Privacy Policy
Effective date: 27 May 2026
This document applies to JARRETT PLATFORMS LTD, https://jarrettplatforms.technology, about@jarrettplatforms.technology, +447025756407, 118 Titsey Road, OXTED, RH8 0DF, United Kingdom.
Introduction and Scope
This Privacy Policy explains how JARRETT PLATFORMS LTD ("we", "us", or "our"), registered in England and Wales and operating from 118 Titsey Road, OXTED, RH8 0DF, United Kingdom, collects, uses, stores, shares, and protects personal data when you visit https://jarrettplatforms.technology, communicate with us, request professional services in computer systems design and related services, or otherwise interact with our business. We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations (PECR), and applicable guidance issued by the Information Commissioner's Office (ICO). This Policy applies to clients, prospective clients, suppliers, partners, website visitors, job applicants, and any individual whose personal data we handle in connection with custom computer programming services, platform engineering, technical consulting, and associated professional, scientific, and technical services.
Data Controller Details
JARRETT PLATFORMS LTD is the data controller responsible for personal data described in this Policy. Our registered office is 118 Titsey Road, OXTED, RH8 0DF, United Kingdom. For privacy enquiries, data subject requests, or complaints relating to processing activities, contact us at about@jarrettplatforms.technology or +447025756407. Where we appoint a processor to handle data on our behalf, we ensure contractual safeguards consistent with Article 28 UK GDPR requirements, including documented instructions, confidentiality obligations, security measures, sub-processor controls, assistance with data subject rights, deletion or return of data at contract end, and audit cooperation. We maintain an internal record of processing activities as required by Article 30 UK GDPR and review it periodically to reflect changes in services, systems, and regulatory expectations.
Categories of Personal Data Collected
We may collect identity and contact data including name, job title, employer, postal address, email address, telephone number, and billing identifiers. We may collect account and authentication data where client portals or secure collaboration environments are provisioned. We may collect project and commercial data including statements of work, technical requirements, architecture documentation references, procurement records, invoices, payment status, and correspondence relating to delivery routes, milestones, and service pathways. We may collect technical and usage data including IP address, browser type, device identifiers, session logs, cookie identifiers, referral URLs, pages viewed, interaction timestamps, and diagnostic telemetry necessary to secure and improve our website. We may collect communication content including emails, web form submissions, meeting notes where lawfully recorded, and support tickets. We do not intentionally collect special category data unless required for a specific lawful purpose with appropriate safeguards; where such data is provided voluntarily, we limit processing to the stated purpose.
Sources of Personal Data
Personal data is collected directly from you when you complete contact forms, submit project briefs, sign contracts, attend meetings, or correspond with our team. Data may be collected automatically through website technologies described in our Cookie Policy. We may receive data from your organisation when you are designated as a project contact, approver, or technical liaison. We may receive data from publicly available professional sources where relevant to business development, always balancing legitimate interests against privacy expectations. We may receive data from service providers supporting hosting, analytics, communications, CRM, accounting, and identity verification, strictly as necessary for operational delivery.
Purposes and Lawful Bases
We process personal data to respond to enquiries and provide quotations for computer systems design services (contract steps and legitimate interests). We process data to perform contracts, deliver custom programming and integration work, manage projects, issue invoices, and maintain client relationships (contract and legal obligation). We process data to secure systems, prevent fraud, monitor access, investigate incidents, and enforce terms (legitimate interests and legal obligation). We process data to comply with tax, accounting, and regulatory requirements (legal obligation). We process data to improve website performance and service quality through aggregated analytics where consent or legitimate interests apply. We process data for direct marketing to business contacts where permitted by law, offering an opt-out at any time. Where consent is the lawful basis, you may withdraw consent without affecting prior lawful processing.
Automated Decision-Making
We do not use solely automated decision-making producing legal or similarly significant effects without human review. Operational monitoring tools may generate alerts requiring human assessment. Any future use of automated profiling for marketing would be disclosed with opt-out mechanisms and lawful basis clarification.
Data Sharing and Recipients
We may share personal data with hosting and cloud infrastructure providers located in the UK or jurisdictions subject to adequacy regulations or appropriate safeguards such as International Data Transfer Agreements. We may share data with professional advisers including solicitors, accountants, and insurers under confidentiality duties. We may share data with subcontractors engaged for specialised technical delivery under data processing agreements. We may disclose data to courts, regulators, or law enforcement when required by law or to establish, exercise, or defend legal claims. We do not sell personal data. Intra-group sharing is limited and governed by internal policies where applicable.
International Transfers
Where personal data is transferred outside the UK, we implement transfer tools recognised under UK law, assess recipient jurisdictions, and apply supplementary measures where necessary. Clients requiring UK or EEA data residency for specific workloads should raise this during project intake so contractual and architectural controls can be aligned.
Retention Periods
We retain personal data only as long as necessary for the purposes collected, including statutory limitation periods. Enquiry records are typically retained for up to twenty-four months unless converted to an active client relationship. Contract and project records are retained for the duration of the engagement and thereafter for up to seven years for legal, tax, and dispute resolution purposes unless a longer period is required. Security logs may be retained for up to eighteen months. Marketing suppression lists are retained indefinitely to honour opt-out preferences. Retention schedules are reviewed annually and securely deleted or anonymised when no longer required.
Security Measures
We implement organisational and technical measures including access control, role-based permissions, encryption in transit, secure development practices, vulnerability management, backup procedures, incident response plans, staff training, and supplier security assessments. No method of transmission or storage is completely secure; we commit to prompt notification of personal data breaches to the ICO and affected individuals where required by law.
Your Rights
Under UK GDPR you have rights of access, rectification, erasure, restriction, portability, objection, and rights related to automated decision-making. You may lodge a complaint with the ICO at ico.org.uk. To exercise rights, contact us using details above; we may request identity verification. We respond within one month, extendable where complex.
Children
Our services are directed to business clients. We do not knowingly collect data from children under sixteen without parental authority. If you believe we have collected such data, contact us for deletion.
Third-Party Links
Our website may link to third-party sites not controlled by us. Their privacy practices govern data collected there. Review their policies before submitting personal data.
Updates to This Policy
We may update this Policy to reflect legal, technical, or business changes. Material updates will be posted on this page with a revised effective date. Continued use after updates constitutes acknowledgement where permitted by law.
Introduction and Scope
This Privacy Policy explains how JARRETT PLATFORMS LTD ("we", "us", or "our"), registered in England and Wales and operating from 118 Titsey Road, OXTED, RH8 0DF, United Kingdom, collects, uses, stores, shares, and protects personal data when you visit https://jarrettplatforms.technology, communicate with us, request professional services in computer systems design and related services, or otherwise interact with our business. As JARRETT PLATFORMS LTD, we process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations (PECR), and applicable guidance issued by the Information Commissioner's Office (ICO). This Policy (Part 2) applies to clients, prospective clients, suppliers, partners, website visitors, job applicants, and any individual whose personal data we handle in connection with custom computer programming services, platform engineering, technical consulting, and associated professional, scientific, and technical services.
Data Controller Details
JARRETT PLATFORMS LTD is the data controller responsible for personal data described in this Policy. Our registered office is 118 Titsey Road, OXTED, RH8 0DF, United Kingdom. For privacy enquiries, data subject requests, or complaints relating to processing activities, contact us at about@jarrettplatforms.technology or +447025756407. Where we appoint a processor to handle data on our behalf, we ensure contractual safeguards consistent with Article 28 UK GDPR requirements, including documented instructions, confidentiality obligations, security measures, sub-processor controls, assistance with data subject rights, deletion or return of data at contract end, and audit cooperation. As JARRETT PLATFORMS LTD, we maintain an internal record of processing activities as required by Article 30 UK GDPR and review it periodically to reflect changes in services, systems, and regulatory expectations.
Categories of Personal Data Collected
As JARRETT PLATFORMS LTD, we may collect identity and contact data including name, job title, employer, postal address, email address, telephone number, and billing identifiers. As JARRETT PLATFORMS LTD, we may collect account and authentication data where client portals or secure collaboration environments are provisioned. As JARRETT PLATFORMS LTD, we may collect project and commercial data including statements of work, technical requirements, architecture documentation references, procurement records, invoices, payment status, and correspondence relating to delivery routes, milestones, and service pathways. As JARRETT PLATFORMS LTD, we may collect technical and usage data including IP address, browser type, device identifiers, session logs, cookie identifiers, referral URLs, pages viewed, interaction timestamps, and diagnostic telemetry necessary to secure and improve our website. As JARRETT PLATFORMS LTD, we may collect communication content including emails, web form submissions, meeting notes where lawfully recorded, and support tickets. As JARRETT PLATFORMS LTD, we do not intentionally collect special category data unless required for a specific lawful purpose with appropriate safeguards; where such data is provided voluntarily, we limit processing to the stated purpose.
Sources of Personal Data
Personal data is collected directly from you when you complete contact forms, submit project briefs, sign contracts, attend meetings, or correspond with our team. Data may be collected automatically through website technologies described in our Cookie Policy. As JARRETT PLATFORMS LTD, we may receive data from your organisation when you are designated as a project contact, approver, or technical liaison. As JARRETT PLATFORMS LTD, we may receive data from publicly available professional sources where relevant to business development, always balancing legitimate interests against privacy expectations. As JARRETT PLATFORMS LTD, we may receive data from service providers supporting hosting, analytics, communications, CRM, accounting, and identity verification, strictly as necessary for operational delivery.
Purposes and Lawful Bases
As JARRETT PLATFORMS LTD, we process personal data to respond to enquiries and provide quotations for computer systems design services (contract steps and legitimate interests). As JARRETT PLATFORMS LTD, we process data to perform contracts, deliver custom programming and integration work, manage projects, issue invoices, and maintain client relationships (contract and legal obligation). As JARRETT PLATFORMS LTD, we process data to secure systems, prevent fraud, monitor access, investigate incidents, and enforce terms (legitimate interests and legal obligation). As JARRETT PLATFORMS LTD, we process data to comply with tax, accounting, and regulatory requirements (legal obligation). As JARRETT PLATFORMS LTD, we process data to improve website performance and service quality through aggregated analytics where consent or legitimate interests apply. As JARRETT PLATFORMS LTD, we process data for direct marketing to business contacts where permitted by law, offering an opt-out at any time. Where consent is the lawful basis, you may withdraw consent without affecting prior lawful processing.
Automated Decision-Making
As JARRETT PLATFORMS LTD, we do not use solely automated decision-making producing legal or similarly significant effects without human review. Operational monitoring tools may generate alerts requiring human assessment. Any future use of automated profiling for marketing would be disclosed with opt-out mechanisms and lawful basis clarification.
Data Sharing and Recipients
As JARRETT PLATFORMS LTD, we may share personal data with hosting and cloud infrastructure providers located in the UK or jurisdictions subject to adequacy regulations or appropriate safeguards such as International Data Transfer Agreements. As JARRETT PLATFORMS LTD, we may share data with professional advisers including solicitors, accountants, and insurers under confidentiality duties. As JARRETT PLATFORMS LTD, we may share data with subcontractors engaged for specialised technical delivery under data processing agreements. As JARRETT PLATFORMS LTD, we may disclose data to courts, regulators, or law enforcement when required by law or to establish, exercise, or defend legal claims. As JARRETT PLATFORMS LTD, we do not sell personal data. Intra-group sharing is limited and governed by internal policies where applicable.
International Transfers
Where personal data is transferred outside the UK, we implement transfer tools recognised under UK law, assess recipient jurisdictions, and apply supplementary measures where necessary. Clients requiring UK or EEA data residency for specific workloads should raise this during project intake so contractual and architectural controls can be aligned.
Retention Periods
As JARRETT PLATFORMS LTD, we retain personal data only as long as necessary for the purposes collected, including statutory limitation periods. Enquiry records are typically retained for up to twenty-four months unless converted to an active client relationship. Contract and project records are retained for the duration of the engagement and thereafter for up to seven years for legal, tax, and dispute resolution purposes unless a longer period is required. Security logs may be retained for up to eighteen months. Marketing suppression lists are retained indefinitely to honour opt-out preferences. Retention schedules are reviewed annually and securely deleted or anonymised when no longer required.
Security Measures
As JARRETT PLATFORMS LTD, we implement organisational and technical measures including access control, role-based permissions, encryption in transit, secure development practices, vulnerability management, backup procedures, incident response plans, staff training, and supplier security assessments. No method of transmission or storage is completely secure; we commit to prompt notification of personal data breaches to the ICO and affected individuals where required by law.
