Privacy Policy

J&B Medical and Security Services Limited

Last Updated: 12 December 2025

J&B Medical and Security Services Limited (“we”, “our”, “us”) is committed to protecting your privacy and ensuring that your personal information is handled securely and responsibly. This Privacy Policy explains how we collect, use, store, and safeguard your information when you visit our website or use our services. We comply fully with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and all relevant privacy laws.

1. Who We Are

J&B Medical and Security Services Limited provides medical, security, event, and support services across the UK.

For all data protection matters, we act as the Data Controller.

Contact Details:

Email: jamie@jbmedicalandsecurityservices.co.uk

Telephone: 07511782590

Address: 36 Litchfeild Street , WS1 7TJ , WALSALL

2. Information We Collect

We may collect and process the following types of personal information:

A. Information You Provide Directly

Name, address, email address, phone number
Employment details (for recruitment)
Medical qualifications, professional registrations, certifications
Billing and payment details
Event requirements and risk assessment information
Emergency contact details

B. Automatically Collected Information

When you visit our website, we may collect:

IP address
Browser type and device information
Website usage statistics
Cookies (see Cookie section below)

C. Sensitive Information

As a medical and security provider, we may process special category data such as:

Health information
Incident or accident reports
Medical treatment provided at events

This information is processed only when necessary, legally justified, and with appropriate safeguards.

3. How We Use Your Information

We process personal data for the following purposes:

To provide medical and security services
To manage bookings, client interactions, and event planning
To respond to queries, requests, or emergencies
To create and maintain employee or contractor records
To comply with legal, regulatory, or professional obligations
To improve our website, services, and customer experience
To issue invoices, process payments, and manage accounts
For recruitment, vetting, and onboarding of staff and contractors

We never sell your personal information to third parties.

4. Lawful Basis for Processing

We process data under one or more of the following lawful bases:

Contractual necessity – to deliver the services you request
Legal obligation – compliance with health, safeguarding, transport, and security regulations
Vital interests – when providing medical care or responding to emergencies
Legitimate interests – business operations, security, and service improvement
Consent – for optional communications such as marketing (you can withdraw at any time)

5. Sharing Your Information

We may share personal data with:

Emergency services (when required)
Regulatory bodies (HCPC, NMC, SIA, GMC, etc.)
Insurers and legal advisors
Event organisers (where necessary and lawful)
Our accredited medical or security staff
IT service providers and secure data processors

All third parties are required to keep your information secure and use it only for the agreed purpose.

6. Data Storage and Security

We take data security seriously and implement appropriate technical and organisational measures, including:

Encrypted storage
Secure access controls
Staff confidentiality agreements
Regular security audits
Controlled retention procedures

Your information is stored within the UK or other UK GDPR-compliant regions.

7. Data Retention

We only retain personal information for as long as necessary:

Medical records: in line with regulatory requirements
Security incident reports: minimum legal retention periods
Recruitment data: 6 months unless you join our team
Client and business records: for tax and audit obligations

After this period, your data will be securely destroyed.

8. Your Rights

Under UK GDPR, you have the right to:

Access your personal data
Rectify inaccurate or incomplete information
Request erasure (“right to be forgotten”)
Restrict or object to processing
Request data portability
Withdraw consent (if applicable)
Lodge a complaint with the ICO: www.ico.org.uk

To exercise your rights, contact us using the details at the top of this policy.

9. Cookies

Our website may use cookies to improve user experience and analyse site performance.

You can manage or disable cookies through your browser settings.

A full Cookie Policy can be added upon request.

10. Changes to This Policy

We may update this Privacy Policy to reflect changes in legislation or our business practices.

The “Last Updated” date will always be shown at the top of the Privacy Policy.