Legal

Privacy Notice

Last updated: 29 September 2026 · SJ Remote Solutions

Who we are

Stephanie Jones, trading as SJ Remote Solutions, is the controller for the personal data described here. SJ Remote Solutions is a sole-trader business based in Wales, United Kingdom and is registered with the Information Commissioner's Office under registration ZC187384.

Contact: stephanie@sjremotesolutions.co.uk.

Part A — if we contacted you about our services

What we use

We use business contact information connected with your professional role, such as your name, role, work contact details, organisation, publicly available information about the organisation and a record of our contact with you. We do not intentionally collect special-category information for prospecting.

Where it came from

Sources may include your employer's website, public professional profiles, Companies House or other public registers, public industry directories and published material. A business email address may also be inferred from an organisation's published email format. We do not buy contact lists or use data brokers.

Purpose and lawful basis

We use this information to identify organisations that may have a relevant need for the AI Essentials Scan or related professional services and to contact an appropriate business representative. Our UK GDPR lawful basis is legitimate interests under Article 6(1)(f). We carry out and keep under review a Legitimate Interests Assessment for this activity.

Where the Privacy and Electronic Communications Regulations apply to a particular communication, we also take those rules into account. Telephone prospecting lists are screened against applicable preference services before calling.

Your right to stop marketing

You can object to direct marketing at any time by replying to an email, telling us during a call, or emailing us. When you object to direct marketing, we stop using your information for that purpose. We may retain the minimum information needed on a suppression list so that your request continues to be respected.

Part B — if you contact us or use this website

Direct correspondence

If you email us, we use the information you provide to understand your enquiry, respond and, where appropriate, take steps towards an engagement. Depending on the circumstances, our lawful basis is taking steps at your request before entering a contract under Article 6(1)(b), or our legitimate interest under Article 6(1)(f) in responding to business enquiries. We hold correspondence for as long as reasonably necessary to respond and maintain an appropriate business record.

Website data and cookies

We do not use advertising or behavioural profiling technology on the public website. Cloudflare, which serves and protects the website, processes connection information such as IP addresses and may use strictly necessary security technology. Cloudflare Web Analytics also uses a browser beacon to measure page views and page-performance information. Cloudflare states that this service does not use cookies or browser storage, track individuals across sites, or retain source IP addresses in its core analytics systems. We also use privacy-minimised first-party campaign attribution on links sent by SJRS: an opaque lead token, campaign reference and email step may be carried in the link and passed between pages on this website so we can understand whether our outreach led to visits, enquiries or other business engagement. This attribution does not use cookies, local storage or session storage. The event record contains the opaque token, campaign/step, page path, time and referrer host; it does not contain your name, email address, organisation name, raw IP address or a browser identifier. We use this information for our legitimate interests in measuring and improving our business-to-business outreach, while keeping the data limited to what is necessary. See our Cookie Notice.

Service providers and international processing

We use service providers to operate the website, communications and business systems. These include Cloudflare, Supabase, Microsoft 365 and, where relevant to platform communications, Amazon Web Services. Providers act under their own contractual and data-protection arrangements. Where personal data is transferred internationally, we use or rely on an applicable UK transfer mechanism or other lawful safeguard as required.

We do not sell or rent personal data.

Retention

Prospect information is normally retained for up to 12 months after the last relevant contact unless an earlier deletion is appropriate. Suppression information may be retained for as long as needed to honour an opt-out. Raw campaign-attribution page events are kept for no more than 90 days; where a tagged visit becomes an enquiry, the campaign attribution may remain with the enquiry record for the same retention period that applies to that enquiry. Unsuccessful enquiries are normally retained for up to 12 months. Client records are retained under the arrangements applicable to the engagement and legitimate professional/business record-keeping needs.

Your rights

Depending on the processing and the circumstances, UK data-protection law may give you rights of access, rectification, erasure, restriction and objection. The right to data portability applies only where its legal conditions are met — in particular, to certain automated processing based on consent or contract — and does not apply to all processing described in this notice.

For direct marketing, you have the right to object at any time. To exercise a right, email stephanie@sjremotesolutions.co.uk. We normally respond within one month, subject to the rules that apply to the request.

Automated decision-making

SJ Remote Solutions does not use the personal data described in this notice to make solely automated decisions about prospects or people making enquiries that produce legal or similarly significant effects.

Complaints

Please contact us if you have a concern. You also have the right to complain to the Information Commissioner's Office. Visit the ICO complaints service.

Changes

We update this notice when our processing or services materially change. The date above shows the current version.