Privacy Policy

Jadamedo Consulting Ltd, trading as M.A.S Works, is the data controller. Our registered office is Russell Chambers, Keighley BD21 3DS.

You can reach us at jez.bristow@masworks.co.uk or on 07825 373 486. Any question about your data goes to the same place; there is one of us.

Google Analytics counts which pages are opened, roughly where in the world the visit came from, the kind of device, and which site you came from. It is aggregate: it tells us forty people read a page, not who they were. It is used only to work out what to improve, it is not shared with Google for its own purposes or linked to any advertising account, and it is deleted after two months. You can switch it off on the cookie settings page, linked in the footer of every page.

Nothing else is collected automatically. The site is a set of static files served by our hosting provider, IONOS, and loads no other third-party scripts.

When you submit the contact form or a notify-me form, it is sent to our own server on this website and emailed to Jez. It does not pass through any other company, and nothing is stored beyond that email. The scorecard still opens your own email client instead, so nothing from it reaches us unless you press send.

Our hosting provider keeps standard server logs, which may include IP addresses, for security and to keep the service running. Those are held by the provider under their own retention policy rather than by us.

• Your name, business name, email address and, if you give it, your phone number.
• Whatever you tell us about the business in the message itself.
• Any scorecard answers you choose to email over.

We use it to reply, to prepare for a first conversation, and to work out whether we can help. We do not add you to a mailing list off the back of an enquiry, and we do not sell or share your details with anyone for marketing.

Consultancy work needs access to how a business runs. Depending on the engagement that can include operational and financial data, process documentation, systems access, and interviews with your staff.

Where those interviews record what an employee said, we treat that as their personal data as well as your business information, and it is handled accordingly. Output reports name roles rather than individuals unless there is a reason to do otherwise and you have agreed it.

• Legitimate interests for replying to an enquiry you sent us. You asked; replying is what you would expect.
• Contract for everything done during a paid engagement, including data your staff provide in interviews.
• Legal obligation for accounting and tax records.
• Consent for the notify-me lists, which you can withdraw by replying to any message and saying so.

• Enquiries that go nowhere: two years, then deleted.
• Client records and engagement material: seven years from the end of the engagement, which is the accounting retention period.
• Notify-me email addresses: until you ask to come off, or until the list is closed.

Our email is hosted by a mainstream provider, and our accounts are prepared by an accountant. Both are processors acting on our instructions. Where an engagement needs a specialist brought in, tax or legal or a broker, we tell you before anything is shared and you decide.

No data is sold, and none is used to train anything.

Under UK GDPR you can ask us to:

• Tell you what we hold about you, and give you a copy.
• Correct anything that is wrong.
• Delete it, where we are not required to keep it.
• Restrict or object to how we use it.
• Send it to you or someone else in a portable format.

Email jez.bristow@masworks.co.uk and we will deal with it within a month. If you are not satisfied with how we have handled it, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

The contact form now posts to our own server rather than opening your mail client, which is the change this section used to say was coming. No third party was involved in it.

Analytics went live on 1 October 2026 and is described above. One thing is still on the roadmap: a booking calendar on the contact page. It would be named here, with what it collects, before it goes live.