1. What this notice is for
This notice explains how JMK Business Solutions Ltd, trading as JMK Group UK (“JMK”, “we”, “us”), uses and protects the personal information you provide when you use our website at www.jmkgroupuk.com or any of our products and services. It applies whether you contact us as an enquirer, a worker or contractor, a recruitment agency or end-client, a supplier, or a visitor to our site.
We are committed to handling personal information in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations 2003 (PECR), each as amended, including by the Data (Use and Access) Act 2025. This notice sets out the lawful bases on which we process your information, the rights available to you, and how we use cookies and similar technologies.
2. Who we are – data controller
JMK Business Solutions Ltd (company number 06946004), trading as JMK Group UK, is the data controller for the personal information described in this notice, unless we tell you otherwise. You can contact us in the following ways: Postal address: JMK Group UK, Highbridge House, 93–96 Oxford Road, Uxbridge, UB8
1LU
Telephone: 01895 447 800
Email: support@jmkgroupuk.com
Website: https://jmkgroupuk.com
For any question about this notice or about how we handle personal information, please write to us by post or email and mark your communication “FAO: Data Protection.”
3. The information we collect
Most of the personal information we hold is provided to us directly by you, for one of the following reasons:
Depending on why you contact us, this may include personal identifiers and contact details
(such as your name, address, email address and telephone number); identifiers we need to deliver a service, employ or engage you, and to meet our payroll, tax and right-to-work obligations (such as date of birth, National Insurance number, identity and immigration documents, bank details and assignment information); and records of our dealings with
you.
From time to time we also receive personal information indirectly, for example: where one of our workers gives your details as an emergency contact or referee; from public authorities, regulators or law enforcement bodies; where you have made a complaint to a third party about one of our workers; where a recruitment agency provides your name and contact details after you have asked them to recommend an umbrella employer; and, where you have instructed us to act for you on PSC accountancy matters, communications relating to your affairs from Companies House and HMRC.
We do not provide services to children and do not knowingly collect their personal information. We do not store payment card details, and we do not share your financial details with third parties for their own purposes.
4. Special category and criminal offence data
Some of our activities require us to handle more sensitive information. Where you are employed or engaged by us, or go through our onboarding checks, we may process special category data – in particular information about your health (for example in connection with sickness absence, statutory sick pay, maternity and family-related rights, workplace adjustments, and accident or incident reporting) – and information about criminal convictions and offences, where a role or a client requires a criminal record or related background check.
Where we process special category data we rely on a condition under Article 9 of the UK GDPR and Schedule 1 to the Data Protection Act 2018, most commonly the employment, social security and social protection condition, and we maintain an appropriate policy document where one is required. Where we process criminal offence data we do so in accordance with Article 10 of the UK GDPR and Schedule 1 to the Data Protection Act 2018. We collect only what we need for these purposes and apply additional safeguards to its handling.
5. How we use your information and our lawful bases
We use the personal information we hold to provide and administer our services, to employ or engage workers, to manage our relationships with agencies, clients and suppliers, and to meet our legal and regulatory obligations. In particular we may use your information to:
We rely on the following lawful bases under Article 6 of the UK GDPR, depending on the activity:
We do not make decisions that produce legal or similarly significant effects about you
based solely on automated processing.
6. Marketing and your choices
Where we send you marketing about our services by email, SMS or telephone, we do so either with your consent or, where the law allows, on the basis of an existing relationship with you. Every marketing message we send gives you an easy way to opt out, and you can tell us at any time that you no longer wish to receive marketing by contacting us using the details in section 2. We will then stop, and we will keep a minimal record of your preference so that we can honour it.
7. Sharing your information
We will not sell, rent or trade your personal information. We share it only where we need to in order to deliver our services or to meet our obligations, including with: recruitment agencies and end-clients in connection with your assignment; trusted third parties who perform functions on our behalf, such as IT, payroll and professional advisers, and providers of reference, qualification and background-checking services; and regulators,HMRC and law-enforcem nt or other public bodies where e are required or permitted to do so. Where third parties process personal information on our behalf, we put a written contract in place that requires them to protect it and to act only on our instructions.
8. International transfers
We aim to keep and process personal information within the United Kingdom. Where any of our service providers store or process personal information outside the UK – for example certain technology or analytics providers – we make sure an appropriate safeguard is in place before the information is transferred. This means transferring only to countries the UK Government has decided provide an adequate level of protection, or putting in place a transfer mechanism recognised under UK law, such as the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with any additional measures needed. You can ask us for more information about the safeguards we use.
9. How we store and protect your information
We take the security of personal information seriously and have put in place appropriate physical, electronic and organisational measures to protect it against loss, misuse and unauthorised access or disclosure. Access to personal information is limited to those who need it for their work, our systems are protected by appropriate security software and controls, and data is backed up regularly. Where information is held on paper, it is kept securely and disposed of confidentially when no longer needed. We provide training to our people so that they understand their responsibilities when handling personal information, and we have procedures in place to detect, report and investigate any personal data breach.
