Privacy Notice

Last updated: 28 July 2026  ·  SJ Remote Solutions

Which part applies to you?
Part A is for people we have contacted about our services who did not give us their details. Part B is for people who contact us or use this website — the waitlist form, cookies and analytics.

Part A — If we contacted you about our services

This notice explains how SJ Remote Solutions handles the contact details of people we approach about our services. If you are a client, a separate notice applies to your account and is provided to you when your account is set up.

This part is provided under Article 14 of the UK GDPR, which applies because we did not obtain your details from you.

Who we are

Controller
Stephanie Jones, trading as SJ Remote Solutions (a sole trader)
ICO registration
ZC187384
Contact
stephanie@sjremotesolutions.co.uk
Data protection lead
Stephanie Jones. We are not required to appoint a Data Protection Officer at our current scale.

What we hold about you

Only business contact information relating to your professional role:

  • Your name and job title
  • Your work email address and work telephone number
  • The organisation you work for, and publicly available information about it
  • A record of our contact with you — what was sent, when, and any reply

We do not hold personal email addresses or personal phone numbers. We do not hold any special category information about you — nothing about your health, ethnicity, religion, politics, trade union membership, sexual orientation, and no genetic or biometric data.

Where we got it

You did not give us this information directly, so we are telling you where it came from. It will have been one or more of:

  • Your employer’s own website
  • Your public professional profile, such as LinkedIn
  • Companies House and other public registers
  • Publicly available industry directories and published material
  • Inferred from your organisation’s standard email format — in which case the address was worked out rather than found

We do not buy contact lists, and we do not obtain your details from data brokers.

Why we are using it, and on what basis

Purpose
To tell you about our AI governance and compliance services for recruitment agencies, and to follow up if you are interested.
Lawful basis
Legitimate interests — Article 6(1)(f) UK GDPR.
The interest
Identifying organisations that may need our services, in a sector subject to obligations that came into force in February 2026.
Your rights considered
We carried out a Legitimate Interests Assessment before contacting anyone, weighing our interest against your rights. You can ask us for a copy.

Where we telephone you, we also comply with the Privacy and Electronic Communications Regulations. We screen our calling list against the Corporate Telephone Preference Service, and against the Telephone Preference Service where the business is a sole trader or partnership, before calling and at least every 28 days.

We may also contact you by direct message on LinkedIn, using your public professional profile, on the same legitimate interest basis described above.

Who else sees it

Nobody outside our own systems. We do not sell, share, rent or transfer your details to any third party.

Your details are held in our own systems, which run on the service providers listed in our sub-processor register. Those providers process data on our instructions only and cannot use it for their own purposes. A copy of the register is available on request.

International transfers. Our primary database is hosted in the United Kingdom (London). Where a provider processes data outside the UK, we rely on the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

How long we keep it

If you do not respond
12 months from our last contact with you, then deleted.
If you ask us to stop
We delete everything except the minimum needed to make sure we do not contact you again — usually just your email address on a suppression list. We keep that indefinitely, because it is the only way to honour your request.
If you become a client
A separate retention period applies under your client agreement.

Stopping us contacting you

You can tell us to stop at any time, and we will. There is no process to go through and you do not have to give a reason.

We action this the same day and it is permanent. It survives any rebuild of our systems or contact lists.

Your other rights

Under UK data protection law you can also ask us to:

See what we hold
We will provide a copy within one month.
Correct it
If anything is wrong or out of date.
Delete it
We will, unless we need to keep your details on the suppression list to honour an opt-out.
Restrict how we use it
While we look into a concern you have raised.
Object
You can object to our use of your data. Where you object to direct marketing, we must stop — there is no balancing exercise and no exception.
Receive it in portable form
Available where technically applicable.

There is no charge for any of this. Contact stephanie@sjremotesolutions.co.uk.

If you are unhappy

Please tell us first — we would rather put it right. We will acknowledge your complaint within 30 days, look into it without undue delay, and tell you the outcome.

You can also complain directly to the Information Commissioner’s Office at any time, and you do not have to come to us first:

ICO website
ico.org.uk/make-a-complaint
ICO helpline
0303 123 1113
By post
Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Automated decisions

We do not make any automated decisions about you, and we do not profile you. No software scores, ranks or sorts you, and no decision affecting you is made without a person involved.

Part B — If you contact us or use this website

This part covers the waitlist form, direct correspondence, cookies and analytics.

1. Who we are

SJ Remote Solutions is an independent AI governance and compliance consultancy operating as a sole trader, registered with HMRC. Our registered address is in Wales, United Kingdom. We are the data controller for the personal data described in this notice.

Contact: stephanie@sjremotesolutions.co.uk

2. What personal data we collect and why

a) Registering your interest ("join the waitlist")
This website is currently a holding page for a platform still in development. If you leave your details via the waitlist form on our homepage or Insights page, we collect your email address, your agency name if you provide it, the page you submitted from, and the date and time of submission. We use this solely to notify you when the platform launches and to send occasional, relevant updates about AI compliance in recruitment. We do not use this information for any other purpose, and we do not sell or rent it to anyone.

b) Direct correspondence
If you email us directly, we hold that correspondence (and any personal data within it) for as long as reasonably necessary to respond to you and keep a record of the interaction.

c) Website usage data
We do not use analytics, advertising, or tracking cookies on this website. See our Cookie Notice for the limited, strictly necessary technical data involved in serving the site.

3. Our legal basis for processing

Where you register your interest with us, we rely on your consent (UK GDPR Article 6(1)(a)) — you actively choose to submit your details, and you can withdraw that consent at any time by emailing us or unsubscribing from any update we send. Where you contact us directly, we rely on our legitimate interest (Article 6(1)(f)) in responding to your enquiry.

4. Who we share your data with

We use a small number of service providers (sub-processors) to run this website and hold your data. We choose providers with strong data protection standards, and we do not permit them to use your data for their own purposes.

Supabase — our database and hosting provider. Waitlist submissions are stored in Supabase's UK (London) region.
Microsoft 365 — our email provider, used for any direct correspondence with you.
Cloudflare — hosts and serves this website's static pages.

We do not otherwise share your personal data with third parties, and we do not transfer it outside the UK.

5. How long we keep your data

Waitlist details are kept until the platform launches and you've had the chance to act on that update, or until you ask us to remove you, whichever is sooner. Direct correspondence is kept for as long as reasonably necessary, in line with standard professional record-keeping practice. You can ask us to delete your data at any time — see Section 6.

6. Your rights

Under UK GDPR, you have the right to: access the personal data we hold about you; have inaccurate data corrected; ask us to delete your data; restrict or object to our processing; and receive your data in a portable format. To exercise any of these rights, email stephanie@sjremotesolutions.co.uk — we'll respond within one month.

We do not carry out any automated decision-making using the personal data described in this notice.

7. Complaints

If you're unhappy with how we've handled your personal data, please contact us first at stephanie@sjremotesolutions.co.uk so we can try to put it right. You also have the right to lodge a complaint directly with the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk.

8. Changes to this notice

We will update this notice when our processing activities change — including once the platform itself launches and this notice needs to cover the service directly. The "last updated" date at the top of this page will reflect any changes. For material changes we will take reasonable steps to inform you directly.