Privacy Policy
1. Who we are
This privacy policy explains how Jedi Services Ltd (the “Company”, “we”, “us”, “our”) collects and uses personal data.
2. What this policy covers
It applies to personal data we collect when you:
- Visit our website
- Contact us (email, phone, live chat, or customer portal)
- Enquire about or buy our managed IT and cyber security services
- Engage with our marketing (e.g. LinkedIn, Facebook)
3. Personal data we may collect
Depending on how you interact with us, we may collect:
- Identity and contact details: name, job title, company, email, phone
- Account and service information: support tickets, service history
- Technical data: IP address, browser type and version, device identifiers, operating system
- Usage data: pages visited, time on site, referral source
- Marketing preferences: opt-in and opt-out status
4. How we collect personal data
We collect data:
- Directly from you: enquiry forms, emails, telephone calls, support requests
- Automatically via the website: cookies and similar analytical technologies
- From third parties where appropriate: client referrals, business directories, social platforms
5. How we use your data (purposes)
We use personal data to:
- Respond to enquiries and provide quotes
- Deliver and support our services (including security monitoring and incident response where contracted)
- Manage our relationship with you (account administration, service reviews)
- Improve our website, services, and customer experience
- Send relevant marketing communications (where permitted)
- Comply with legal obligations and protect our business (fraud prevention, security, dispute handling)
6. Lawful bases for processing (UK GDPR)
We process personal data under one or more of these lawful bases:
- Contract: to deliver services or take steps you request before entering a contract
- Legitimate interests: to run and improve our business, keep systems secure, and communicate with business contacts (balanced against your rights)
- Consent: for certain marketing and cookie activities (where required)
- Legal obligation: to meet regulatory, tax, or other legal requirements
7. Marketing
We may send marketing that is relevant to your role or organisation. You can opt out at any time by:
- Using the unsubscribe link (where provided in the email), or
- Emailing us directly at neil.kemp@jedi-services.com
We use trusted customer communication platforms to manage marketing communications and related contact preferences.
9. Service providers (processors) and sharing
We may share personal data with trusted third parties where necessary to deliver our services and run our business. This can include:
- Microsoft 365: email, collaboration, cloud storage and productivity services
- NinjaOne: customer relationship management, remote monitoring and service operations
- Security monitoring partners: 24/7 SOC and telemetry investigation
- Hosting & analytics providers: website hosting, performance monitoring and analytics
- Professional advisers: legal, accounting and audit specialists
- Regulators & authorities: law enforcement or other official bodies where required by law
We only share what is strictly necessary and require appropriate confidentiality and security standards from all processors.
10. International transfers
If any service providers process data outside the UK, we take steps to ensure appropriate safeguards are in place (for example, UK International Data Transfer Agreements or equivalent contractual protections).
11. Data security
We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration, or disclosure. As a cyber security provider, our internal systems follow the same defence-in-depth principles we deliver to our clients.
12. How long we keep your data
We keep personal data only as long as required for the purposes described in this policy, including:
- To provide services and support under your contract
- To meet legal, accounting, tax, or regulatory reporting requirements
- To resolve disputes and enforce agreements
13. Children's data
Our services are intended exclusively for businesses. We do not intentionally collect or process personal data from children.
14. Your rights
You have rights under UK data protection law, including:
- Access: request copies of your personal data
- Correction: have inaccurate data updated
- Erasure: ask us to delete your data in certain circumstances
- Restriction & objection: restrict or object to our processing in certain circumstances
- Data portability: request a transfer of your data to another organisation
- Withdraw consent: withdraw consent at any time where processing is consent-based
To exercise any of these rights, contact our privacy lead at neil.kemp@jedi-services.com.
15. Complaints & the ICO
If you have concerns, please contact us first so we can try to resolve them. You also have the right to complain to the UK Information Commissioner’s Office (ICO):
16. Changes to this policy
We may update this privacy policy from time to time. The latest version will always be posted on our website at jedi-services.com/privacy-policy.