Privacy Policy

Last updated: 2 October 2026


Who is Responsible for your Information?

John Mann is the data controller for personal information collected through johnmann.uk and related business enquiries.

Email: john@johnmann.uk
Business correspondence address: [insert address]

This policy explains how personal information is handled under applicable UK data protection law.


Information Collected

Information may include your name, contact details, organisation, enquiry and correspondence, together with information necessary to manage an advisory engagement.

The website’s hosting provider may also collect technical information, including IP addresses, browser details and security logs.

Please avoid submitting sensitive personal information or confidential operational details through the general enquiry form.


How Information is Used

Personal information is used to:

  • Respond to enquiries and discuss requirements.
  • Prepare proposals, manage engagements and deliver services.
  • Maintain business records and meet legal obligations.
  • Protect the website and business systems.

The lawful basis is contract where processing is necessary for an agreement with you or steps you request before entering one; legitimate interests for business correspondence, service administration and security; and legal obligation for statutory recordkeeping.

Where consent is relied upon, it may be withdrawn at any time.

Providing enquiry information is voluntary, but insufficient information may prevent a response or delivery of services.


Sharing and Transferring Information

Information may be shared where necessary with hosting, email and IT providers, professional advisers, and authorities where legally required. Personal information is not sold.


Retention and Security

Information is retained according to its purpose, contractual requirements, legal obligations and any need to establish or defend legal claims.

For client services, the retention period can be the duration of the contract plus one year after completion. Contract is a lawful basis only where processing is necessary for a contract with the individual, or pre-contract steps they request. Website logs, cookies and contacts acting for corporate clients may require a separate basis. 

Appropriate technical and organisational measures are used to protect personal information.


Cookies

[Insert the website’s actual cookie and analytics arrangements, including purposes, providers, durations and how visitors can manage preferences.]


Your Rights

Depending on the circumstances, you may request access, correction, erasure, restriction or transfer of your information.

You may object to processing based on legitimate interests and to direct marketing.

Contact the email above to exercise your rights or withdraw consent.

You may also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint.


Changes

This policy will be updated when processing arrangements change. The latest version will appear here.