Privacy Policy – SJN Automation

Privacy Policy

SJN Automation  |  Last updated: 28 April 2026

1. Contact Details

SJN Automation
Email: [email protected]

If you have any questions about this privacy notice or how we handle your personal information, please contact us using the details above.

2. What Information We Collect and Why

To provide services and goods

  • Names and contact details
  • Purchase or account history
  • Account information
  • Website user information (including user journeys and cookie tracking)
  • Records of meetings and decisions
  • Information relating to compliments or complaints

For the operation of customer accounts

  • Names and contact details
  • Payment details (including card or bank information)
  • Purchase history
  • Account information, including registration details
  • Information used for security purposes
  • Marketing preferences

For service updates or marketing purposes

  • Names and contact details
  • Marketing preferences
  • IP addresses
  • Website and app user journey information
  • Records of consent, where appropriate

To comply with legal requirements

  • Name
  • Contact information
  • Financial transaction information

For dealing with queries, complaints or claims

  • Names and contact details
  • Account information
  • Purchase or service history
  • Customer or client accounts and records
  • Financial transaction information
  • Correspondence

3. Lawful Bases and Data Protection Rights

Under UK data protection law, we must have a lawful basis for collecting and using your personal information.

Purpose Lawful Basis
Providing services and goods Contract; Legitimate interests (running and improving our services and protecting our business interests)
Operation of customer accounts Contract; Legitimate interests (managing client accounts and delivering services effectively)
Service updates or marketing Consent (for prospects); Legitimate interests (for existing clients)
Legal requirements Legal obligation
Queries, complaints or claims Contract; Legitimate interests (resolving disputes and protecting our business interests)

Your data protection rights

You have the following rights under UK data protection law:

  • Right of access — you can ask for copies of your personal information
  • Right to rectification — you can ask us to correct inaccurate or incomplete information
  • Right to erasure — you can ask us to delete your personal information in certain circumstances
  • Right to restriction — you can ask us to limit how we use your information
  • Right to object — you can object to our processing of your personal data
  • Right to withdraw consent — where we rely on consent, you can withdraw it at any time

To make a data protection rights request, contact us using the details at the top of this notice. We will respond within one month.

4. Where We Get Your Information From

We collect personal information directly from you — for example, when you book a call, fill in a form on our website, or enter into a contract with us. We also receive data via advertising platforms including Meta, and via booking forms on our website.

5. How Long We Keep Information

Type of Data Retention Period
Client contact and account information 6 years following the end of the contract
Financial and payment records 6 years (HMRC requirement)
Prospect and lead data (no contract entered into) Up to 3 years from date of last contact
Correspondence and complaints records 6 years

6. Who We Share Information With

We use the following third-party data processors who handle personal information on our behalf:

Processor Purpose Location
GoHighLevel (HighLevel Inc) CRM and marketing automation. Stores and processes client and prospect contact details, booking information, SMS and email communications. USA
Stripe Inc Payment processing. Processes client payment details and transaction records. USA
Meta Platforms Inc Online advertising. Processes website visitor and lead data for paid advertising campaigns. USA

We may also share personal information with relevant regulatory authorities (including HMRC and the ICO) where we are legally obliged to do so.

7. Sharing Information Outside the UK

Our data processors may transfer personal information outside of the UK. When doing so, they comply with UK GDPR and have appropriate safeguards in place.

Organisation Country Transfer Mechanism
GoHighLevel (HighLevel Inc) United States Addendum to EU Standard Contractual Clauses (SCCs)
Stripe Inc United States Addendum to EU Standard Contractual Clauses (SCCs)
Meta Platforms Inc United States Addendum to EU Standard Contractual Clauses (SCCs)

8. Data Protection Officer

We are not required to appoint a Data Protection Officer. All data protection enquiries should be directed to Sam at [email protected].

9. Children's Data

Our services are aimed at businesses. We do not knowingly collect personal data from children under the age of 13.

10. Data Security

We use appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, or misuse. Access to personal data is restricted to those who require it to carry out their responsibilities.

11. How to Complain

If you have concerns about how we use your personal data, please contact us in the first instance at [email protected]. We will acknowledge your complaint within 30 days.

If you remain unhappy, you can complain to the ICO:

Information Commissioner's Office

Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Helpline: 0303 123 1113

Website: ico.org.uk/make-a-complaint

SJN Automation  |  Privacy Policy  |  Last updated 28 April 2026