Privacy policy

Introduction

J&B Medical and Security Services Limited is committed to protecting personal information. This notice explains how we use personal data collected through our website, enquiries, bookings, recruitment and service delivery. We follow the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and other applicable requirements.

Who we are and how to contact us

J&B Medical and Security Services Limited provides medical, first aid and security services in the United Kingdom. We are the controller when we decide why and how personal data is used; in some client arrangements we may process information on behalf of another controller. For privacy requests, email jamie@jbmedicalandsecurityservices.co.uk, call 07511 782590 or use our contact page. ICO registration number and postal correspondence address should be confirmed before publishing.

Information we collect

Depending on how you engage with us, we may collect your name, contact details, organisation, event or site requirements, correspondence, booking details, relevant billing information, recruitment details, professional qualifications, and information needed for recruitment checks. When providing relevant medical or incident support, authorised personnel may create medical, incident or safeguarding records. Our website may also process technical data such as IP address, browser information and cookie preferences.

Why we use information and our legal bases

We process data to respond to enquiries, prepare quotations, deliver agreed services, manage staffing and recruitment, maintain business and financial records, manage safety incidents and comply with law. Depending on the activity, our lawful basis is contract, legitimate interests, legal obligation, consent or vital interests. Where special-category information such as health data is involved, we also require an applicable Article 9 UK GDPR condition and, where relevant, a Data Protection Act 2018 condition. Consent is not assumed to be the basis for all medical treatment records.

Medical and sensitive information

Medical, health, safeguarding and other sensitive records are accessed only by personnel with an appropriate need to know, subject to confidentiality and applicable professional requirements. We use appropriate legal grounds for collection and sharing, including where necessary to provide healthcare or respond to an emergency. We do not publish patient information on this website.

Recruitment and employment

Where you apply for a role, we may process application details, employment history, references, right-to-work information and relevant qualifications. Criminal-offence or health information is only processed when there is a lawful condition for doing so. Recruitment information is retained for an appropriate period based on our documented retention arrangements.

Sharing information

Information may be shared, where necessary and lawful, with authorised employees, contractors, healthcare or emergency services, event clients, insurers, professional advisers, regulators and service providers who support our systems. We apply contractual and security safeguards where service providers act as processors.

Website forms, hosting and cookies

Our website includes a contact/enquiry form and may rely on website hosting, email or other service providers to transmit and store submitted details. We use necessary technologies to operate and secure the site; any analytics, advertising or other non-essential cookies should only operate in accordance with applicable consent requirements. Before launch, the website operator must confirm the actual hosting platform, form destination, cookies and consent mechanism and publish accurate cookie information.

Security and retention

We use proportionate organisational and technical safeguards to prevent unauthorised access, misuse and loss. We keep records only as long as reasonably necessary for their purpose, and as required by law, professional standards, contractual obligations, insurance or safeguarding needs. Retention periods vary by record type; our internal retention schedule governs disposal or anonymisation.

International transfers

If a supplier processes personal data outside the UK, we assess whether the transfer is lawful and ensure that a valid adequacy mechanism, safeguard or exception applies where required.

Your rights

Depending on circumstances and legal exemptions, you can request access, correction, deletion, restriction or portability of your data; object to certain processing; and withdraw consent when we rely on it. Contact us using the details above. We generally respond within one month, subject to applicable rules.

Complaints

If you are unhappy with our handling of your personal information, please contact us first. You can also complain to the UK Information Commissioner’s Office at ico.org.uk or by telephone on 0303 123 1113.

Certification and governance

Our ISO 9001 Quality Management and ISO 14001 Environmental Management certifications are provided through Citation. We also participate in the Disability Confident scheme and maintain ICO registration. These commitments support our governance but do not replace the legal requirements that apply to individual data-processing activities.

Changes to this notice

We may update this policy to reflect changes in law, systems or business operations. The version displayed on this page is dated 12 October 2026.

Publication check: Confirm the registered address, ICO registration number, forms, hosting and cookies against the production website before publishing this notice.