GDPR Compliance Statement

GDPR Compliance Statement

Effective Date: August 2025

At Jojan Group of Companies Limited (trading as Jojan Legal), we are committed to protecting the privacy and security of personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1) Our Role

We act as a Data Controller when we determine the purpose and means of processing your personal data. In some cases, we act as a Data Processor for our clients, processing data on their behalf and under their instructions.

2) Lawful Bases for Processing

We process personal data under the following lawful bases as defined in Article 6(1) of the UK GDPR:

  • Consent – where you have given clear permission.
  • Contract – where processing is necessary for a contract with you.
  • Legal Obligation – where we are required to comply with the law.
  • Legitimate Interests – where processing is necessary for our business operations and your interests do not override those interests.

3) Data Minimisation & Retention

We collect only the personal data necessary for the stated purposes and retain it only for as long as required to fulfil those purposes or meet legal obligations.

4) Data Security

We implement appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.

5) International Data Transfers

When transferring personal data outside the UK or EEA, we ensure it is protected using approved safeguards such as Standard Contractual Clauses (SCCs) or the UK’s International Data Transfer Agreement (IDTA).

6) Data Subject Rights

Under the UK GDPR, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data (“right to be forgotten”)
  • Restrict or object to processing
  • Request data portability
  • Withdraw consent at any time (where applicable)

To exercise these rights, please contact us using the details below.

7) Data Breach Procedures

In the unlikely event of a personal data breach, we will notify the Information Commissioner’s Office (ICO) and affected individuals where required by law.

8) Contact Information

Data Controller: Jojan Group of Companies Limited (trading as Jojan Legal)
Registered Address: Flat 19 Wisteria House, Wych Elm, Harlow, England, CM20 1FS
Company Number: 14674190
Email: info@jojanlegal.com
Website: www.jojanlegal.com

© 2025 Jojan Group of Companies Limited (trading as Jojan Legal). All rights reserved.