JDJ DISTRIBUTION
Privacy & Cookies
Last updated:
This notice explains how we handle personal information when you visit jdjdistribution.co.uk or contact us about a supplier or business relationship.
Who we are
JDJ Distribution Ltd is the controller responsible for the personal information covered by this notice. We are registered in England and Wales, company number 14473653. Our registered office is 61a Bridge Street, Kington, HR5 3DJ.
For privacy questions, contact Jack at sales@jdjdistribution.co.uk, call 0116 403 0356, or write to our registered office.
Information we handle
- Enquiries: your name, work contact details, company, role, correspondence, and any personal information you include in a catalogue, attachment or telephone conversation.
- Supplier relationships: contact details, relevant business notes and correspondence needed to discuss or manage the relationship. We sometimes save supplier contact details and notes in Notion.
- Private team workspace: authorised team members can view selected operational tasks and supplier records from Notion. Cloudflare processes sign-in email addresses, authentication and access records to restrict access and protect this workspace.
- Website delivery and security: our hosting provider, Cloudflare, processes technical request information, such as IP addresses and browser information, to deliver and protect this website.
You choose what to send us. We may be unable to respond or progress an enquiry without the relevant contact and business details. Please avoid sending sensitive personal information that is not needed for your enquiry.
Why we use information
We rely on our legitimate interests to respond to enquiries, assess potential suppliers, communicate with business contacts and maintain relevant relationship records. These interests are running and developing our business and managing supplier relationships. We also rely on legitimate interests to operate and secure this website.
Where you are personally a party to a contract, such as a sole trader, we may process information because it is necessary for that contract or to take steps you request before entering it. This basis does not automatically apply simply because you work for a supplier.
We rely on legal obligations where we must retain records or deal with data protection rights and complaints as required by law.
Service providers and sharing
Information may be handled by the JDJ team and by providers supporting the relevant activity: Cloudflare for website hosting, private workspace authentication and secure delivery of selected Notion records, our email and communications providers for enquiries, and Notion where we save supplier contacts and notes. We may also share relevant information with professional advisers or authorities where necessary for legal obligations or legal claims.
Some providers operate internationally, so information may be processed outside the UK, including in the United States. International processing is subject to UK transfer rules, which require an applicable adequacy regulation or appropriate safeguards, such as approved contractual clauses with the UK addendum. Cloudflare and Notion describe their safeguards in their Cloudflare data processing terms and Notion privacy and transfer information. Contact us for information about the safeguards relevant to your data or a copy of the applicable safeguards.
How long information is kept
We do not currently apply one fixed retention period to all enquiries. Retention is determined by the purpose of the record:
- Enquiries and potential suppliers: whether the enquiry remains open, whether there is a relevant ongoing business discussion, and whether the details are still needed for a reasonable follow-up.
- Active supplier records: the duration of the relationship, relevant accounting or other legal requirements, and any need to establish, exercise or defend legal claims.
- Technical information: what is needed to deliver the website, investigate faults or security incidents, and meet applicable provider or legal requirements.
Personal information should not be kept simply because storage is available. Records are to be reviewed against these criteria and deleted or anonymised when no longer needed. Contact us if you would like us to review information held about you.
Cookies and similar technologies
This website’s own code does not set cookies or use browser storage to track you. We have not added advertising pixels, visitor analytics or embedded third-party media. The background animation runs on your device and does not send your interactions to us.
Cloudflare provides hosting and security. Depending on the security features applied to a request, it may use strictly necessary security cookies, for example when checking whether a visitor is human. These support website security rather than advertising. See Cloudflare’s cookie information.
The private team workspace uses strictly necessary Cloudflare Access authentication cookies, including CF_Authorization, to remember an authorised sign-in and protect the workspace. These are used when accessing the private area and last for the configured authentication session. They are not used for advertising or visitor analytics. You can sign out of the private workspace to end your application session.
We do not currently use optional tracking technologies that require a consent banner. If that changes, we will update this notice and provide any consent or objection controls required before using those technologies.
Your rights
Depending on the circumstances, you can ask to access your personal information, correct it, erase it, restrict its use or receive a portable copy. These rights are subject to the conditions and exemptions in data protection law.
Your right to object
You can object to processing based on legitimate interests on grounds relating to your situation. You can object to the use of your personal information for direct marketing at any time.
To exercise your rights, use any of the contact details above. We normally respond within one month, subject to permitted extensions or pauses under data protection law. We may need reasonable information to verify your identity. This website does not make automated decisions about you with legal or similarly significant effects.
Privacy concerns and complaints
You can raise a data protection complaint by emailing Jack, calling us or writing to our registered office. Please explain your concern and how we can contact you. We will acknowledge your complaint within 30 days, investigate it without undue delay, keep you informed and explain the outcome.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator. Visit ico.org.uk/make-a-complaint or call 0303 123 1113.
Med-Ware and other websites
JDJ Distribution Ltd also owns and operates Med-Ware. Shopping, trade accounts and other activity on med-ware.co.uk are covered by the privacy and cookie information provided on that website. Following a link does not mean that this notice covers the destination website.
Changes to this notice
We will update this page when our practices or the relevant requirements change. The date at the top shows when this notice was last updated.