Your Rights
Under UK GDPR you have rights of access, rectification, erasure, restriction, portability, objection, and rights related to automated decision-making. You may lodge a complaint with the ICO at ico.org.uk. To exercise rights, contact us using details above; we may request identity verification. As JARRETT PLATFORMS LTD, we respond within one month, extendable where complex.
Children
Our services are directed to business clients. As JARRETT PLATFORMS LTD, we do not knowingly collect data from children under sixteen without parental authority. If you believe we have collected such data, contact us for deletion.
Third-Party Links
Our website may link to third-party sites not controlled by us. Their privacy practices govern data collected there. Review their policies before submitting personal data.
Updates to This Policy
As JARRETT PLATFORMS LTD, we may update this Policy to reflect legal, technical, or business changes. Material updates will be posted on this page with a revised effective date. Continued use after updates constitutes acknowledgement where permitted by law.
Introduction and Scope
This Privacy Policy explains how JARRETT PLATFORMS LTD ("we", "us", or "our"), registered in England and Wales and operating from 118 Titsey Road, OXTED, RH8 0DF, United Kingdom, collects, uses, stores, shares, and protects personal data when you visit https://jarrettplatforms.technology, communicate with us, request professional services in computer systems design and related services, or otherwise interact with our business. As JARRETT PLATFORMS LTD, we process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations (PECR), and applicable guidance issued by the Information Commissioner's Office (ICO). This Policy (Part 3) applies to clients, prospective clients, suppliers, partners, website visitors, job applicants, and any individual whose personal data we handle in connection with custom computer programming services, platform engineering, technical consulting, and associated professional, scientific, and technical services.
Data Controller Details
JARRETT PLATFORMS LTD is the data controller responsible for personal data described in this Policy. Our registered office is 118 Titsey Road, OXTED, RH8 0DF, United Kingdom. For privacy enquiries, data subject requests, or complaints relating to processing activities, contact us at about@jarrettplatforms.technology or +447025756407. Where we appoint a processor to handle data on our behalf, we ensure contractual safeguards consistent with Article 28 UK GDPR requirements, including documented instructions, confidentiality obligations, security measures, sub-processor controls, assistance with data subject rights, deletion or return of data at contract end, and audit cooperation. As JARRETT PLATFORMS LTD, we maintain an internal record of processing activities as required by Article 30 UK GDPR and review it periodically to reflect changes in services, systems, and regulatory expectations.
Categories of Personal Data Collected
As JARRETT PLATFORMS LTD, we may collect identity and contact data including name, job title, employer, postal address, email address, telephone number, and billing identifiers. As JARRETT PLATFORMS LTD, we may collect account and authentication data where client portals or secure collaboration environments are provisioned. As JARRETT PLATFORMS LTD, we may collect project and commercial data including statements of work, technical requirements, architecture documentation references, procurement records, invoices, payment status, and correspondence relating to delivery routes, milestones, and service pathways. As JARRETT PLATFORMS LTD, we may collect technical and usage data including IP address, browser type, device identifiers, session logs, cookie identifiers, referral URLs, pages viewed, interaction timestamps, and diagnostic telemetry necessary to secure and improve our website. As JARRETT PLATFORMS LTD, we may collect communication content including emails, web form submissions, meeting notes where lawfully recorded, and support tickets. As JARRETT PLATFORMS LTD, we do not intentionally collect special category data unless required for a specific lawful purpose with appropriate safeguards; where such data is provided voluntarily, we limit processing to the stated purpose.
Sources of Personal Data
Personal data is collected directly from you when you complete contact forms, submit project briefs, sign contracts, attend meetings, or correspond with our team. Data may be collected automatically through website technologies described in our Cookie Policy. As JARRETT PLATFORMS LTD, we may receive data from your organisation when you are designated as a project contact, approver, or technical liaison. As JARRETT PLATFORMS LTD, we may receive data from publicly available professional sources where relevant to business development, always balancing legitimate interests against privacy expectations. As JARRETT PLATFORMS LTD, we may receive data from service providers supporting hosting, analytics, communications, CRM, accounting, and identity verification, strictly as necessary for operational delivery.
