Privacy Policy
J.O.T Advisory Ltd; Last Updated: 18th March 2026
This Privacy Policy explains how J.O.T Advisory Ltd ("J.O.T", "we", "us", or "our") collects, uses, and protects personal data when you visit our website or engage with our services.
J.O.T Advisory Ltd is a Data Controller and this policy therefore sets out how any information that you may give us whilst using our website or services is collected, processed, used, stored and protected.
1. Company Information
1.1 J.O.T Advisory Ltd is a company registered in England and Wales.
1.2 Company number: 17018967.
1.3 Registered office: 167–169 Great Portland Street, 5th Floor, London, W1W 5PF.
1.4 J.O.T Advisory Ltd provides independent commercial and marketing advisory services.
1.5 Any privacy enquiries regarding this policy or the handling of personal data should be directed to: privacy@jotadvisory.co.uk
2. Scope of This Policy
2.1 This Privacy Policy applies to personal data collected through:
a) visits to our website;
b) communications with us; and
c) business enquiries or engagements.
2.2 This policy does not apply to third-party websites which may be linked to from our website.
3. Personal Data We Collect
3.1 We may collect personal data directly from you when you interact with us.
3.2 This may include:
a) name;
b) email address;
c) company name; and
d) information included in enquiries or correspondence.
3.3 We may also collect limited technical information when you visit our website, including:
a) IP address;
b) browser type;
c) device information;
d) pages visited; and
e) referring websites.
3.4 Such technical information may be collected when you accept our use of cookies or similar technologies as per our Cookie Policy.
3.5 We will only use your personal information for the purposes you have permitted and we will not share it for marketing purposes outside of J.O.T Advisory Ltd, unless you have specifically given us permission to do so. If this practice changes in the future, we will update this policy to identify the non-agent third parties and provide a mechanism through which you can opt-out.
3.6 In some circumstances, we may obtain professional contact information from publicly available sources, professional networks, referrals, or third-party business contacts where this information is relevant to legitimate business communications.
4. How We Use Personal Data
4.1 Personal data may be used for the following purposes:
a) internal record keeping;
b) responding to enquiries;
c) providing advisory services;
d) maintaining professional relationships;
e) improving our website and services;
f) ensuring website functionality and security; and
g) send marketing emails about events, industry or company news and other information we think you may find interesting or useful.
4.2 We do not sell or rent your personal data to third parties.
4.3 We do not use your personal data for behavioural advertising or remarketing.
4.4 If this practice changes in the future, we will update this policy accordingly and provide a mechanism through which you can opt-out.
5. Legal Basis for Processing
5.1 Under UK General Data Protection Regulation (GDPR), we process personal data under the following lawful bases.
5.2 Legitimate Interests (Article 6(1)(f)), including:
a) operating and improving our website;
b) responding to enquiries; and
c) maintaining business communications.
5.3 Consent (Article 6(1)(a)), where applicable, including:
a) analytics cookies and similar technologies.
5.4 Contract (Article 6(1)(b)), where processing is necessary to provide advisory services to clients.
5.5 Where processing is based on consent, individuals have the right to withdraw their consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out prior to the withdrawal.
6. Cookies and Website Technologies
6.1 Our website uses cookies and similar technologies.
6.2 Cookies may be used for the following purposes:
a) ensuring the website functions correctly;
b) understanding how visitors use the website; and
c) improving website performance and user experience.
6.3 Users may accept, reject, or modify their cookie preferences via the cookie consent banner.
6.4 Additional information regarding cookies may be found in our Cookie Policy.
7. Call Recording, Transcription and Analysis
7.1 We may record and transcribe calls where appropriate to support note-taking, accuracy, and the delivery and improvement of our advisory services.
7.2 Recordings and transcripts may be processed using secure tools, including AI-assisted summarisation and analysis, to support internal insight generation and service development.
7.3 Where appropriate, information may be anonymised and aggregated to identify broader patterns, trends, and insights. We do not use identifiable personal data from such sessions for any external publication or sharing.
