Effective Date: 26/06/2026

Version: 1.0

1. Introduction

PJR Consultancy is committed to protecting and respecting your privacy.

We recognise that the organisations we support often work with sensitive information relating to children, safeguarding, residential care and regulated services. Protecting personal information is fundamental to maintaining trust with our clients and ensuring compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and all applicable privacy legislation.

This Privacy Policy explains how we collect, use, store and protect your personal information when you:

• Visit our website;
• Contact us by telephone, email or online enquiry;
• Request information about our services;
• Engage PJR Consultancy to provide consultancy or advisory services.

2. Who We Are

PJR Consultancy is a specialist consultancy supporting organisations involved in children’s residential care and related services throughout England.

Our consultancy services include:

• Children’s home development
• Children’s home registration support
• Ofsted readiness reviews
• Responsible Individual support
• Registered Manager mentoring
• Governance consultancy
• Safeguarding audits
• Regulation 44 support
• Quality assurance reviews
• Operational improvement
• Policy development
• Leadership coaching

For the purposes of UK GDPR, PJR Consultancy acts as the Data Controller.

3. Information We Collect

Depending upon the services you request, we may collect:

Personal Information

• Full name
• Job title
• Organisation
• Business address
• Telephone number
• Email address

Consultancy Information

This may include:

• Children’s home information
• Service development plans
• Policies and procedures
• Ofsted reports
• Statements of Purpose
• Governance documentation
• Action plans
• Quality assurance reports
• Staffing structures
• Organisational information

Where consultancy requires us to review operational documents, we expect clients to minimise unnecessary personal information wherever possible.

4. Special Category Information

Due to the nature of children’s residential care consultancy, we may occasionally review documentation that contains:

• safeguarding information;
• health information;
• incident records;
• information relating to children;
• employee information.

Where this occurs, we process information only where legally permitted and only where necessary to deliver the consultancy service requested.

We do not collect sensitive information unless it is genuinely required for the consultancy assignment.

5. Website Information

When you visit our website we may automatically collect:

• IP address
• Browser type
• Device type
• Operating system
• Pages viewed
• Length of visit
• Referral source
• General website analytics

This information helps improve our website and does not normally identify you personally.

6. How We Use Your Information

We use information to:

• Respond to enquiries;
• Arrange consultancy services;
• Produce quotations;
• Deliver contracted work;
• Prepare reports;
• Carry out governance reviews;
• Deliver audits;
• Provide professional advice;
• Maintain client records;
• Issue invoices;
• Meet legal obligations;
• Improve our services.

We never sell personal information.

7. Our Lawful Basis

Under UK GDPR we rely upon one or more of the following lawful bases:

• Contract
• Legitimate Interests
• Legal Obligation
• Consent (where appropriate)

8. Confidentiality

Confidentiality sits at the centre of everything we do.

PJR Consultancy understands that providers entrust us with commercially sensitive and operationally confidential information.

All consultancy assignments are treated as strictly confidential.

Information is never disclosed unless:

• required by law;
• safeguarding duties require disclosure;
• authorised by the client;
• necessary to protect children or vulnerable people;
• ordered by a Court.

9. Safeguarding Responsibilities

Nothing within this Privacy Policy limits our safeguarding responsibilities.

Where information indicates a child or vulnerable person may be at risk of harm, PJR Consultancy reserves the right to share information with the appropriate authorities in accordance with safeguarding legislation and statutory guidance.

10. Data Security

We use appropriate technical and organisational measures including:

• encrypted devices;
• password protection;
• secure cloud storage;
• multi-factor authentication;
• restricted access;
• anti-virus protection;
• regular software updates.

Only authorised individuals have access to consultancy information.

11. Data Sharing

Information may be shared only where necessary with:

• accountants;
• legal advisers;
• insurers;
• IT service providers;
• regulators where legally required.

All third parties are required to process information securely.

We do not sell or rent personal information.

12. International Transfers

We aim to store all personal information within the United Kingdom or countries providing adequate protection under UK GDPR.

Where international transfers occur, appropriate safeguards will be implemented.

13. Retention

Information is retained only for as long as necessary.

Retention periods depend upon:

• contractual requirements;
• legal obligations;
• insurance requirements;
• professional record keeping.

When information is no longer required it will be securely deleted or destroyed.

14. Cookies

Our website may use cookies to:

• improve website functionality;
• analyse visitor behaviour;
• monitor website performance;
• remember user preferences.

Users may control cookies through their browser settings.

A separate Cookie Policy is available on request.

15. Your Rights

Under UK GDPR you have the right to:

• Request access to your personal information.
• Request correction of inaccurate information.
• Request erasure.
• Request restriction of processing.
• Object to processing.
• Request portability of your information.
• Withdraw consent where consent has been relied upon.

Requests should be submitted using the contact details below.

16. Children’s Information

PJR Consultancy does not intentionally collect personal information directly from children through its website.

Where consultancy assignments involve information relating to children, this information is processed solely for the professional services requested by the client and in accordance with UK data protection legislation.

17. Third Party Websites

Our website may contain links to third-party websites.

PJR Consultancy accepts no responsibility for the privacy practices of external websites.

Users should review the privacy policies of those websites before submitting personal information.

18. Data Breaches

Any suspected personal data breach will be investigated promptly.

Where required, breaches will be reported to the Information Commissioner’s Office (ICO) and affected individuals in accordance with UK GDPR.

19. Changes to this Policy

We may update this Privacy Policy from time to time.

The latest version will always be published on our website.

20. Contact Us

If you have any questions regarding this Privacy Policy or wish to exercise your data protection rights, please contact:

PJR Consultancy

Email: admin@pjr-consultancy.co.uk

21. Information Commissioner’s Office

If you remain dissatisfied after contacting us, you have the right to complain to the Information Commissioner’s Office.

Information Commissioner’s Office (ICO)

Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone: 0303 123 1113

Website: https://ico.org.uk

PJR Consultancy

Supporting organisations to develop, open and improve outstanding children’s homes through practical consultancy, strong governance and continuous improvement.