Purposes and Lawful Bases
As JARRETT PLATFORMS LTD, we process personal data to respond to enquiries and provide quotations for computer systems design services (contract steps and legitimate interests). As JARRETT PLATFORMS LTD, we process data to perform contracts, deliver custom programming and integration work, manage projects, issue invoices, and maintain client relationships (contract and legal obligation). As JARRETT PLATFORMS LTD, we process data to secure systems, prevent fraud, monitor access, investigate incidents, and enforce terms (legitimate interests and legal obligation). As JARRETT PLATFORMS LTD, we process data to comply with tax, accounting, and regulatory requirements (legal obligation). As JARRETT PLATFORMS LTD, we process data to improve website performance and service quality through aggregated analytics where consent or legitimate interests apply. As JARRETT PLATFORMS LTD, we process data for direct marketing to business contacts where permitted by law, offering an opt-out at any time. Where consent is the lawful basis, you may withdraw consent without affecting prior lawful processing.
Automated Decision-Making
As JARRETT PLATFORMS LTD, we do not use solely automated decision-making producing legal or similarly significant effects without human review. Operational monitoring tools may generate alerts requiring human assessment. Any future use of automated profiling for marketing would be disclosed with opt-out mechanisms and lawful basis clarification.
Data Sharing and Recipients
As JARRETT PLATFORMS LTD, we may share personal data with hosting and cloud infrastructure providers located in the UK or jurisdictions subject to adequacy regulations or appropriate safeguards such as International Data Transfer Agreements. As JARRETT PLATFORMS LTD, we may share data with professional advisers including solicitors, accountants, and insurers under confidentiality duties. As JARRETT PLATFORMS LTD, we may share data with subcontractors engaged for specialised technical delivery under data processing agreements. As JARRETT PLATFORMS LTD, we may disclose data to courts, regulators, or law enforcement when required by law or to establish, exercise, or defend legal claims. As JARRETT PLATFORMS LTD, we do not sell personal data. Intra-group sharing is limited and governed by internal policies where applicable.
International Transfers
Where personal data is transferred outside the UK, we implement transfer tools recognised under UK law, assess recipient jurisdictions, and apply supplementary measures where necessary. Clients requiring UK or EEA data residency for specific workloads should raise this during project intake so contractual and architectural controls can be aligned.
Retention Periods
As JARRETT PLATFORMS LTD, we retain personal data only as long as necessary for the purposes collected, including statutory limitation periods. Enquiry records are typically retained for up to twenty-four months unless converted to an active client relationship. Contract and project records are retained for the duration of the engagement and thereafter for up to seven years for legal, tax, and dispute resolution purposes unless a longer period is required. Security logs may be retained for up to eighteen months. Marketing suppression lists are retained indefinitely to honour opt-out preferences. Retention schedules are reviewed annually and securely deleted or anonymised when no longer required.
Security Measures
As JARRETT PLATFORMS LTD, we implement organisational and technical measures including access control, role-based permissions, encryption in transit, secure development practices, vulnerability management, backup procedures, incident response plans, staff training, and supplier security assessments. No method of transmission or storage is completely secure; we commit to prompt notification of personal data breaches to the ICO and affected individuals where required by law.
Your Rights
Under UK GDPR you have rights of access, rectification, erasure, restriction, portability, objection, and rights related to automated decision-making. You may lodge a complaint with the ICO at ico.org.uk. To exercise rights, contact us using details above; we may request identity verification. As JARRETT PLATFORMS LTD, we respond within one month, extendable where complex.
Children
Our services are directed to business clients. As JARRETT PLATFORMS LTD, we do not knowingly collect data from children under sixteen without parental authority. If you believe we have collected such data, contact us for deletion.
Third-Party Links
Our website may link to third-party sites not controlled by us. Their privacy practices govern data collected there. Review their policies before submitting personal data.
Updates to This Policy
As JARRETT PLATFORMS LTD, we may update this Policy to reflect legal, technical, or business changes. Material updates will be posted on this page with a revised effective date. Continued use after updates constitutes acknowledgement where permitted by law.
