Privacy Policy

1. Who We Are

J&P Site Services is a HIAB crane lorry hire and logistics company based in Liverpool, Merseyside. We are the data controller for the personal information we collect and process in connection with our services and this website.

Contact details:
J&P Site Services
Queensway Business Park
Hawthorne Road, Bootle
Liverpool, L20 9AT
Email: sales@jpsiteservicesltd.co.uk
Phone: 07966 966353
Operating hours: 24 hours

2. What Personal Data We Collect

We may collect and process the following categories of personal data:

Category	Examples	How Collected
Identity & Contact	Name, phone number, email address, company name	Quote request form, telephone, email
Project Information	Location of works, service type, project description, preferred date	Quote request form, telephone, email
Communication Records	Records of calls, emails and messages exchanged	Direct communication with us
Usage Data	Pages visited, browser type, approximate location (country/region)	Automatically via web server logs

We do not collect any special category (sensitive) personal data.

3. How We Use Your Personal Data

Purpose	Lawful Basis
To respond to your quote request and provide HIAB hire services	Contract / pre-contractual steps (Article 6(1)(b) UK GDPR)
To communicate with you about your enquiry or booking	Contract / Legitimate Interests
To comply with legal obligations (e.g. record-keeping, LOLER documentation)	Legal Obligation (Article 6(1)(c) UK GDPR)
To manage and improve our website	Legitimate Interests (Article 6(1)(f) UK GDPR)
To send occasional service updates (with your consent)	Consent (Article 6(1)(a) UK GDPR)

We will not use your personal data for unsolicited marketing without your consent.

4. Who We Share Your Data With

We do not sell, rent or trade your personal data. We may share your data in limited circumstances:

• Service providers: We may share data with trusted third parties who assist us in operating our business (e.g. email hosting providers), subject to appropriate data processing agreements.
• Legal requirements: We may disclose data where required to do so by law or in response to a lawful request from a regulatory authority.
• Business transfers: If J&P Site Services is sold or merged, personal data may be transferred to the new owner, subject to the same privacy protections.

5. Data Retention

We retain your personal data only for as long as necessary for the purposes for which it was collected:

• Enquiry data (no booking made): 12 months from initial contact
• Customer and contract records: 7 years from the end of the contract (for accounting and legal purposes)
• LOLER and lifting operation records: As required by regulation — a minimum of 2 years for most records
• Website usage data: Typically 90 days in server logs

6. Your Rights Under UK GDPR

You have the following rights in relation to your personal data:

• Right of access: You can request a copy of the personal data we hold about you.
• Right to rectification: You can ask us to correct inaccurate or incomplete data.
• Right to erasure: You can ask us to delete your data in certain circumstances.
• Right to restrict processing: You can ask us to pause processing your data in certain circumstances.
• Right to data portability: You can request a copy of data you have provided to us in a structured, machine-readable format.
• Right to object: You can object to processing based on legitimate interests.
• Right to withdraw consent: Where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, please contact us at sales@jpsiteservicesltd.co.uk. We will respond within one calendar month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you are unhappy with how we have handled your data.

7. Cookies & Website Tracking

Our website currently uses only essential functionality and does not use third-party analytics or advertising cookies. Basic web server access logs are retained for security and operational purposes.

If we introduce analytics or tracking tools in the future, we will update this policy and implement an appropriate cookie consent mechanism.

8. Data Security

We take the security of your personal data seriously. We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, destruction or alteration. These include secure email transmission (TLS), restricted access to customer data and regular review of our security practices.

In the unlikely event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours and, where required, inform you directly.

9. Third-Party Links

Our website may contain links to third-party websites (such as our Facebook and Instagram pages). We are not responsible for the privacy practices of those sites and recommend that you review their own privacy policies.

10. Children's Privacy

Our services are not directed at children under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or the law. The updated policy will be published on this page with a revised date. We encourage you to check this page periodically.

12. Contact & Complaints

If you have any questions or concerns about how we handle your personal data, please contact us: