Jaune Consulting / Privacy
Privacy, in plain English.
Your information deserves the same care as your contracts.
Draft privacy notice — not ready for operational use
Prepared 18 October 2026. Data purposes, lawful bases, suppliers, retention and hosting behaviour require confirmation. Personal data collection must not open until this notice and the relevant safeguards are finalised.
01Who is responsible?
The controller is Jaune Consulting Ltd, 5 Clive House, Union Grove, London, SW8 2RA. For privacy questions or to exercise your rights, contact privacy@jauneconsulting.com. ICO fee status and registration details, where applicable, still require confirmation.
02Information collected on this website
The contract example uses fictional clauses. It does not read or upload your documents. This version has no live enquiry form, booking system, payment checkout or contract upload. Hosting and delivery services may process connection information such as IP addresses and request logs; their exact purposes, recipients and retention must be verified before launch.
03Enquiries and commercial services
Before enquiries or uploads open, this notice must explain the contact and business details collected, the contents of contracts, relevant third-party personal data and any other information required. It must say whether providing each category is necessary, and what happens if it is not provided. Please do not submit confidential contracts through an unapproved channel.
04Purposes and lawful bases
The lawful basis for each actual purpose must be documented before processing begins. Enquiries and services may involve steps before a contract or performing a contract with an individual; other activities may require a documented legitimate-interests assessment, legal obligation or valid consent. No single lawful basis automatically covers all contact details or information in a contract.
05Suppliers, contract analysis and transfers
Before any document processing is enabled, the notice must identify recipients or recipient categories, hosting and analysis providers, their roles and any international transfers and safeguards. Processor agreements, access controls, model training or reuse settings and deletion arrangements must be checked. No live automated contract-analysis service is connected to this version.
06Retention and security
Retention periods or meaningful criteria must be set for enquiries, uploaded contracts, service records, invoices and technical logs. These periods have not yet been supplied. A live upload service must be assessed for secure transfer, storage, restricted access and deletion before accepting documents. This draft does not certify those controls.
07Cookies and similar technologies
No advertising or analytics tracker has been added to the website’s page code. Brand fonts are served with the site rather than requested from Google Fonts. Hosting-level cookies, logs and other storage still need a production audit. Any future non-exempt storage or access must be blocked until valid consent is given; relevant exceptions must meet their own conditions, including an easy way to object where required.
08Your rights
Depending on the processing and applicable conditions, you can request access, correction, erasure, restriction or portability of your personal information and object to its use. Where consent is used, you can withdraw it without affecting earlier lawful processing. Rights requests are normally answered within one month, subject to permitted extensions and identity checks. Contact privacy@jauneconsulting.com to exercise your rights.
09Information received from others and automated decisions
If personal information is received from someone other than you, the final notice must explain its categories and source, including any public sources. Any relevant profiling or solely automated decisions with legal or similarly significant effects must be assessed and explained, including meaningful information about their logic, significance and consequences. The fictional website demo makes no decisions about you.
10Changes to this notice
This draft must be updated to match the services and suppliers actually used, and reviewed whenever the data flows change. DPO or UK representative details must be included if applicable. A published policy alone does not establish compliance with UK GDPR or PECR.
Questions or concerns?
privacy@jauneconsulting.comYou have the right to complain to the UK Information Commissioner’s Office (ICO). You do not have to contact Jaune first.
Contact the ICO