Introduction and Scope
This Privacy Policy explains how JARRETT PLATFORMS LTD ("we", "us", or "our"), registered in England and Wales and operating from 118 Titsey Road, OXTED, RH8 0DF, United Kingdom, collects, uses, stores, shares, and protects personal data when you visit https://jarrettplatforms.technology, communicate with us, request professional services in computer systems design and related services, or otherwise interact with our business. As JARRETT PLATFORMS LTD, we process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations (PECR), and applicable guidance issued by the Information Commissioner's Office (ICO). This Policy (Part 4) applies to clients, prospective clients, suppliers, partners, website visitors, job applicants, and any individual whose personal data we handle in connection with custom computer programming services, platform engineering, technical consulting, and associated professional, scientific, and technical services.
Data Controller Details
JARRETT PLATFORMS LTD is the data controller responsible for personal data described in this Policy. Our registered office is 118 Titsey Road, OXTED, RH8 0DF, United Kingdom. For privacy enquiries, data subject requests, or complaints relating to processing activities, contact us at about@jarrettplatforms.technology or +447025756407. Where we appoint a processor to handle data on our behalf, we ensure contractual safeguards consistent with Article 28 UK GDPR requirements, including documented instructions, confidentiality obligations, security measures, sub-processor controls, assistance with data subject rights, deletion or return of data at contract end, and audit cooperation. As JARRETT PLATFORMS LTD, we maintain an internal record of processing activities as required by Article 30 UK GDPR and review it periodically to reflect changes in services, systems, and regulatory expectations.
Categories of Personal Data Collected
As JARRETT PLATFORMS LTD, we may collect identity and contact data including name, job title, employer, postal address, email address, telephone number, and billing identifiers. As JARRETT PLATFORMS LTD, we may collect account and authentication data where client portals or secure collaboration environments are provisioned. As JARRETT PLATFORMS LTD, we may collect project and commercial data including statements of work, technical requirements, architecture documentation references, procurement records, invoices, payment status, and correspondence relating to delivery routes, milestones, and service pathways. As JARRETT PLATFORMS LTD, we may collect technical and usage data including IP address, browser type, device identifiers, session logs, cookie identifiers, referral URLs, pages viewed, interaction timestamps, and diagnostic telemetry necessary to secure and improve our website. As JARRETT PLATFORMS LTD, we may collect communication content including emails, web form submissions, meeting notes where lawfully recorded, and support tickets. As JARRETT PLATFORMS LTD, we do not intentionally collect special category data unless required for a specific lawful purpose with appropriate safeguards; where such data is provided voluntarily, we limit processing to the stated purpose.
Sources of Personal Data
Personal data is collected directly from you when you complete contact forms, submit project briefs, sign contracts, attend meetings, or correspond with our team. Data may be collected automatically through website technologies described in our Cookie Policy. As JARRETT PLATFORMS LTD, we may receive data from your organisation when you are designated as a project contact, approver, or technical liaison. As JARRETT PLATFORMS LTD, we may receive data from publicly available professional sources where relevant to business development, always balancing legitimate interests against privacy expectations. As JARRETT PLATFORMS LTD, we may receive data from service providers supporting hosting, analytics, communications, CRM, accounting, and identity verification, strictly as necessary for operational delivery.
Purposes and Lawful Bases
As JARRETT PLATFORMS LTD, we process personal data to respond to enquiries and provide quotations for computer systems design services (contract steps and legitimate interests). As JARRETT PLATFORMS LTD, we process data to perform contracts, deliver custom programming and integration work, manage projects, issue invoices, and maintain client relationships (contract and legal obligation). As JARRETT PLATFORMS LTD, we process data to secure systems, prevent fraud, monitor access, investigate incidents, and enforce terms (legitimate interests and legal obligation). As JARRETT PLATFORMS LTD, we process data to comply with tax, accounting, and regulatory requirements (legal obligation). As JARRETT PLATFORMS LTD, we process data to improve website performance and service quality through aggregated analytics where consent or legitimate interests apply. As JARRETT PLATFORMS LTD, we process data for direct marketing to business contacts where permitted by law, offering an opt-out at any time. Where consent is the lawful basis, you may withdraw consent without affecting prior lawful processing.
Automated Decision-Making
As JARRETT PLATFORMS LTD, we do not use solely automated decision-making producing legal or similarly significant effects without human review. Operational monitoring tools may generate alerts requiring human assessment. Any future use of automated profiling for marketing would be disclosed with opt-out mechanisms and lawful basis clarification.
