Privacy notice
How NCJ Solutions handles website enquiries and visits
NCJ Solutions is the trading name of NCJ Consulting Ltd. This notice explains how we handle personal data submitted through this website or by email, and how our website providers process limited technical data when delivering and protecting the site.
Last updated: 21 May 2026.
Who controls your data
NCJ Consulting Ltd is the data controller. Registered in England and Wales, company number 07924063. Registered office: Dalton House, 35 Chester Street, Wrexham, LL13 8AH.
What we collect
If you contact us or book a review, we may collect your name, company, email address, phone number if provided, meeting availability if discussed, and any information you include about your IT suppliers, systems, risks, or requirements.
When you visit the website, our hosting and security providers may process limited technical information such as IP address, browser and device information, request headers, pages requested, timestamps, diagnostic data, performance data, and security event data.
Why we use it
We use enquiry information to respond to your request, arrange a review, understand whether NCJ can help, and keep a record of the conversation. The lawful basis is legitimate interests and, where discussions move toward paid work, steps prior to entering a contract.
We use technical website information to deliver the site, keep it secure, prevent spam and abuse, monitor performance, and understand basic usage. The lawful basis is our legitimate interest in operating a secure and reliable website.
Who we share it with
We do not sell personal data. We may share personal data with trusted service providers where needed to run the website and business, including email, calendar, hosting, security, analytics, and professional adviser services.
We use Cloudflare for DNS, proxying, hosting, content delivery, website security, Cloudflare Pages Functions, Turnstile bot protection, and website performance analytics. We use Resend to deliver contact form emails to us. Resend may process the details submitted in the contact form and related email delivery metadata.
Cloudflare security and analytics
Cloudflare helps deliver and protect this website. Cloudflare may process request information such as IP address, browser and device information, pages requested, timestamps, request headers, security event data, and diagnostic or performance data.
The contact form uses Cloudflare Turnstile to reduce spam and automated abuse. Turnstile may process browser, device, request, and verification signals to confirm that a form submission appears legitimate.
Cloudflare may use strictly necessary security technologies and cookies, including challenge or bot-detection cookies such as cf_clearance, where needed to protect the website and contact form.
Where Cloudflare Web Analytics or Real User Monitoring is enabled, it is used to understand aggregate website performance and usage. Our configuration excludes visitor data for traffic served through Cloudflare data centres in the UK, EEA, EU, and Switzerland where Cloudflare applies that exclusion. For other traffic, Cloudflare may use a JavaScript beacon to collect performance metrics. Cloudflare states that this beacon does not use cookies, local storage, session storage, IndexedDB, or browser-stored identifiers.
Cookies and similar technologies
We do not use advertising cookies, retargeting pixels, marketing trackers, Google Analytics, or cross-site tracking technologies on this website.
Because the current site only uses technologies needed to deliver, secure, protect, and measure the basic performance of the website, we do not display a cookie consent banner. If we add consent-required analytics, advertising, or tracking technologies in future, we will update this notice and request consent before loading them where required.
International processing
Some of our service providers, including Cloudflare and Resend, may process data outside the UK or EEA. Where this happens, we rely on their data processing terms and transfer safeguards, such as adequacy arrangements, the UK International Data Transfer Addendum, Standard Contractual Clauses, or other lawful transfer mechanisms as applicable.
How long we keep it
Enquiries that do not become client work are normally retained for up to 24 months, unless a longer period is needed for legal, accounting, or dispute reasons. Client records are retained in line with contractual and legal obligations.
Your rights
You can ask to access, correct, erase, restrict, or object to processing of your personal data. You can also complain to the UK Information Commissioner's Office.
Contact
For privacy questions, email compliance [at] ncjsolutions [dot] com.