Eville & Jones (Group) Limited and its related entities globally (“we” or “us”) is committed to protecting your privacy. This Privacy Policy outlines how we collect, use, disclose, store, and protect your personal information when you interact with us.
For the purposes of this Privacy Policy, we are the data controller. However, because we are part of the Phenna Group of companies (“Phenna Group”), your personal data may also be shared with other Phenna Group companies globally, where necessary, for operational, administrative, governance, compliance, service-delivery, or group-level management purposes, as permitted by applicable data protection laws.
Eville & Jones (Group) Limited is part of Phenna Group, a global Testing, Inspection, Certification and Compliance business, operating through its subsidiary companies globally.
We may collect the following types of personal information:
We collect personal information in several ways, including when you:
We may collect your personal data from third parties and public sources. This could happen when we carry out compliance checks, or other due diligence, and we obtain data from publicly available sources such as Companies House and the Electoral Register, or similar available sources in the relevant jurisdiction of a Phenna Group company.
We process your data for the following purposes based on different lawful bases:
To manage and improve our website and services (Legitimate Interests)
To contact you in response to enquiries (Legitimate Interests or Consent)
To send marketing communications (Consent or Soft Opt-In under PECR)
To conduct market research (Legitimate Interests or Consent)
To comply with legal obligations (e.g., tax or financial regulations)
To manage bookings, transactions or contracts (Contractual Necessity)
To monitor trends and complaints and implement service improvements (Legitimate Interests)
We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is lawful and compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us.
If we intend to use your personal data for an unrelated purpose, we will notify you and explain the legal basis which allows us to do so. Please note that, in limited circumstances, we may process your personal data without your knowledge or consent where this is required or permitted by law.
We use cookies and similar tracking technologies to enhance user experience, analyse website traffic, and deliver targeted advertising. Where required, we obtain your consent before placing non-essential cookies. You can manage your cookie preferences through your browser settings.
We may share your data with:
Whenever we transfer your personal data outside the UK or EEA, we ensure a similar degree of protection is applied by using at least one of the following safeguards:
We are committed to ensuring transparency in how we process personal data. In some cases, we, and certain Phenna Group businesses, may use Artificial Intelligence (AI) tools to ensure the efficient operation of our services, improve service delivery, develop new features, assist with recruitment and other work-related activities.
Please note:
If you have questions about how your data is processed during recruitment, or whether AI has been used in your application or interactions with a Group business, please contact the relevant Group business directly using the contact details provided in their website.
We retain your data only for as long as necessary to fulfil the purposes for which it was collected, including for legal, accounting, or reporting obligations. Specific retention periods may vary depending on the nature of the data and applicable legal requirements.
To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.
We implement appropriate technical and organisational measures to protect your data from being accidentally lost, misused or accessed in an unauthorised way, altered or disclosed. These include limiting access to your personal data to our employees, contractors, agents, and other third parties who have a business need to access it; using encryption; conducting regular risk assessments; and having breach notification procedures in place.
We have also put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required.
You have the following rights under data protection laws:
We try to respond to all legitimate requests within one month. Occasionally, it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we could refuse to comply with your request in these circumstances.
Please inform us if there is a change in your contact details or any other information that you have provided to us, so that we can ensure our records are kept accurate and up to date.
If you provide us with personal data about another person, please make sure that you have informed them of our identity, the purposes for which their personal data will be processed and obtained their permission and/or complied with any other data protection requirements. If you are unsure whether their personal data can be shared with us, please contact us before providing us the data.
We do not use personal data for automated decision-making that has a legal or similarly significant effect.
Our websites may include links to third-party websites. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We are not responsible for the content or privacy practices of these websites. Please review their privacy notices before submitting data.
If you have any questions about this Privacy Policy or wish to exercise your rights, please get in touch with us at:
Eville & Jones (Group) Limited, Century House, 1275 Century Way, Thorpe Park, Leeds LS15 8ZB
Email: info@eandj.co.uk
This policy is reviewed regularly and was last updated in November 2025.