Data Sharing and Recipients
As JARRETT PLATFORMS LTD, we may share personal data with hosting and cloud infrastructure providers located in the UK or jurisdictions subject to adequacy regulations or appropriate safeguards such as International Data Transfer Agreements. As JARRETT PLATFORMS LTD, we may share data with professional advisers including solicitors, accountants, and insurers under confidentiality duties. As JARRETT PLATFORMS LTD, we may share data with subcontractors engaged for specialised technical delivery under data processing agreements. As JARRETT PLATFORMS LTD, we may disclose data to courts, regulators, or law enforcement when required by law or to establish, exercise, or defend legal claims. As JARRETT PLATFORMS LTD, we do not sell personal data. Intra-group sharing is limited and governed by internal policies where applicable.
International Transfers
Where personal data is transferred outside the UK, we implement transfer tools recognised under UK law, assess recipient jurisdictions, and apply supplementary measures where necessary. Clients requiring UK or EEA data residency for specific workloads should raise this during project intake so contractual and architectural controls can be aligned.
Retention Periods
As JARRETT PLATFORMS LTD, we retain personal data only as long as necessary for the purposes collected, including statutory limitation periods. Enquiry records are typically retained for up to twenty-four months unless converted to an active client relationship. Contract and project records are retained for the duration of the engagement and thereafter for up to seven years for legal, tax, and dispute resolution purposes unless a longer period is required. Security logs may be retained for up to eighteen months. Marketing suppression lists are retained indefinitely to honour opt-out preferences. Retention schedules are reviewed annually and securely deleted or anonymised when no longer required.
Security Measures
As JARRETT PLATFORMS LTD, we implement organisational and technical measures including access control, role-based permissions, encryption in transit, secure development practices, vulnerability management, backup procedures, incident response plans, staff training, and supplier security assessments. No method of transmission or storage is completely secure; we commit to prompt notification of personal data breaches to the ICO and affected individuals where required by law.
Your Rights
Under UK GDPR you have rights of access, rectification, erasure, restriction, portability, objection, and rights related to automated decision-making. You may lodge a complaint with the ICO at ico.org.uk. To exercise rights, contact us using details above; we may request identity verification. As JARRETT PLATFORMS LTD, we respond within one month, extendable where complex.
Children
Our services are directed to business clients. As JARRETT PLATFORMS LTD, we do not knowingly collect data from children under sixteen without parental authority. If you believe we have collected such data, contact us for deletion.
Third-Party Links
Our website may link to third-party sites not controlled by us. Their privacy practices govern data collected there. Review their policies before submitting personal data.
Updates to This Policy
As JARRETT PLATFORMS LTD, we may update this Policy to reflect legal, technical, or business changes. Material updates will be posted on this page with a revised effective date. Continued use after updates constitutes acknowledgement where permitted by law.
Introduction and Scope
This Privacy Policy explains how JARRETT PLATFORMS LTD ("we", "us", or "our"), registered in England and Wales and operating from 118 Titsey Road, OXTED, RH8 0DF, United Kingdom, collects, uses, stores, shares, and protects personal data when you visit https://jarrettplatforms.technology, communicate with us, request professional services in computer systems design and related services, or otherwise interact with our business. As JARRETT PLATFORMS LTD, we process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations (PECR), and applicable guidance issued by the Information Commissioner's Office (ICO). This Policy (Part 5) applies to clients, prospective clients, suppliers, partners, website visitors, job applicants, and any individual whose personal data we handle in connection with custom computer programming services, platform engineering, technical consulting, and associated professional, scientific, and technical services.
Data Controller Details
JARRETT PLATFORMS LTD is the data controller responsible for personal data described in this Policy. Our registered office is 118 Titsey Road, OXTED, RH8 0DF, United Kingdom. For privacy enquiries, data subject requests, or complaints relating to processing activities, contact us at about@jarrettplatforms.technology or +447025756407. Where we appoint a processor to handle data on our behalf, we ensure contractual safeguards consistent with Article 28 UK GDPR requirements, including documented instructions, confidentiality obligations, security measures, sub-processor controls, assistance with data subject rights, deletion or return of data at contract end, and audit cooperation. As JARRETT PLATFORMS LTD, we maintain an internal record of processing activities as required by Article 30 UK GDPR and review it periodically to reflect changes in services, systems, and regulatory expectations.