10. How long we keep your information
We keep personal information only for as long as we need it for the purpose we collected it, or for as long as the law requires. In practice this usually means we retain certain records for a period after our relationship with you ends, in order to meet statutory record- keeping requirements (for example for payroll, tax and employment purposes), to deal with any queries or disputes, and to defend legal claims. We hold these periods in our retention schedule and delete or securely destroy information once we no longer need it.
11. Your rights
Under data protection law you have a number of rights in relation to your personal information. You have the right to be informed about how we use it; to ask for a copy of the information we hold about you; to ask us to correct information that is inaccurate or incomplete; and, in certain circumstances, to ask us to erase your information, to restrict how we use it, to object to our use of it, and to ask us to transfer it to you or another organisation. Where we rely on your consent, you also have the right to withdraw that consent at any time, although this will not affect anything we have done before you withdrew it. You also have the right to complain to the Information Commissioner’s Office
(see section 15).
You will not normally have to pay to exercise your rights. If you make a request we will respond within one month, though we may extend this where a request is complex or where you have made several requests, in which case we will let you know. Please use the contact details in section 2 if you wish to make a request.
12. Cookies and similar technologies
Cookies are small text files that a website places on your device when you visit. Similar technologies, such as pixels, tags and local storage, work in comparable ways. We use them to make our site work, to keep it secure, and to understand how it is used so that we can improve it. This section explains what we use and the choices available to you.
The rules on cookies are set by PECR. From 5 February 2026, the Data (Use and Access)
Act 2025 changed those rules so that certain low-risk cookies no longer need your consent before they are set, although we must still tell you about them and, in most cases, let you opt out. Cookies that are not covered by an exemption – in particular advertising and tracking cookies – still require your consent. We group the cookies we use as follows:
Where we use a cookie that requires consent, we will ask for it through a cookie banner before the cookie is set. Our banner lets you accept or reject non-essential cookies with
equal ease, non-essential cookies are switched off by default until you choose to allow them, and you can change your choices at any time using the cookie settings on our site. You can also control or delete cookies through your browser settings, although blocking strictly necessary cookies may stop parts of the site from working.
The table below describes some of the cookies we expect to use on our website. Actual cookies may vary, and we keep this list under review.
| Cookie / Type | Provider | Purpose | Duration | Consent Status |
|---|---|---|---|---|
wordpress_*, wp-settings-* | JMK (first-party) | Maintain a logged-in session and remember display settings within the contractor portal and site. | Session / up to 1 year | Strictly necessary – no consent required |
| Session / security cookie | JMK (first-party) | Preserve session integrity, security and load balancing while you browse. | Session | Strictly necessary – no consent required |
elementor | JMK (first-party) | Store the page-builder template version so pages render correctly. | Persistent | Strictly necessary – no consent required |
| Cookie-preference cookie | JMK (first-party) | Record the choices you make in our cookie banner so we do not ask again on every visit. | Up to 12 months | Strictly necessary – no consent required |
_ga, _ga_<id> | Google Analytics 4 | Generate aggregate statistics on how visitors use the site so we can improve it. Used by JMK only and not for advertising. | Up to 2 years | Analytics – no consent required, but information and opt-out apply |
| Targeting / advertising cookies | Third parties (if enabled) | Build a profile of your interests to show relevant advertising, including via social media buttons. | Varies | Consent required before they are set |
13. Other websites and links
Our website may contain links to other websites that are not operated by us. This notice applies only to our site, so when you follow a link to another website we encourage you to read that site’s own privacy information. We are not responsible for the privacy practices of other websites.
14. Changes to this notice
We keep this notice under regular review and will update it when our practices change or when the law requires. The version number and date at the top of this notice show when it was last updated. Where changes are significant we will take reasonable steps to bring them to your attention.
15. How to complain
If you have any concern about how we handle your personal information, please contact us first using the details in section 2 and we will do our best to put things right. If you remain dissatisfied, you have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator:
Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113
Website: https://ico.org.uk
At Grafton, our Recruitment Consultants have found the service to be excellent. With increased margins and a simple referral program for our candidates, JMK have made the process extremely easy. I would not hesitate to recommend JMK
Louise
Business Manager
At Grafton, our Recruitment Consultants have found the service to be excellent. With increased margins and a simple referral program for our candidates, JMK have made the process extremely easy. I would not hesitate to recommend JMK
Louise
Business Manager
At Grafton, our Recruitment Consultants have found the service to be excellent. With increased margins and a simple referral program for our candidates, JMK have made the process extremely easy. I would not hesitate to recommend JMK
Louise
Business Manager
