that our legitimate interests do not override your rights and freedoms.
  • Contractual necessity: Contractual necessity — where your data is needed to fulfil or prepare to enter a contract with you or your organisation.
  • Consent: Consent — where we have specifically asked for and received your consent (for example, if you sign up to receive updates from us).
  • Legal obligation: Legal obligation — where we are required to process data to comply with a legal duty.

5. How We Use Your Personal Data

We use the personal data you provide through our website to:

  • Respond to your enquiries, questions, or requests for information
  • Discuss potential consultancy services or collaborations with you or your organisation
  • Send you information you have requested about JPPCC’s services or programmes
  • Fulfil any contract we enter into with you or your organisation
  • Meet any legal or regulatory obligations

We will not use your data for automated decision-making or profiling.

6. Who We Share Your Data With

We do not sell, rent, or trade your personal data to third parties.

We may share limited data with trusted third-party services that help us operate our website and business, including:

  • WordPress.com (Automattic Inc.) — our website hosting and content management platform
  • WordPress.com Professional Email (powered by Titan) — for receiving and managing emails sent via our contact forms and direct email
  • Microsoft 365 — for internal business operations

All third-party providers are required to handle your data securely and in accordance with applicable data protection law. Where providers are based outside the UK, we ensure appropriate safeguards are in place.

We may also disclose personal data where required to do so by law or a regulatory authority.

7. Cookies and Technical Data

When you visit our website, certain data may be collected automatically by WordPress.com and its associated services. This may include:

  • Your IP address
  • Browser type and version
  • Pages visited and time spent on the site
  • Referring website

Our website may use cookies — small text files stored on your device — to support site functionality. WordPress.com places essential cookies to ensure the website operates correctly. Where any non-essential cookies are used, you will be asked for your consent.

For full details of cookies used on our platform, please refer to the Automattic Cookie Policy (automattic.com/cookies). You can manage cookie preferences through your browser settings.

8. How Long We Keep Your Data

We retain personal data collected through our website for as long as necessary to respond to your enquiry and manage any resulting business relationship. As a general guide:

  • General enquiry data is retained for up to 24 months from last contact, unless a business relationship develops
  • Data relating to a contract or business relationship is retained for six years from the end of that relationship, in line with statutory limitation periods
  • Data held with your consent will be retained until you withdraw that consent

We will securely delete or anonymise data when it is no longer needed.

9. Your Rights Under UK GDPR

You have the following rights in relation to your personal data:

  • Right of access: Right of access — to request a copy of the data we hold about you
  • Right to rectification: Right to rectification — to ask us to correct inaccurate or incomplete data
  • Right to erasure: Right to erasure — to request deletion of your data in certain circumstances
  • Right to restrict processing: Right to restrict processing — to ask us to limit how we use your data
  • Right to data portability: Right to data portability — to receive your data in a structured, machine-readable format where applicable
  • Right to object: Right to object — to object to processing based on legitimate interests
  • Right to withdraw consent: Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, please contact Jo Pennell at office@jppcc.co.uk. We will respond within one calendar month.

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113.

10. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include:

  • Use of secure, encrypted website hosting (HTTPS)
  • Password-protected business systems and email accounts
  • Limiting access to personal data to those with a need to know
  • Regular review of our data handling practices

No method of electronic transmission or storage is entirely secure, but we are committed to protecting your data to the best of our ability.

11. Links to Other Websites

Our website may contain links to third-party websites, including NHS organisations, partner bodies, and external resources. This privacy policy applies only to our website. We are not responsible for the privacy practices of linked sites and encourage you to read their privacy notices.

12. Changes to This Privacy Policy

We may update this policy from time to time. When we do, we will update the version number and date at the top of this document and post the revised policy on our website. We encourage you to review this page periodically.

This policy does not override or replace any specific privacy notice provided to you in connection with a funded programme or project delivered by JPPCC.

13. Email Updates and Newsletters (MailPoet)

If you choose to sign up to receive updates, news, or information from JPPCC, we use MailPoet — an email marketing plugin integrated into our WordPress website — to manage these communications.

What we collect

When you subscribe, we collect your name and email address. We do not collect any additional personal data through the subscription process.

Legal basis

We process your data for email marketing on the basis of your consent. You will be asked to actively opt in before we add you to any mailing list. We will not add you to a list without your explicit agreement.

How we use your data

  • To send you updates, news, or information about JPPCC’s services and programmes that you have requested
  • To manage your subscription preferences
  • To track basic email engagement (such as open rates) in aggregate, to improve our communications

Unsubscribing

You can unsubscribe at any time by clicking the unsubscribe link in any email we send, or by contacting us at office@jppcc.co.uk. We will remove you promptly and will not send further marketing emails.

Withdrawing consent does not affect the lawfulness of any processing carried out before withdrawal.

Data storage

Subscriber data is stored within our WordPress.com installation and processed by Automattic Inc. as part of the MailPoet service. Data may be processed outside the UK; Automattic maintains appropriate safeguards including UK GDPR-compliant data transfer mechanisms. For further information, see the Automattic Privacy Policy at automattic.com/privacy.

Retention

We retain subscriber data for as long as you remain subscribed. On unsubscribing, your data will be deleted from our mailing list within 30 days, unless we are required to retain it for another lawful purpose.

14. Contact Us

If you have any questions about this privacy policy or how we handle your data, please contact:

Jo Pennell, Director

JP Primary Care Consulting Ltd

Apartment 2, The Normal Boot and Shoe Factory, 34–48 Talbot Road, Northampton, NN1 4JA

Email: office@jppcc.co.uk

ICO Registration: ZB822902