7.4 Participation in recorded sessions is optional. Individuals may request that recording is paused or stopped at any time, or that sessions are conducted without recording.
8. Third-Party Service Providers
8.1 We may use third-party providers to support the operation of our website and services.
8.2 These may include:
a) website hosting providers;
b) analytics providers;
c) tag management systems;
d) professional service partners or subcontractors we engage to support the delivery of advisory services; and
e) business systems such as productivity tools, communication platforms, CRM systems, or database tools.
8.3 These providers may process limited technical data necessary to deliver their services.
8.4 We may store and manage contact information, business enquiries, and professional relationship data within secure business systems such as customer relationship management (CRM) platforms or database tools.
8.5 These systems are used solely for legitimate business purposes including managing communications, maintaining records of professional interactions, and supporting the delivery of advisory services.
8.6 Appropriate safeguards are applied to ensure personal data is handled securely and in accordance with applicable data protection laws.
8.7 Where personal data is transferred outside the United Kingdom or European Economic Area, such transfers will only occur where appropriate safeguards are in place, including adequacy decisions recognised by the UK government or the use of Standard Contractual Clauses approved under applicable data protection law.
8.8 In the event that J.O.T Advisory Ltd undergoes a business transaction such as a merger, acquisition, restructuring, or sale of assets, personal data may be transferred to the acquiring entity as part of that transaction, provided that such transfer remains subject to applicable data protection laws and appropriate safeguards.
8.9 Personal data may be disclosed, where necessary and in accordance with applicable data protection laws, to the following categories of recipients:
a) professional service partners or subcontractors supporting the delivery of our services;
b) technology providers and software platforms used to operate business systems;
c) professional advisers including legal, accounting, or regulatory advisers;
d) potential acquirers or successors in the event of a business transaction as described in section 8.8.
9. Data Retention
9.1 Personal data will be retained only for as long as necessary to fulfil the purposes for which it was collected.
9.2 This may include retaining data for:
a) responding to enquiries;
b) maintaining business records;
c) complying with legal obligations; and
d) maintaining records of professional contacts, suppliers, and service providers relevant to the delivery of advisory services.
9.3 When personal data is no longer required, it will be securely deleted or anonymised.
9.4 Personal data relating to enquiries or business communications is typically retained for as long as necessary to maintain the professional relationship or fulfil the purpose for which it was collected, unless a longer retention period is required for legal or regulatory purposes.
10. Data Security
10.1 We implement appropriate technical and organisational measures to safeguard your personal data.
10.2 These measures are designed to protect personal data against unauthorised access, disclosure, alteration, or destruction.
10.3 While we take reasonable steps to protect personal data, no internet transmission can be guaranteed to be completely secure.
10.4 When you give your personal information to us, we will process and use that data in accordance with our responsibilities under the General Data Protection Regulation (GDPR) and other relevant legislation.
10.5 To prevent unauthorised access, maintain data accuracy and ensure the correct use of information, we monitor and adjust our physical, electronic and managerial procedures to secure your personal data whilst in our care, or in the care of any outside suppliers with whom we may contract to process your data on our behalf.
11. Your Data Protection Rights
11.1 Under UK data protection law, individuals may have the right to:
a) request access to personal data held about them;
b) request correction of inaccurate data;
c) request deletion of personal data;
d) request restriction of processing;
e) object to processing; and
f) request data portability where applicable.
11.2 Requests relating to personal data must be submitted to: privacy@jotadvisory.co.uk
11.3 We may ask you to provide us with sufficient information so that we can be sure of your identity.
12. Complaints
12.1 If you believe your personal data has been handled improperly, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection matters.
12.2 Further information can be found at: www.ico.co.uk
13. External Websites
13.1 Our website may contain links to third-party websites.
13.2 We are not responsible for the privacy practices or content of external websites.
14. Changes to This Policy
We reserve the right to amend this policy at any time. Any such amendments will take effect when posted on our website and it is your responsibility to read this policy on each occasion you use our website. Your continued use of our website shall signify your acceptance to be bound by the latest policy.