Peter Jones Consulting · Last updated: 5 August 2026
Peter Jones Consulting (PJC) is a HubSpot consultancy operated by Peter Jones as a sole trader, based in Bristol, United Kingdom. For the purposes of UK data protection law, I am the controller of the personal data described in this policy, and I am registered with the Information Commissioner's Office under registration reference ZC198790.
Contact: peter@peterjonesconsulting.co.uk
| Purpose | Personal data | Lawful basis |
|---|---|---|
| Responding to enquiries and managing prospective clients | Name, email address, company, job title, phone number, and the content of your enquiry | Legitimate interests |
| Delivering consultancy services and managing client relationships | Business contact details, correspondence, project records, and meeting notes | Performance of a contract where you are a party to it; otherwise legitimate interests |
| Recording, transcribing, and summarising business meetings (see Meetings below) | Voice, image, and meeting contributions | Legitimate interests |
| Invoicing, accounting, and payment reconciliation | Billing names, addresses, and payment details | Performance of a contract where you are a party to it; legal obligation for tax records |
| Occasional service updates and business development contact | Contact details and relationship history for existing and past business contacts | Legitimate interests; you can object at any time |
| Understanding how visitors use my website | Usage data and cookies, set only after you accept them | Consent |
Where I rely on legitimate interests, those interests are: responding to business enquiries, managing professional relationships, keeping accurate business records, and communicating with relevant business contacts about my services, provided these interests are not overridden by your rights and interests.
I do not sell personal data and I do not use it for automated decision-making that produces legal or similarly significant effects.
Most of this information comes from you directly. Some reaches me indirectly, for example when colleagues at your organisation arrange work or meetings, or from public professional sources such as your company website or LinkedIn profile. You are not required by law to provide me with personal data, but without basic contact details I cannot respond to an enquiry or deliver services under a contract.
I use an AI-assisted meeting assistant to record, transcribe, and summarise business meetings. The assistant announces itself when it joins a meeting. You can ask not to be recorded before or during a meeting; if you do, I will stop the recording and delete what has already been captured from that meeting, unless retention is reasonably necessary to establish, exercise, or defend legal claims.
When you visit peterjonesconsulting.co.uk, and subject to your cookie choices, the site uses analytics tools to understand how visitors use it and, where you are an existing contact, to connect your visit to my CRM. Cookie consent is managed by Cookiebot: no analytics or marketing cookies are set until you accept them, and you can change your choices at any time via the link on the site. The full list of cookies, the tools that set them, and their durations is in the site's cookie declaration, maintained automatically by Cookiebot.
I use business-grade AI tools to support the delivery of my services and to run the consultancy efficiently. These tools are used under commercial business agreements with data processing terms in place, and data submitted to them is not used to train the providers' AI models. AI-generated material supports my work and is subject to human review.
I use a small set of established service providers to run the business, covering CRM, communications and productivity, document and project management, meeting and AI assistance, e-signature, and accounting and banking services. Where a provider acts as my processor, a data processing agreement is in place. Some providers, such as banks and accounting providers, act as independent controllers for their own legal and regulatory purposes. A full list of named providers is available on request.
Some providers process data outside the UK. Where data leaves the UK, it is protected by an applicable lawful transfer mechanism, such as UK adequacy regulations, the UK Extension to the EU-US Data Privacy Framework, or the ICO's International Data Transfer Agreement / Addendum.
Information may be deleted earlier where it is no longer required, or kept longer where reasonably necessary to comply with legal obligations or to establish, exercise, or defend legal claims.
Much of my work involves personal data held in clients' own CRM and business systems. For that data, the client is the controller and I act as their processor under the terms of our contract. Their privacy policy governs that data; this policy covers the data I control myself.
I use appropriate technical and organisational measures to protect personal data.
Depending on the circumstances and the lawful basis being relied on, you may have the right to access your personal data, to have it corrected or deleted, to restrict or object to its processing, and to data portability. You have an absolute right to object to the use of your personal data for direct marketing. To exercise any of these, email peter@peterjonesconsulting.co.uk. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).
I will update this policy when tools or practices change, and the date at the top will reflect the latest version.