Privacy Policy | JBRC Ltd

1. Who we are

This privacy policy explains how JBRC Ltd ("JBRC", "we", "us", "our") collects, uses and protects your personal data. JBRC Ltd is the data controller for the personal data described in this policy.

Data controller: JBRC Ltd
Address: 18 The Ropewalk, Nottingham, Nottinghamshire NG1 5DT, United Kingdom
Phone: 0800 654 6583
Email: enquiries@jbrc-electrical.com

2. What personal data we collect

We only collect personal data that we genuinely need to quote, deliver and certify electrical work. Specifically:

Contact data: name, email, phone number, postal address (the property where work is to be carried out).
Enquiry data: the service you're asking about and any details you choose to share in the message field of our contact form.
Job-related data: photographs of consumer units, circuits and accessories taken during surveys and works (used solely to deliver and certify the job).
Certification data: information that appears on Electrical Installation Certificates, EICRs and BS 5839 commissioning certificates as required by BS 7671 and applicable regulations.
Technical data: when you visit our website, basic analytics (device type, pages visited, approximate location at country/region level). We do not use intrusive cross-site tracking.

3. Lawful basis under UK GDPR

Contract: processing necessary to provide a quote, perform the work and issue certificates you have requested.
Legal obligation: retaining certification records and notifying installations to building control under Part P and BS 7671.
Legitimate interests: responding to enquiries, basic website analytics, and follow-up reminders for landlord EICR expiries (you can opt out at any time).
Consent: any marketing communications and any non-essential cookies. You can withdraw consent at any time.

4. How we use your data

To quote, schedule and deliver electrical work.
To issue certificates and notify installations to building control via NICEIC.
To answer questions you've asked us.
To send EICR expiry reminders to landlord clients (opt-out anytime).
To meet our legal, tax and regulatory obligations.

We do not sell your personal data. We do not use your data for automated decision-making or profiling.

5. Who we share data with

We share personal data only where necessary, with the following categories of recipients:

NICEIC: for building control notification and certificate registration.
Distribution Network Operator (Western Power Distribution / National Grid): for EV charger and load-change notifications.
Our IT and CRM providers: to deliver email, scheduling and customer relationship management. Current providers include Google (email), GoHighLevel (CRM), and our cloud hosting provider — all bound by appropriate data processing agreements.
HMRC, our accountant and our insurers: for legal, tax and insurance purposes.
Local authorities and tenants: where required by the Electrical Safety Standards in the Private Rented Sector (England) Regulations 2020 (landlord EICR copies).

6. International transfers

Some of our processors (including Google) may transfer data outside the UK or EEA. Where this happens, we rely on UK Adequacy Regulations or the UK International Data Transfer Addendum to the EU Standard Contractual Clauses to keep your data protected.

7. How long we keep data

Quote enquiries that don't proceed: 12 months.
Job records and certificates: 7 years (to meet BS 7671 and tax record requirements).
NICEIC building control records: retained on the NICEIC compliance hub in line with their published policy.
Marketing list entries: until you unsubscribe.

8. Cookies

Our site uses a small number of cookies. Essential cookies are needed for the site to work (session, security). Analytics cookies help us understand how the site is used in aggregate — we use privacy-friendly analytics that do not identify you personally. We do not currently use advertising cookies. You can control cookies through your browser settings; blocking essential cookies may break parts of the site.

9. Your rights under UK GDPR

You have the right to:

Access the personal data we hold about you.
Have inaccurate data corrected.
Have your data erased ("right to be forgotten"), where this doesn't conflict with our legal record-keeping obligations on certification.
Restrict or object to processing.
Have your data transferred (data portability).
Withdraw consent at any time, where consent is the lawful basis.

To exercise any of these rights, email enquiries@jbrc-electrical.com or write to the address above. We respond within one calendar month.

10. Complaints

If you're unhappy with how we've handled your personal data, please tell us first — we take complaints seriously and aim to resolve them quickly. Email enquiries@jbrc-electrical.com with the subject line "Data complaint" and we'll come back to you within 5 working days.

You also have the right to complain directly to the Information Commissioner's Office (ICO):

Web: ico.org.uk/make-a-complaint
Phone: 0303 123 1113
Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

11. Changes to this policy

We review this policy at least annually. The "last updated" date at the top of the page tells you when changes were last made. Material changes will be highlighted on this page for 30 days following the change.